last executing test programs: 7.71160796s ago: executing program 1 (id=80): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4048800) socket$inet_tcp(0x2, 0x1, 0x0) 7.707507202s ago: executing program 4 (id=81): socket(0x10, 0x80002, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) setreuid(0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, 0x0, 0x3000c085) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 7.243716616s ago: executing program 1 (id=84): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x100000, 0x0, {}, 0x0, 0x6}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.498211058s ago: executing program 1 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, 0x0, 0x0) 6.492726305s ago: executing program 4 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xfff1, 0xb}, {0xe, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.354335688s ago: executing program 0 (id=90): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5aa}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 6.229466621s ago: executing program 0 (id=91): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r1, r0, 0x0) 6.160735489s ago: executing program 0 (id=92): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x7c, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 6.091723731s ago: executing program 2 (id=93): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c", 0xb5, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 6.020204739s ago: executing program 1 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x99d02c, 0x0) 5.967331511s ago: executing program 3 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x0, 0x0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x2, 0xe, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x74, 0x43, 0x2}, 0x50) socket(0x40000000015, 0x5, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x8, 0x7d, 0xfffffffffffffffd, 0x5, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x40000000000006, 0xae07, 0x9, 0x4, 0x12, 0x80000006, 0x6}, 0x0, 0x0) 5.937248224s ago: executing program 2 (id=96): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x1ff) mount(&(0x7f0000000600)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='cifs\x00', 0x0, &(0x7f0000000580)='unc=\\\\127.0.0.1\\share,ip=127.0.0.1,port=20000,user=root,pass=root,vers=2.0\x00') 5.876878619s ago: executing program 4 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x100000, 0x0, {}, 0x0, 0x6}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.811574293s ago: executing program 1 (id=98): syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r5 = fanotify_init(0x40, 0x101000) fanotify_mark(r5, 0x1, 0x8000039, r4, 0x0) 4.196420345s ago: executing program 1 (id=99): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="000c04000000ca25c3ae"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.1099032s ago: executing program 2 (id=100): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff2, 0xf}, {}, {0x7, 0xffff}}}, 0x24}}, 0x4800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 3.827421751s ago: executing program 0 (id=101): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x4, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x184}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r2, 0x0) shutdown(r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)={0x268, 0x0, 0x5, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xf1d9}, 0x3, 0x3, 0x1, 0x3, 0x26, 'syz1\x00', "23707500344f229d060376b62239c1a20d0cd464cadfd33a9a94ccf0e218dda2", "7e9ea6076861bf624ff2665fa86680f1193a87faeb80d3af33bfca0a957ff6a3", [{0x7, 0x9, {0x3, 0x10001}}, {0xf, 0x8, {0x0, 0x811}}, {0x8000, 0xfffe, {0x0, 0x1}}, {0x10, 0x5, {0x0, 0x9}}, {0x1, 0x7ff, {0x2, 0xffffff7f}}, {0x6, 0x2, {0x3, 0x5}}, {0x6, 0xdf9d, {0x3, 0xffff}}, {0x4, 0xfff8, {0x3, 0x200}}, {0xac, 0x0, {0x2, 0x6}}, {0x4, 0x100, {0x1, 0x6}}, {0x400, 0x7f, {0x3, 0x9}}, {0x6, 0xa, {0x1, 0x3}}, {0xabd4, 0x4, {0x0, 0x4}}, {0x4, 0x2, {0x0, 0x9}}, {0xc, 0x9, {0x2, 0x8}}, {0x0, 0xfff7, {0x3, 0x8}}, {0x2, 0x7, {0x1}}, {0x5, 0x2, {0x0, 0x2}}, {0x8, 0x8000, {0x1, 0x1}}, {0x2, 0x4, {0x3, 0x4}}, {0x800, 0x3c4e, {0x2, 0x2}}, {0xa8fa, 0x0, {0x2, 0x5}}, {0x4c0, 0x1}, {0x3, 0x93f, {0x1, 0x4}}, {0x8, 0x62, {0x2, 0x7}}, {0x3, 0x4, {0x1, 0x51f5}}, {0x5, 0x6, {0x0, 0x200}}, {0x9, 0x101, {0x1, 0xfffffffe}}, {0x4, 0xf80, {0x1, 0xfffffff7}}, {0x53, 0x5820, {0x3, 0xffff8001}}, {0xfffc, 0xff8b, {0x3, 0x6}}, {0xffff, 0x6, {0x5, 0x7}}, {0x2de0, 0xc, {0x1, 0x1}}, {0x4, 0x3, {0x1, 0xffff}}, {0xfffe, 0x22, {0x1, 0x4}}, {0x0, 0x4da, {0x1}}, {0x5fff, 0x4, {0x3}}, {0x0, 0x4, {0x2, 0x2}}, {0x4, 0x877, {0x1, 0x9}}, {0xff, 0x0, {0x3, 0x1}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x80}, 0x48040) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)='1', 0x1}], 0x1, 0x0, 0x0, 0x40004}}], 0x1, 0x8041) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r4, &(0x7f0000000500)=ANY=[], 0x78) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) 3.495715207s ago: executing program 3 (id=102): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x9, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 2.920696402s ago: executing program 2 (id=104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, 0x0, 0x0) 2.575971642s ago: executing program 4 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$urandom(0xffffffffffffff9c, 0x0, 0x8000, 0x0) readv(r4, 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r5, 0x0) 840.329287ms ago: executing program 4 (id=106): r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x1}, &(0x7f00000009c0)="3e12d23d346cfdeb1716f738374bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc95b4b88e17fb55ae6f1221bcf13ecff7a597f452bed6b6fb4c812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa3", 0xc2, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) 795.234349ms ago: executing program 0 (id=107): r0 = socket$packet(0x11, 0x2, 0x300) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82b7, @private0={0xfc, 0x0, '\x00', 0x1}, 0xae3e}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, 0x0, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8}, @void}}}, 0x1c}}, 0xc814) 769.423198ms ago: executing program 3 (id=108): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(r1, &(0x7f0000000f00)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./my_configfs/dlm/cluster1/comms/1/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000001100)="0200"/128, 0x80) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff) mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff) 599.506235ms ago: executing program 2 (id=109): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000c00)='0x', 0x2) 553.718992ms ago: executing program 0 (id=110): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) read(r0, &(0x7f0000000900), 0x100) read(r0, &(0x7f0000000b00), 0x100) read(r0, &(0x7f0000000d00), 0x100) read(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="010000000705810240000007058102000200", 0x12) write(r1, &(0x7f0000000800)='AAAA', 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000660000000000000218010000646c6c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000f33e93000000000000b5030000000000008500000076000000b7000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETLINK(r4, 0x400454cc, 0x8) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x24, 0x41, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@typed={0x8, 0xc4, 0x0, 0x0, @fd=r2}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) 324.52781ms ago: executing program 2 (id=111): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, 0x0, 0x0, 0x44) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8000) socket$inet(0xa, 0x801, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) 172.178791ms ago: executing program 3 (id=112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000440)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x1000000, &(0x7f00000004c0)="8452"}) 93.824286ms ago: executing program 3 (id=113): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, 0x0, &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x10, 0x2, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 0s ago: executing program 3 (id=114): socket$inet_sctp(0x2, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/236, 0xec) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.228' (ED25519) to the list of known hosts. [ 79.401839][ T5601] cgroup: Unknown subsys name 'net' [ 79.512782][ T5601] cgroup: Unknown subsys name 'cpuset' [ 79.520996][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.167233][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.706921][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.716960][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.725942][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.738690][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.741696][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.746299][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.751568][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.754982][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.756620][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.761507][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.763903][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.764882][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.766099][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.770739][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.777083][ T4932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.779132][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.782810][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.795243][ T4932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.800844][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.804662][ T4932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.807253][ T4932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.809054][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.809656][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.817691][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.821989][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.725330][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.733308][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.741266][ T5613] bridge_slave_0: entered allmulticast mode [ 85.750513][ T5613] bridge_slave_0: entered promiscuous mode [ 85.760474][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.760605][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.761974][ T5613] bridge_slave_1: entered allmulticast mode [ 85.769010][ T5613] bridge_slave_1: entered promiscuous mode [ 85.869535][ T5622] Bluetooth: hci0: command tx timeout [ 85.875950][ T5616] Bluetooth: hci1: command tx timeout [ 85.890835][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.926716][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.927080][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.927435][ T5624] bridge_slave_0: entered allmulticast mode [ 85.935705][ T5624] bridge_slave_0: entered promiscuous mode [ 85.942196][ T5616] Bluetooth: hci2: command tx timeout [ 85.942204][ T5622] Bluetooth: hci4: command tx timeout [ 85.948152][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.949666][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.950430][ T5622] Bluetooth: hci3: command tx timeout [ 85.951117][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.951559][ T5624] bridge_slave_1: entered allmulticast mode [ 85.959150][ T5624] bridge_slave_1: entered promiscuous mode [ 86.100027][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.100281][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.101786][ T5614] bridge_slave_0: entered allmulticast mode [ 86.111999][ T5614] bridge_slave_0: entered promiscuous mode [ 86.151309][ T5613] team0: Port device team_slave_0 added [ 86.154058][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.154368][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.158645][ T5614] bridge_slave_1: entered allmulticast mode [ 86.166756][ T5614] bridge_slave_1: entered promiscuous mode [ 86.178446][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.225257][ T5613] team0: Port device team_slave_1 added [ 86.243150][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.273636][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.273888][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.274233][ T5617] bridge_slave_0: entered allmulticast mode [ 86.283735][ T5617] bridge_slave_0: entered promiscuous mode [ 86.344177][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.345239][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.347375][ T5621] bridge_slave_0: entered allmulticast mode [ 86.353577][ T5621] bridge_slave_0: entered promiscuous mode [ 86.360016][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.360313][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.360703][ T5617] bridge_slave_1: entered allmulticast mode [ 86.367995][ T5617] bridge_slave_1: entered promiscuous mode [ 86.376993][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.377028][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.377104][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.397638][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.407145][ T5624] team0: Port device team_slave_0 added [ 86.409872][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.410228][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.410589][ T5621] bridge_slave_1: entered allmulticast mode [ 86.421679][ T5621] bridge_slave_1: entered promiscuous mode [ 86.484863][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.484896][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.484954][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.493535][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.502348][ T5624] team0: Port device team_slave_1 added [ 86.601401][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.618838][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.655448][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.676159][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.696421][ T5614] team0: Port device team_slave_0 added [ 86.702210][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.702226][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.702253][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.781349][ T5614] team0: Port device team_slave_1 added [ 86.784013][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.784054][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.784127][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.839278][ T5613] hsr_slave_0: entered promiscuous mode [ 86.842166][ T5613] hsr_slave_1: entered promiscuous mode [ 86.853000][ T5617] team0: Port device team_slave_0 added [ 86.905661][ T5621] team0: Port device team_slave_0 added [ 86.914211][ T5617] team0: Port device team_slave_1 added [ 86.917046][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.917097][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.917177][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.946087][ T5621] team0: Port device team_slave_1 added [ 86.981731][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.981775][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.981802][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.134259][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.134308][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.134336][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.182344][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.182391][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.182420][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.249423][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.249480][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.249508][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.297143][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.297189][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.297218][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.355365][ T5624] hsr_slave_0: entered promiscuous mode [ 87.360846][ T5624] hsr_slave_1: entered promiscuous mode [ 87.363859][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 87.364132][ T5624] Cannot create hsr debugfs directory [ 87.424528][ T5614] hsr_slave_0: entered promiscuous mode [ 87.427323][ T5614] hsr_slave_1: entered promiscuous mode [ 87.430716][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 87.430769][ T5614] Cannot create hsr debugfs directory [ 87.611966][ T5621] hsr_slave_0: entered promiscuous mode [ 87.614589][ T5621] hsr_slave_1: entered promiscuous mode [ 87.616679][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 87.616731][ T5621] Cannot create hsr debugfs directory [ 87.638224][ T5617] hsr_slave_0: entered promiscuous mode [ 87.642118][ T5617] hsr_slave_1: entered promiscuous mode [ 87.644085][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 87.644144][ T5617] Cannot create hsr debugfs directory [ 87.939769][ T5622] Bluetooth: hci0: command tx timeout [ 87.939825][ T5622] Bluetooth: hci1: command tx timeout [ 88.019041][ T5616] Bluetooth: hci3: command tx timeout [ 88.019049][ T5622] Bluetooth: hci4: command tx timeout [ 88.019091][ T5622] Bluetooth: hci2: command tx timeout [ 88.097988][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.111804][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.117536][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.130115][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.157466][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.167139][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.171162][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.185792][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.285171][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.296395][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.306382][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.317856][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.327835][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.338141][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.356719][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.366540][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.459363][ T5624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.474287][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.486134][ T5624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.498594][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.505927][ T5624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.518423][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.526817][ T5624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.540072][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.629431][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.667722][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.677725][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.686846][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.696874][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.713606][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.722552][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.724773][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.738434][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.786252][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.841645][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.841804][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.881928][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.882045][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.885949][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.908573][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.917165][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.926637][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.939349][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.948519][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.958382][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.968061][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.016014][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.112645][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.146971][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.147084][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.172387][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.195835][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.195966][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.287549][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.317253][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.346868][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.346998][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.385458][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.385656][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.418015][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.454833][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.455091][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.503431][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.503681][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.626351][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.786081][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.825130][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.825400][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.883510][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.883882][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.020070][ T5616] Bluetooth: hci1: command tx timeout [ 90.020119][ T5616] Bluetooth: hci0: command tx timeout [ 90.100742][ T5616] Bluetooth: hci4: command tx timeout [ 90.110161][ T5622] Bluetooth: hci2: command tx timeout [ 90.110258][ T5616] Bluetooth: hci3: command tx timeout [ 90.378494][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.536052][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.628395][ T5613] veth0_vlan: entered promiscuous mode [ 90.687006][ T5613] veth1_vlan: entered promiscuous mode [ 90.840230][ T5614] veth0_vlan: entered promiscuous mode [ 90.884488][ T5613] veth0_macvtap: entered promiscuous mode [ 90.916905][ T5614] veth1_vlan: entered promiscuous mode [ 90.950241][ T5613] veth1_macvtap: entered promiscuous mode [ 90.990638][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.072365][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.145378][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.163125][ T5614] veth0_macvtap: entered promiscuous mode [ 91.188624][ T5614] veth1_macvtap: entered promiscuous mode [ 91.269176][ T38] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.316777][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.321287][ T1167] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.321400][ T1167] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.321512][ T1167] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.362547][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.370451][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.412125][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.532890][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.532952][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.550740][ T92] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.551574][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.551638][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.551681][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.657875][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.657932][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.699806][ T5617] veth0_vlan: entered promiscuous mode [ 91.751914][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.751958][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.776437][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.802807][ T5624] veth0_vlan: entered promiscuous mode [ 91.813503][ T5617] veth1_vlan: entered promiscuous mode [ 91.867397][ T44] cfg80211: failed to load regulatory.db [ 91.916107][ T5624] veth1_vlan: entered promiscuous mode [ 91.934966][ T5813] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.955835][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.955873][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.988455][ T5621] veth0_vlan: entered promiscuous mode [ 92.061490][ T5617] veth0_macvtap: entered promiscuous mode [ 92.073229][ T5621] veth1_vlan: entered promiscuous mode [ 92.085414][ T5617] veth1_macvtap: entered promiscuous mode [ 92.100709][ T5616] Bluetooth: hci0: command tx timeout [ 92.100767][ T5616] Bluetooth: hci1: command tx timeout [ 92.180071][ T5622] Bluetooth: hci3: command tx timeout [ 92.180121][ T5622] Bluetooth: hci2: command tx timeout [ 92.180161][ T5622] Bluetooth: hci4: command tx timeout [ 92.198654][ T5624] veth0_macvtap: entered promiscuous mode [ 92.248689][ T5624] veth1_macvtap: entered promiscuous mode [ 92.258735][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.313557][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.341501][ T5621] veth0_macvtap: entered promiscuous mode [ 92.380645][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.380721][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.380810][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.382050][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.394199][ T5621] veth1_macvtap: entered promiscuous mode [ 92.469398][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.503309][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.514944][ T5820] : renamed from bond0 (while UP) [ 92.528457][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.630842][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.728362][ T5824] loop2: detected capacity change from 0 to 512 [ 92.747249][ T1005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.771062][ T1005] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.771181][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.771209][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.771460][ T1005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.831083][ T5824] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.9: corrupted in-inode xattr: invalid ea_ino [ 92.831278][ T5824] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.845491][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 92.845513][ C1] EXT4-fs (loop2): initial error at time 1786059879: ext4_iget_extra_inode:5210: inode 15 [ 92.845557][ C1] EXT4-fs (loop2): last error at time 1786059879: ext4_iget_extra_inode:5210: inode 15 [ 92.850256][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.850394][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.850498][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.862053][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.862198][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.877146][ T5824] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.9: couldn't read orphan inode 15 (err -117) [ 92.877611][ T5824] loop2: lost filesystem error report for type 5 error -117 [ 92.949352][ T5824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.501578][ T5828] ======================================================= [ 93.501578][ T5828] WARNING: The mand mount option has been deprecated and [ 93.501578][ T5828] and is ignored by this kernel. Remove the mand [ 93.501578][ T5828] option from the mount to silence this warning. [ 93.501578][ T5828] ======================================================= [ 94.951819][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.951869][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.105230][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.105277][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.265937][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.274822][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.354163][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.354206][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.473757][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.483653][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.536670][ T5836] tipc: Started in network mode [ 95.543261][ T5836] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 95.551425][ T5836] tipc: Enabled bearer , priority 0 [ 95.795794][ T5839] loop0: detected capacity change from 0 to 2048 [ 97.137663][ T5850] loop3: detected capacity change from 0 to 4096 [ 97.144243][ T44] tipc: Node number set to 11578026 [ 98.437597][ T5613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.586322][ T5861] warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.612280][ T5861] Zero length message leads to an empty skb [ 98.696505][ T5858] syzkaller0: entered promiscuous mode [ 98.697574][ T5858] syzkaller0: entered allmulticast mode [ 99.778025][ T5876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 99.895344][ T5876] kernel profiling enabled (shift: 5) [ 100.655149][ T5885] syzkaller0: entered promiscuous mode [ 100.663542][ T5885] syzkaller0: entered allmulticast mode [ 100.722461][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21'. [ 101.554940][ T5902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 101.576831][ T5891] tipc: Started in network mode [ 101.576888][ T5891] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 101.582547][ T5891] tipc: Enabled bearer , priority 0 [ 101.933226][ T5911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.28'. [ 103.315297][ T10] tipc: Node number set to 11578026 [ 103.469223][ T5615] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.530051][ T5925] syzkaller0: entered promiscuous mode [ 103.530093][ T5925] syzkaller0: entered allmulticast mode [ 103.626149][ T5615] usb 5-1: Using ep0 maxpacket: 16 [ 103.636129][ T5615] usb 5-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 103.662569][ T5615] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.662630][ T5615] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.707130][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.707200][ T5615] usb 5-1: Product: syz [ 103.707216][ T5615] usb 5-1: Manufacturer: syz [ 103.707232][ T5615] usb 5-1: SerialNumber: syz [ 103.762986][ T5615] usb 5-1: config 0 descriptor?? [ 103.811313][ T5912] loop1: detected capacity change from 0 to 32768 [ 103.892804][ T5912] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 104.208686][ T5723] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 104.286311][ T5912] XFS (loop1): Ending clean mount [ 104.468855][ T5723] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 104.604317][ T5723] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.605824][ T5723] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.605932][ T5723] usb 4-1: config 2 interface 0 has no altsetting 0 [ 104.608036][ T5723] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.695748][ T192] usb 5-1: USB disconnect, device number 2 [ 105.908383][ T5614] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 105.974008][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 105.991330][ T5723] usbhid 4-1:2.0: can't add hid device: -71 [ 106.002893][ T5723] usbhid 4-1:2.0: probe with driver usbhid failed with error -71 [ 106.017881][ T5723] usb 4-1: USB disconnect, device number 2 [ 106.025763][ T5950] tipc: Started in network mode [ 106.031438][ T5950] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 106.039028][ T5950] tipc: Enabled bearer , priority 0 [ 106.283644][ T5952] syzkaller0: entered promiscuous mode [ 106.289707][ T5952] syzkaller0: entered allmulticast mode [ 106.384824][ T5958] loop2: detected capacity change from 0 to 1024 [ 106.418344][ T5958] hfsplus: Bad value for 'session' [ 106.788359][ T31] audit: type=1800 audit(1786059893.036:2): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.45" name="local" dev="configfs" ino=9011 res=0 errno=0 [ 108.036754][ T5978] program syz.0.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.659231][ T44] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.834272][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 110.844148][ T44] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 110.854480][ T44] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 110.873575][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.882215][ T44] usb 3-1: Product: syz [ 110.886540][ T44] usb 3-1: Manufacturer: syz [ 110.891653][ T44] usb 3-1: SerialNumber: syz [ 110.902767][ T44] usb 3-1: config 0 descriptor?? [ 110.921272][ T44] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 110.929592][ T44] usb 3-1: setting power ON [ 110.941790][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 110.958363][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.973304][ T44] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 110.982590][ T44] usb 3-1: media controller created [ 111.024202][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 111.081337][ T44] usb 3-1: selecting invalid altsetting 6 [ 111.087485][ T44] usb 3-1: digital interface selection failed (-22) [ 111.094458][ T44] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 111.109936][ T44] usb 3-1: setting power OFF [ 111.115126][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 111.121266][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 111.130723][ T44] (NULL device *): no alternate interface [ 111.162131][ T5994] dvb-usb: bulk message failed: -22 (3/0) [ 111.705197][ T10] tipc: Node number set to 11578026 [ 111.782851][ T44] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 111.824194][ T44] usb 3-1: USB disconnect, device number 2 [ 111.846421][ T6002] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.846698][ T6002] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.889117][ T6002] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.914722][ T6002] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.923686][ T6002] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.955195][ T6002] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.974811][ T6002] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.983464][ T6002] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.000645][ T6002] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 112.007275][ T6015] tipc: Enabling of bearer rejected, failed to enable media [ 112.017489][ T6002] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 112.017601][ T6002] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.036155][ T6002] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 112.083782][ T6002] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 112.084085][ T6002] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.108497][ T6002] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 112.583017][ T6036] netlink: 'syz.4.61': attribute type 1 has an invalid length. [ 113.485560][ T6036] veth3: entered allmulticast mode [ 113.784532][ T6054] loop4: detected capacity change from 0 to 128 [ 113.868901][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.938890][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.018911][ T5622] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.025161][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.070702][ T6062] syzkaller0: entered promiscuous mode [ 114.070766][ T6062] syzkaller0: entered allmulticast mode [ 114.101157][ T5616] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.238904][ T5615] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 114.269720][ T6071] tipc: Enabling of bearer rejected, failed to enable media [ 114.279390][ T6071] syzkaller0: entered promiscuous mode [ 114.284983][ T6071] syzkaller0: entered allmulticast mode [ 114.410824][ T5615] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 114.425430][ T5615] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 114.425476][ T5615] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.425512][ T5615] usb 3-1: config 0 has no interface number 0 [ 114.425555][ T5615] usb 3-1: config 0 interface 251 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.472909][ T5615] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.472953][ T5615] usb 3-1: Product: syz [ 114.472984][ T5615] usb 3-1: Manufacturer: syz [ 114.473004][ T5615] usb 3-1: SerialNumber: syz [ 114.509365][ T5615] usb 3-1: config 0 descriptor?? [ 114.534827][ T5615] asix 3-1:0.251: probe with driver asix failed with error -22 [ 114.594387][ T6081] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 114.706804][ T6081] veth3: entered allmulticast mode [ 114.806489][ T6088] netlink: 'syz.3.77': attribute type 1 has an invalid length. [ 114.839156][ T6090] syz.1.80 uses obsolete (PF_INET,SOCK_PACKET) [ 114.846321][ T6090] syzkaller1: entered promiscuous mode [ 114.852610][ T6090] syzkaller1: entered allmulticast mode [ 114.860798][ T6090] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 114.938890][ T10] usb 3-1: USB disconnect, device number 3 [ 114.958393][ T6088] veth3: entered allmulticast mode [ 115.700554][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.85'. [ 115.939148][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.018857][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.098928][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.098982][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.136407][ T6113] tipc: Enabling of bearer rejected, failed to enable media [ 116.166389][ T6113] syzkaller0: entered promiscuous mode [ 116.172488][ T6113] syzkaller0: entered allmulticast mode [ 116.180431][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 116.202877][ T6109] syzkaller0: entered promiscuous mode [ 116.202929][ T6109] syzkaller0: entered allmulticast mode [ 116.370028][ T6124] netlink: 'syz.0.92': attribute type 1 has an invalid length. [ 116.596624][ T6125] veth5: entered allmulticast mode [ 116.638539][ T6133] CIFS: Attempting to mount //127.0.0.1/share [ 117.799320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 118.169312][ T5622] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.169433][ T5622] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.185540][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.185618][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.275088][ T5622] Bluetooth: hci4: command 0x0c1a tx timeout [ 118.293044][ T6133] CIFS: VFS: cifs_mount failed w/return code = -112 [ 119.479105][ T6154] loop7: detected capacity change from 0 to 16384 [ 119.647322][ T6157] syzkaller0: entered promiscuous mode [ 119.653311][ T6157] syzkaller0: entered allmulticast mode [ 119.770856][ T6158] loop7: detected capacity change from 16384 to 16383 [ 122.028244][ T31] audit: type=1800 audit(1786059908.276:3): pid=6180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.108" name="local" dev="configfs" ino=10492 res=0 errno=0 [ 122.275355][ T6183] gadgetfs: bound to dummy_udc driver [ 122.358580][ T6189] binder: 6188:6189 ioctl c0306201 200000000580 returned -14 [ 122.489401][ T5809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.528895][ T5615] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 122.537133][ C1] gadgetfs: connected [ 122.538677][ T5615] gadgetfs: disconnected [ 122.689104][ C1] gadgetfs: connected [ 122.694278][ T5615] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 122.703800][ T5615] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 122.703845][ T5615] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.960723][ T6183] openvswitch: netlink: Flow key attr not present in new flow. [ 123.053353][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 123.355970][ T5809] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 123.461445][ T5809] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 123.461494][ T5809] usb 2-1: config 0 has no interface number 0 [ 123.461553][ T5809] usb 2-1: config 0 interface 184 has no altsetting 0 [ 123.535294][ C1] gadgetfs: configuration #1 [ 123.543304][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.543375][ T5809] usb 2-1: Product: syz [ 123.543421][ T5809] usb 2-1: Manufacturer: syz [ 123.543443][ T5809] usb 2-1: SerialNumber: syz [ 123.549564][ T6196] gadgetfs: suspended from state 3 [ 123.554752][ T6196] gadgetfs: disconnected [ 123.580494][ T5809] usb 2-1: config 0 descriptor?? [ 123.586357][ T5615] usb 1-1: can't set config #1, error -71 [ 123.595440][ T5615] usb 1-1: USB disconnect, device number 2 [ 123.675 ** replaying previous printk message ** [ 123.675179][ T6196] ------------[ cut here ]------------ [ 123.675210][ T6196] !list_empty(&req->queue) [ 123.675253][ T6196] WARNING: drivers/usb/gadget/udc/dummy_hcd.c:710 at dummy_free_request+0x6f/0x80, CPU#0: syz.0.110/6196 [ 123.701549][ T6196] Modules linked in: [ 123.705522][ T6196] CPU: 0 UID: 0 PID: 6196 Comm: syz.0.110 Not tainted syzkaller #0 PREEMPT(full) [ 123.714838][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.725058][ T6196] RIP: 0010:dummy_free_request+0x6f/0x80 [ 123.732330][ T6196] Code: 75 22 e8 d4 31 0a fa 48 89 df 5b 41 5e e9 09 15 6d fa e8 c4 31 0a fa 90 0f 0b 90 5b 41 5e c3 cc cc cc cc cc e8 b2 31 0a fa 90 <0f> 0b 90 eb d8 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 123.753669][ T6196] RSP: 0018:ffffc90007287bb0 EFLAGS: 00010287 [ 123.760653][ T6196] RAX: ffffffff87bd523e RBX: ffff888031171200 RCX: 0000000000080000 [ 123.768662][ T6196] RDX: ffffc900127b2000 RSI: 00000000000025f4 RDI: 00000000000025f5 [ 123.776739][ T6196] RBP: 1ffff11004f8898b R08: ffffffff9058947f R09: 1ffffffff20b128f [ 123.784953][ T6196] R10: dffffc0000000000 R11: ffffffff87bd51d0 R12: ffff888027c44068 [ 123.793023][ T6196] R13: dffffc0000000000 R14: ffff888027c44068 R15: ffff888031171210 [ 123.801080][ T6196] FS: 00007faabe5b26c0(0000) GS:ffff888124f18000(0000) knlGS:0000000000000000 [ 123.810139][ T6196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.816809][ T6196] CR2: 00007fc267deb7c0 CR3: 000000007c598000 CR4: 00000000003526f0 [ 123.824898][ T6196] Call Trace: [ 123.828229][ T6196] [ 123.831247][ T6196] gadgetfs_unbind+0x1a9/0x2b0 [ 123.836067][ T6196] gadget_unbind_driver+0x1cb/0x410 [ 123.842807][ T6196] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 123.849555][ T6196] device_release_driver_internal+0x48b/0x880 [ 123.855723][ T6196] driver_detach+0x1f3/0x2d0 [ 123.862541][ T6196] bus_remove_driver+0x226/0x320 [ 123.867538][ T6196] usb_gadget_unregister_driver+0x4e/0x70 [ 123.874875][ T6196] dev_release+0x83/0x200 [ 123.879303][ T6196] ? __pfx_dev_release+0x10/0x10 [ 123.884312][ T6196] __fput+0x418/0xa50 [ 123.888359][ T6196] task_work_run+0x1d9/0x270 [ 123.893335][ T6196] ? __pfx_task_work_run+0x10/0x10 [ 123.898486][ T6196] ? ksys_read+0x242/0x270 [ 123.903039][ T6196] exit_to_user_mode_loop+0x1fa/0x730 [ 123.908467][ T6196] ? rcu_is_watching+0x15/0xb0 [ 123.913356][ T6196] do_syscall_64+0x328/0x510 [ 123.917997][ T6196] ? trace_irq_disable+0x3b/0x140 [ 123.923117][ T6196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.929373][ T6196] ? clear_bhb_loop+0x40/0x90 [ 123.934097][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.940123][ T6196] RIP: 0033:0x7faabd79e0d9 [ 123.946008][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.966860][ T6196] RSP: 002b:00007faabe5b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.975574][ T6196] RAX: 0000000000000000 RBX: 00007faabda26270 RCX: 00007faabd79e0d9 [ 123.983693][ T6196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 123.991932][ T6196] RBP: 00007faabd835024 R08: 0000000000000000 R09: 0000000000000000 [ 124.000016][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.008006][ T6196] R13: 00007faabda26308 R14: 00007faabda26270 R15: 00007ffe04a77508 [ 124.016112][ T6196] [ 124.019350][ T6196] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.026754][ T6196] CPU: 0 UID: 0 PID: 6196 Comm: syz.0.110 Not tainted syzkaller #0 PREEMPT(full) [ 124.035977][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 124.046069][ T6196] Call Trace: [ 124.049369][ T6196] [ 124.052338][ T6196] vpanic+0x56c/0xa60 [ 124.056393][ T6196] ? __pfx__printk+0x10/0x10 [ 124.061021][ T6196] ? __pfx_vpanic+0x10/0x10 [ 124.065549][ T6196] ? is_bpf_text_address+0x292/0x2b0 [ 124.070861][ T6196] ? is_bpf_text_address+0x26/0x2b0 [ 124.076099][ T6196] panic+0xc5/0xd0 [ 124.079960][ T6196] ? __pfx_panic+0x10/0x10 [ 124.084436][ T6196] __warn+0x315/0x4c0 [ 124.088461][ T6196] ? dummy_free_request+0x6f/0x80 [ 124.093519][ T6196] ? dummy_free_request+0x6f/0x80 [ 124.098619][ T6196] __report_bug+0x276/0x570 [ 124.103153][ T6196] ? dummy_free_request+0x6f/0x80 [ 124.108216][ T6196] ? __pfx___report_bug+0x10/0x10 [ 124.113287][ T6196] ? dummy_free_request+0x6f/0x80 [ 124.118328][ T6196] report_bug+0x16a/0x220 [ 124.122699][ T6196] ? dummy_free_request+0x6f/0x80 [ 124.127742][ T6196] ? dummy_free_request+0x71/0x80 [ 124.132791][ T6196] handle_bug+0x9c/0x200 [ 124.137078][ T6196] exc_invalid_op+0x1a/0x50 [ 124.141625][ T6196] asm_exc_invalid_op+0x1a/0x20 [ 124.146495][ T6196] RIP: 0010:dummy_free_request+0x6f/0x80 [ 124.152162][ T6196] Code: 75 22 e8 d4 31 0a fa 48 89 df 5b 41 5e e9 09 15 6d fa e8 c4 31 0a fa 90 0f 0b 90 5b 41 5e c3 cc cc cc cc cc e8 b2 31 0a fa 90 <0f> 0b 90 eb d8 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 [ 124.171801][ T6196] RSP: 0018:ffffc90007287bb0 EFLAGS: 00010287 [ 124.177896][ T6196] RAX: ffffffff87bd523e RBX: ffff888031171200 RCX: 0000000000080000 [ 124.185905][ T6196] RDX: ffffc900127b2000 RSI: 00000000000025f4 RDI: 00000000000025f5 [ 124.193910][ T6196] RBP: 1ffff11004f8898b R08: ffffffff9058947f R09: 1ffffffff20b128f [ 124.201920][ T6196] R10: dffffc0000000000 R11: ffffffff87bd51d0 R12: ffff888027c44068 [ 124.209909][ T6196] R13: dffffc0000000000 R14: ffff888027c44068 R15: ffff888031171210 [ 124.217920][ T6196] ? __pfx_dummy_free_request+0x10/0x10 [ 124.223493][ T6196] ? dummy_free_request+0x6e/0x80 [ 124.228555][ T6196] gadgetfs_unbind+0x1a9/0x2b0 [ 124.233363][ T6196] gadget_unbind_driver+0x1cb/0x410 [ 124.238601][ T6196] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 124.244346][ T6196] device_release_driver_internal+0x48b/0x880 [ 124.250449][ T6196] driver_detach+0x1f3/0x2d0 [ 124.255084][ T6196] bus_remove_driver+0x226/0x320 [ 124.260057][ T6196] usb_gadget_unregister_driver+0x4e/0x70 [ 124.265816][ T6196] dev_release+0x83/0x200 [ 124.270190][ T6196] ? __pfx_dev_release+0x10/0x10 [ 124.275188][ T6196] __fput+0x418/0xa50 [ 124.279222][ T6196] task_work_run+0x1d9/0x270 [ 124.283873][ T6196] ? __pfx_task_work_run+0x10/0x10 [ 124.289011][ T6196] ? ksys_read+0x242/0x270 [ 124.293456][ T6196] exit_to_user_mode_loop+0x1fa/0x730 [ 124.298854][ T6196] ? rcu_is_watching+0x15/0xb0 [ 124.303646][ T6196] do_syscall_64+0x328/0x510 [ 124.308261][ T6196] ? trace_irq_disable+0x3b/0x140 [ 124.313302][ T6196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.319438][ T6196] ? clear_bhb_loop+0x40/0x90 [ 124.324245][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.330165][ T6196] RIP: 0033:0x7faabd79e0d9 [ 124.334599][ T6196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.354226][ T6196] RSP: 002b:00007faabe5b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.362706][ T6196] RAX: 0000000000000000 RBX: 00007faabda26270 RCX: 00007faabd79e0d9 [ 124.370958][ T6196] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 124.378976][ T6196] RBP: 00007faabd835024 R08: 0000000000000000 R09: 0000000000000000 [ 124.387052][ T6196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.395059][ T6196] R13: 00007faabda26308 R14: 00007faabda26270 R15: 00007ffe04a77508 [ 124.403088][ T6196] [ 124.406314][ T6196] Kernel Offset: disabled [ 124.410657][ T6196] Rebooting in 86400 seconds..