last executing test programs: 21m24.772313755s ago: executing program 1 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, 0x0, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 21m21.037389221s ago: executing program 1 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, 0x0, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 21m18.593465641s ago: executing program 1 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = gettid() r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r3 = syz_io_uring_setup(0x497, 0x0, 0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getresuid(&(0x7f0000000200), 0x0, 0x0) sendmsg$nl_netfilter(r5, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r1, @ANYBLOB="0400f28000a2a3f32b9e6f94a3f16c24a558fe76b11a6b4b577599bc1bfa896ec523143e19268f2aa7705849c1ccbc5f9e8d14c2513b1cd6384a136450b4b93a88c98c2c9720b78398919ce7aed767c432e2b847fb8ad06733ee77a10dee7a9ca5dfa2447a81dd88f29ffb23a5b4c2ad021a823560271a15f24bea6d674610313277db865abb500b7d61d7c75141b0a53eb5df4431524dc3392c73266e3636f0d92a9f70ef13ccca9c9b72754e8edaad14750e3c5bed4472466073b3f32a1ec6ccdc8e08d50a6ce4b49dbe50f73eba28676c4708003b000200000005004900000000000800a400", @ANYRES32=r3, @ANYBLOB], 0x4fc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) syz_io_uring_submit(0x0, r4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05003347b90400000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c000480280001800b0001006c6f6f6b75700000180002800900010073797a320000000008000240000000000900010073797a3000000000140000001100010000000000000000000000000abcd236c993e2d33edd84b0ead9f7fbfc5805e27ce1b15622f4a75af5511ca3bce5582d74976b4f38"], 0xc8}}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r7, 0x0, &(0x7f0000004540)) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc18, &(0x7f0000001e40)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0) 21m12.448651716s ago: executing program 1 (id=42): getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x100}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, 0x0, 0x0) bind$x25(r0, &(0x7f0000000040), 0x12) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) kexec_load(0x58fb, 0x55, &(0x7f00000195c0), 0x160000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x7, 0xa}, {0x0, 0xf}}}, 0x24}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000199c0)={r2, 0xe0, &(0x7f00000198c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000194c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000019500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000019780)=[0x0], 0x0, 0x3f, &(0x7f00000197c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000019800), &(0x7f0000019840), 0x8, 0x46, 0x8, 0x8, &(0x7f0000019880)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000019a80)={'syztnl1\x00', &(0x7f0000019a00)={'ip6tnl0\x00', 0x0, 0x29, 0x6a, 0x8, 0x400, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0xff80, 0x80, 0x1, 0x101}}) getpeername$packet(r2, &(0x7f0000019ac0), &(0x7f0000019b00)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1c, &(0x7f0000019580)=ANY=[@ANYBLOB, @ANYRES64=r3, @ANYRESHEX=r0, @ANYRES32=r4, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21m4.590491045s ago: executing program 1 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, 0x0, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 21m2.742897176s ago: executing program 1 (id=50): socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x1, @rand_addr=0x64010102, 0x4e23, 0x3, 'nq\x00', 0x3a, 0x660f537f, 0x6e}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000001c0)=0x2, 0x4) r3 = timerfd_create(0x0, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffefff) timerfd_settime(r3, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x4, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) timerfd_settime(r3, 0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000c5}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)=0x387) 20m47.103056191s ago: executing program 32 (id=50): socket$kcm(0xa, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000240)={0x1, @rand_addr=0x64010102, 0x4e23, 0x3, 'nq\x00', 0x3a, 0x660f537f, 0x6e}, 0x2c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000001c0)=0x2, 0x4) r3 = timerfd_create(0x0, 0x0) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x7fffefff) timerfd_settime(r3, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x4, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) timerfd_settime(r3, 0x3, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240000c5}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000080)=0x387) 20m5.087788413s ago: executing program 4 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) 20m1.681352931s ago: executing program 4 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, 0x0, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 19m58.225201402s ago: executing program 4 (id=112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x5608, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000140)=0x400) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x0, 0x2a, 0x0, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x2, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@generic={0x7, 0xc, "09904b30ad2bb70fdad1"}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0xf, [{@broadcast, 0xfffffff0}, {@local, 0x8001}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40858}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 19m51.41543284s ago: executing program 4 (id=119): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, 0x0, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 19m48.705508174s ago: executing program 4 (id=120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x5608, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000140)=0x400) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbfe, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES64=r1], 0x0, 0x2a, 0x0, 0x1}, 0x28) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40858}, 0x0) 19m42.145104918s ago: executing program 4 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, 0x0, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 19m24.877139335s ago: executing program 33 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r0, 0xc, &(0x7f0000000180)={0x8, 0x6}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x24}}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2901401, 0x0, 0x0, 0x0, &(0x7f000009de00)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, 0x0, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) 8m22.300923454s ago: executing program 0 (id=1288): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c0) statfs(&(0x7f0000000140)='./file7\x00', &(0x7f00000001c0)=""/121) 8m22.079483295s ago: executing program 0 (id=1290): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000040)={0x0, r4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, &(0x7f0000000480)={0xbf, 0x1f, 0x4, 0x7, "3f6052c5b79469f9d481daca49d1674e917316239561a5ace8b12c66bfc1f586"}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1}, {0xfff3}}}, 0x24}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) 8m20.863493025s ago: executing program 0 (id=1294): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8m20.629520437s ago: executing program 0 (id=1296): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 8m20.181361699s ago: executing program 0 (id=1300): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x12ca, 0x80, 0x0, 0x51}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f0000000340)=[{&(0x7f0000001f80)="5aaa0073fe7710faf973eb45ccddfa1ef8fa0d76262b6be90097a5939155b7ad533f431922908da53f9bbe37d411eacedc5ef99870b469b9b81102d479aad60f5188988847b24d662e7742938f67c74f7ea74e388aba1c87d9a744c5823b509dba2dddc1c9e915d0ead88d16b04b2bc71e14fa07d5bbcc9e8fa8ed297db0338e9c8d7c1b5a89fb7478d503535b257f4648dbe938a8d8a148cca92b8e0a5ebfed1bcf", 0xa2}], 0x1, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) 8m17.799925378s ago: executing program 0 (id=1305): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 8m16.240157266s ago: executing program 34 (id=1305): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 6m6.321721631s ago: executing program 2 (id=1557): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 6m6.154246669s ago: executing program 2 (id=1559): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f00000047c0)={0x2020}, 0x2020) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x48042, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000180)=""/171, 0xab) creat(&(0x7f00000000c0)='./file1/file0\x00', 0xa0) 6m1.497226861s ago: executing program 2 (id=1575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 5m58.069364292s ago: executing program 2 (id=1574): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x44080, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x1000, &(0x7f0000001dc0)={0xf, 0x0, 0x40000}, 0x20) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000440)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5m54.161495267s ago: executing program 2 (id=1582): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000019}) epoll_wait(r1, &(0x7f00000000c0)=[{}], 0x1, 0x5f) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 5m51.990742195s ago: executing program 2 (id=1587): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) 5m36.764164124s ago: executing program 35 (id=1587): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0) 1m48.218180395s ago: executing program 6 (id=2042): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r5, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 1m46.613514854s ago: executing program 6 (id=2047): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x1010000, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=cp864,iocharset=ate=1,iocharset=cp857,dos1xfloppy,utf8=1,utf8=0,uni_xlate=1,uni_xlate=0,uni_xlate=1,shortname=winnt,codepage=1251,utf8=0,shortname=lower,utf8=0,check=strict,iocharset=cp936,\x00'/212], 0x1, 0x36b, &(0x7f0000000500)="$eJzs3U1oY0UcAPB/+tKkXdD2JgpC9CZo2e5NL7ZIFxZ7UQl+HMTgdlWSKrRYbA+b1oPiUfCoJ28KevAgHkVQxJsHr64gq+JB97bg4kjy8vGapN3uYivF3w+aTGfmP/N/HySv4WX6wlI0L07HpWvXrsbMTCnKS48txfVSzEcWfbsxrjKhDgA4Ha6nFH+m3GjbzOSQ0gmkBQAco+77/0sRUYv5vObNrw/rn7z7A8Cp1/v7f/awPgd8DhDx2rGkBAAcs7HP/+/f11zp/pT7v5YLdwUAAKfVU88+9/jyasSTtdpMxPrbW/WtejwybF++FK9EK9bibMzFjYj8QqHzUOo+nr+wunK2Vqu145f5qEfEVC+wnl8pLGfd+GosxlzM9+J7Vxsppez8Z6sri7WuiNhtd+eP9dJWfTrO9Ob/8UysDS88+oN0nyIurK6cq/UGqK/349sRe8MbFTr5L8RcfP/iYJiU+ncwrq5cXuwnPYzfqlfj4mAvHPgJCAAAAAAAAAAAAAAAAAAAAAAA3JaF2sD8YP2c1HnOV8pZWJjQ3l0fJ4/vrQ+0l68PlKopUvrjjYfq72Sxb32g0fV5tiwkCAAAAAAAAAAAAAAAAAAAAAOb25VotFprG5vbO81iob2xuT0VEZ2aV7/95KvZGO9zk0I5n6IaMZii1pt2p9lIWb9zyiLGw7PO5P2ajz4fZFzsUx1sxcQ0qgc3tVp33Pfz+8Oae7P+yH8P+2QxeQOzQhqPjoy8fmee0q3sqEHhXLGmOj77lZRSoeatYvjl58cHjFJE+dYP3E5zKg7ukzqFb66+fHd/7ze+TLkHHpx7+sp7H/7WbLQ6M0f3CFY2Nm+kZqPU73yE2XvDpe4hGJ4bpcgLpeKZUD5swL39NY3sh9+fuefd7462E1Kx5vXO+TzSJ8s359PR8Epe6KQ50jQ7DJ/ubURrbXrCyX+zwm0c07s++OLjlH769chTDE2NvWyU/p1XHwAAAAAAAAAAAAAAAAAAoKjwXfHel67becP0YVEPP3FC6QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiRj+//9CYW83RmqOUvirPSGquraxGVH5rzcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uX8CAAD//3wwZok=") r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r2, 0x4b48, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) getrlimit(0xa, &(0x7f0000000140)) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x800) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a40)=@deltaction={0xe0, 0x32, 0x201, 0x0, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x88, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xffffffffffffffcf, 0x1, 'connmark\x00'}}, {0x14, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2000006}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x8004) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x240, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000000c0)={0x1, 0xef, 0x556f, 0x4, 0x6}) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8000000000000001, 0x4}, &(0x7f0000000100)) r7 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r7, 0x8955, 0x0) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x406f413, 0x0) 1m45.110778678s ago: executing program 6 (id=2050): creat(&(0x7f0000000000)='./file0\x00', 0x14e) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000280)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x2, 0xa, 0x0, 0x0, 0x2, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r2, r0) 1m42.093643917s ago: executing program 6 (id=2057): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000001c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) acct(&(0x7f0000000040)='./file0\x00') 1m35.785946238s ago: executing program 6 (id=2071): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x4) socket(0x10, 0x803, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) syz_init_net_socket$ax25(0x3, 0x5, 0xc3) socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) fanotify_init(0x11, 0x101000) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 1m32.29999657s ago: executing program 6 (id=2077): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r5 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x10, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @random="c4bc9cac9686", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1e, 0x28, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast1, @remote}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x1}}}}}}, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000c80)="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"}) close_range(r4, r1, 0x2) 1m16.401318334s ago: executing program 36 (id=2077): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') r5 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_buf(r5, 0x1, 0x10, 0x0, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB], 0x0}, 0x94) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @random="c4bc9cac9686", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x1e, 0x28, 0x67, 0x0, 0x9, 0x6, 0x0, @multicast1, @remote}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x1, 0x0, 0x1}}}}}}, 0x0) ioctl$KDFONTOP_SET(r6, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000c80)="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"}) close_range(r4, r1, 0x2) 9.581522478s ago: executing program 9 (id=2240): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0100, 0x0) r4 = socket(0x10, 0x3, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 8.776000768s ago: executing program 5 (id=2242): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) 8.281289152s ago: executing program 9 (id=2244): kexec_load(0x4, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) kexec_load(0x58fb, 0x0, 0x0, 0x160000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019300)=ANY=[], 0x50) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) getpeername$packet(r1, &(0x7f0000019ac0), &(0x7f0000019b00)=0x14) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setreuid(0x0, 0xee01) 7.200155636s ago: executing program 5 (id=2245): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000000080)={0x38, 0x0, r1, [{0x0, 0x0, 0xa, 0x0, '/>\rv/cuse\x00'}]}, 0x38) 6.50246808s ago: executing program 5 (id=2247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "135b8c7160ce130ea8d78ca4fb6d996790bbf2f9d0b286707d80114457e10ad24c02e392aac7dbab58b533b8b70e8a23e7b3888b330521c45fdd5732d25f67982176a8ed8af803bda9feffaf20f95e2a1735da7e05e01affb0e88236a1c91b06f3a6498c04b631a4a9d3fc0f5b5713552205f2dc15778a851fd9e233a9906b329fc3c5a67a790b05c1486b82f1da4f59f51aa36207d96b85b0b48a5986fc021af71ff23241924f6e7dd747f2aba5e9d3dcd7c41f5e1b8b29435c0a16c1b5ffc7a516278587fc18dbee4244b08a1b3779a30f54b4ff7c8b448bff96a888ac93067dd66d53898daf09f5232d8df69110d8683e147e73183c09aa8a648b18de695e"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 6.418608944s ago: executing program 9 (id=2249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x1ff, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 6.345943828s ago: executing program 3 (id=2250): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./file0\x00', 0x112) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000000)) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @default}) sendmsg$nl_route(r0, 0x0, 0x0) 6.148086567s ago: executing program 7 (id=2251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x4c}}, 0x0) 6.047041773s ago: executing program 8 (id=2252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xf5b30000) syz_emit_ethernet(0x6e, &(0x7f00000010c0)=ANY=[], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, 0x0, 0x0, 0x28, &(0x7f0000000200)=ANY=[]) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x18, 0x30, 0x400, 0x70bd26, 0x0, {}, [{0x1}]}, 0x31}}, 0x91) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f00000001c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x29, 0x10, 0x0, 0x3, 0x47, @local, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffcef}, 0x48) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) 5.841319063s ago: executing program 5 (id=2253): r0 = socket$kcm(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0xa0000, 0xa1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x202400) mkdir(0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000480)) close(r4) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, 0x0, 0x0) connect$inet6(r4, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) socket$key(0xf, 0x3, 0x2) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5.577315315s ago: executing program 7 (id=2254): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0100, 0x0) r4 = socket(0x10, 0x3, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.178524825s ago: executing program 3 (id=2255): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) 4.829233842s ago: executing program 9 (id=2256): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket(0x1e, 0x1, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 4.763476206s ago: executing program 8 (id=2257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c40), 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 3.753467196s ago: executing program 3 (id=2258): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) epoll_create1(0x0) epoll_create1(0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 3.215020582s ago: executing program 9 (id=2259): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010100ffd9f810f80600b0f97d0102030109021b0401000000020904000001ff615a00090588"], 0x0) 2.375207284s ago: executing program 7 (id=2260): kexec_load(0x4, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) bind$x25(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) kexec_load(0x58fb, 0x0, 0x0, 0x160000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019300)=ANY=[], 0x50) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, 0x0) getpeername$packet(r1, &(0x7f0000019ac0), &(0x7f0000019b00)=0x14) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setreuid(0x0, 0xee01) 1.761051614s ago: executing program 8 (id=2261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000002a40), 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x3a}}], 0x400000000000172, 0x4001c00) 1.63238147s ago: executing program 3 (id=2262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x40, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xa9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 1.469460848s ago: executing program 8 (id=2263): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "135b8c7160ce130ea8d78ca4fb6d996790bbf2f9d0b286707d80114457e10ad24c02e392aac7dbab58b533b8b70e8a23e7b3888b330521c45fdd5732d25f67982176a8ed8af803bda9feffaf20f95e2a1735da7e05e01affb0e88236a1c91b06f3a6498c04b631a4a9d3fc0f5b5713552205f2dc15778a851fd9e233a9906b329fc3c5a67a790b05c1486b82f1da4f59f51aa36207d96b85b0b48a5986fc021af71ff23241924f6e7dd747f2aba5e9d3dcd7c41f5e1b8b29435c0a16c1b5ffc7a516278587fc18dbee4244b08a1b3779a30f54b4ff7c8b448bff96a888ac93067dd66d53898daf09f5232d8df69110d8683e147e73183c09aa8a648b18de695e"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0x2, 0x1}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 1.42781739s ago: executing program 7 (id=2264): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff7}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) 1.245500839s ago: executing program 5 (id=2265): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./file0\x00', 0x112) mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000000)) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @default}) sendmsg$nl_route(r0, 0x0, 0x0) 1.22765149s ago: executing program 3 (id=2266): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x2c, r0, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}, @chandef_params]}, 0x2c}}, 0x0) 1.111760796s ago: executing program 7 (id=2267): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x45c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xffffffff, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x1ff, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3f, 0x2, 0x0, 0x0, 0x97ab, 0x40}, {0x2, 0x0, 0x3, 0x57, 0x8, 0x3}, 0x1, 0x2, 0xa2d}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 943.750074ms ago: executing program 3 (id=2268): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) 682.592737ms ago: executing program 8 (id=2269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000a80)="683f0057950d7678de7263988b02ec9bdcc8", 0x12}], 0x3) 460.696618ms ago: executing program 7 (id=2270): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0100, 0x0) r4 = socket(0x10, 0x3, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 239.332158ms ago: executing program 9 (id=2271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 237.305439ms ago: executing program 5 (id=2272): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbefb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)}, {&(0x7f0000000080)="2947ccfbab120bb6a8b5", 0xa}], 0x2}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) 0s ago: executing program 8 (id=2273): futex_waitv(&(0x7f0000001b00)=[{0x1, &(0x7f0000000000)=0x1, 0x6}], 0x1, 0x0, 0x0, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x34, &(0x7f0000000180)=@string={0x34, 0x3, "98fc0742cea0b75173d0900b8e75a2fcb902215d4a03e227c98f9d3312a88135abfe0a0d37ddc7c8754d44a71ae55058f2eb"}}, {0x76, &(0x7f0000000280)=@string={0x76, 0x3, "4dedb1ccf5ed9bbd86bd61c5dd541f6d8347f8d69962636ef5eb8d5d7e3c41bde3b739857ebfd4317815279da7c510942bdc818103a6e258e449337c48d19724eb4968845a3c20e7bc5f1e7fc8c221bdf101fb7b14c6ce2e179a22b067533d13fcf9e4453c87e804955006389fcbaa1fb5ccf1d1"}}, {0x4e, &(0x7f0000000380)=@string={0x4e, 0x3, "ceea34eb260b2b5302c00b5bd2813a7a758579e7920ed0545a86ebea3dadac6050aaccdb98d2e9f7250a8c77e9f8edeb90be93c5cbd17f183e72261d952e77ede74e92bf6f3e8c28ba1f70b1"}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x26020480) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="04230d00c9"], 0x10) socket$kcm(0x11, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_setup(0x200, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): 4279] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1087.363682][T11980] loop7: detected capacity change from 0 to 256 [ 1087.438217][T11980] FAT-fs (loop7): Directory bread(block 64) failed [ 1087.445122][T11980] FAT-fs (loop7): Directory bread(block 65) failed [ 1087.452146][T11980] FAT-fs (loop7): Directory bread(block 66) failed [ 1087.459179][T11980] FAT-fs (loop7): Directory bread(block 67) failed [ 1087.466753][T11980] FAT-fs (loop7): Directory bread(block 68) failed [ 1087.473488][T11980] FAT-fs (loop7): Directory bread(block 69) failed [ 1087.480441][T11980] FAT-fs (loop7): Directory bread(block 70) failed [ 1087.487139][T11980] FAT-fs (loop7): Directory bread(block 71) failed [ 1087.493960][T11980] FAT-fs (loop7): Directory bread(block 72) failed [ 1087.500634][T11980] FAT-fs (loop7): Directory bread(block 73) failed [ 1090.598574][ T5115] team0 (unregistering): Port device team_slave_1 removed [ 1090.986235][ T5115] team0 (unregistering): Port device team_slave_0 removed [ 1091.146084][ T5115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.210126][ T5115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.795476][ T5115] bond0 (unregistering): Released all slaves [ 1091.967007][T11927] device syzkaller0 entered promiscuous mode [ 1094.744818][ T8363] lo speed is unknown, defaulting to 1000 [ 1094.745063][T11980] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1688'. [ 1094.773114][T11980] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1688'. [ 1094.790657][T11980] tc_dump_action: action bad kind [ 1094.824264][T11995] tipc: Enabled bearer , priority 0 [ 1094.855237][T11996] device syzkaller0 entered promiscuous mode [ 1094.892111][T12005] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1692'. [ 1095.190847][T12005] tipc: Resetting bearer [ 1095.475190][T12005] tipc: Disabling bearer [ 1096.152911][T11732] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1096.298379][T11732] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1096.366219][T11732] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1097.499848][T11732] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1099.351828][T11732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1099.522883][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1099.531084][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1099.628507][T11732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1099.712413][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1099.731521][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1100.619274][ T4585] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.626534][ T4585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.973898][T11732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1100.984499][T11732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1101.062164][T12056] tipc: Enabled bearer , priority 0 [ 1101.069102][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1101.080901][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1101.090352][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1101.100759][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.107988][ T4585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1101.119873][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1101.130824][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1101.140303][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1101.188876][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1101.233952][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1101.264149][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1101.288460][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1101.337393][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1101.549593][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1101.739363][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1101.925457][T12058] device syzkaller0 entered promiscuous mode [ 1102.026616][T12054] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1704'. [ 1102.232028][T12056] tipc: Resetting bearer [ 1102.323541][T12046] tipc: Resetting bearer [ 1102.421199][T12046] tipc: Disabling bearer [ 1102.640497][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1102.663602][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1103.529628][T12088] loop6: detected capacity change from 0 to 256 [ 1103.614438][T12088] FAT-fs (loop6): Directory bread(block 64) failed [ 1103.621184][T12088] FAT-fs (loop6): Directory bread(block 65) failed [ 1103.628191][T12088] FAT-fs (loop6): Directory bread(block 66) failed [ 1103.635083][T12088] FAT-fs (loop6): Directory bread(block 67) failed [ 1103.642343][T12088] FAT-fs (loop6): Directory bread(block 68) failed [ 1103.649031][T12088] FAT-fs (loop6): Directory bread(block 69) failed [ 1103.656016][T12088] FAT-fs (loop6): Directory bread(block 70) failed [ 1103.662756][T12088] FAT-fs (loop6): Directory bread(block 71) failed [ 1103.669653][T12088] FAT-fs (loop6): Directory bread(block 72) failed [ 1103.676382][T12088] FAT-fs (loop6): Directory bread(block 73) failed [ 1103.799731][T12088] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1710'. [ 1103.809126][T12088] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1710'. [ 1103.818394][T12088] tc_dump_action: action bad kind [ 1106.664679][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1106.744592][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1106.848724][T12110] fuse: Bad value for 'fd' [ 1106.880502][T11732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.293648][T12137] tipc: Enabled bearer , priority 0 [ 1110.325817][T12141] device syzkaller0 entered promiscuous mode [ 1110.512268][T12136] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1721'. [ 1110.552418][T12131] device syzkaller0 entered promiscuous mode [ 1112.825402][T12136] tipc: Resetting bearer [ 1112.878444][T12130] tipc: Resetting bearer [ 1113.026092][T12130] tipc: Disabling bearer [ 1113.170221][T12163] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1113.300581][T12166] fuse: Bad value for 'fd' [ 1113.412655][T12170] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1726'. [ 1113.961591][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1113.998024][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1114.132493][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1114.142768][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1114.206471][T11732] device veth0_vlan entered promiscuous mode [ 1114.230657][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1114.286356][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1114.361632][T12181] loop3: detected capacity change from 0 to 256 [ 1114.417271][T12181] FAT-fs (loop3): Directory bread(block 64) failed [ 1114.424371][T12181] FAT-fs (loop3): Directory bread(block 65) failed [ 1114.431195][T12181] FAT-fs (loop3): Directory bread(block 66) failed [ 1114.437986][T12181] FAT-fs (loop3): Directory bread(block 67) failed [ 1114.445076][T12181] FAT-fs (loop3): Directory bread(block 68) failed [ 1114.451755][T12181] FAT-fs (loop3): Directory bread(block 69) failed [ 1114.458652][T12181] FAT-fs (loop3): Directory bread(block 70) failed [ 1114.465368][T12181] FAT-fs (loop3): Directory bread(block 71) failed [ 1114.472716][T12181] FAT-fs (loop3): Directory bread(block 72) failed [ 1114.479398][T12181] FAT-fs (loop3): Directory bread(block 73) failed [ 1114.636217][T12181] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1730'. [ 1114.645469][T12181] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1730'. [ 1115.081562][ T4338] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1115.311529][ T4338] usb 6-1: Using ep0 maxpacket: 16 [ 1115.320974][ T4338] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.497816][ T4338] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1115.682072][ T4338] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1115.817425][ T4338] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.866395][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.872985][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.944446][ T4338] usb 6-1: Product: syz [ 1115.998631][ T4338] usb 6-1: Manufacturer: syz [ 1116.059935][ T4338] usb 6-1: SerialNumber: syz [ 1116.145906][T12181] tc_dump_action: action bad kind [ 1116.179358][T11732] device veth1_vlan entered promiscuous mode [ 1116.439697][ T4338] usb 6-1: 0:2 : does not exist [ 1116.559829][ T4338] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1116.970713][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1117.102428][ T4338] usb 6-1: USB disconnect, device number 12 [ 1117.144183][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1117.607896][T11526] udevd[11526]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1119.314291][T12200] loop5: detected capacity change from 0 to 256 [ 1122.454982][T12208] device syzkaller0 entered promiscuous mode [ 1123.252201][T12214] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1123.701220][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1123.730242][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1123.738526][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1123.746680][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1123.755196][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1123.762929][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1123.865781][T12222] fuse: Bad value for 'fd' [ 1123.943971][T12225] tipc: Enabled bearer , priority 0 [ 1124.014555][T12228] device syzkaller0 entered promiscuous mode [ 1124.837001][T12225] tipc: Resetting bearer [ 1124.942687][T12235] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1741'. [ 1125.197285][T12224] tipc: Resetting bearer [ 1125.967386][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1126.003789][T12238] loop3: detected capacity change from 0 to 256 [ 1126.063741][T12238] FAT-fs (loop3): Directory bread(block 64) failed [ 1126.070455][T12238] FAT-fs (loop3): Directory bread(block 65) failed [ 1126.077558][T12238] FAT-fs (loop3): Directory bread(block 66) failed [ 1126.084313][T12238] FAT-fs (loop3): Directory bread(block 67) failed [ 1126.091172][T12238] FAT-fs (loop3): Directory bread(block 68) failed [ 1126.097928][T12238] FAT-fs (loop3): Directory bread(block 69) failed [ 1126.105202][T12238] FAT-fs (loop3): Directory bread(block 70) failed [ 1126.111970][T12238] FAT-fs (loop3): Directory bread(block 71) failed [ 1126.118915][T12238] FAT-fs (loop3): Directory bread(block 72) failed [ 1126.125683][T12238] FAT-fs (loop3): Directory bread(block 73) failed [ 1128.021789][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1129.010525][ T127] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1129.070693][T12224] tipc: Disabling bearer [ 1129.094584][T12238] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1744'. [ 1129.114476][T12238] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1744'. [ 1129.127113][T12238] tc_dump_action: action bad kind [ 1129.201411][ T127] usb 6-1: Using ep0 maxpacket: 16 [ 1129.261988][ T127] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.102225][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1130.168075][ T127] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.329809][ T127] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1130.386857][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.417033][ T127] usb 6-1: Product: syz [ 1130.422906][ T127] usb 6-1: Manufacturer: syz [ 1130.427822][ T127] usb 6-1: SerialNumber: syz [ 1130.977223][ T127] usb 6-1: 0:2 : does not exist [ 1131.002562][ T127] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1131.151051][ T127] usb 6-1: USB disconnect, device number 13 [ 1131.388267][T12104] udevd[12104]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1132.191503][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1132.208898][T12217] chnl_net:caif_netlink_parms(): no params data found [ 1132.377468][T12281] device syzkaller0 entered promiscuous mode [ 1133.493874][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.501230][T12217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.538865][T12217] device bridge_slave_0 entered promiscuous mode [ 1133.631864][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.651420][T12217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.659836][T12217] device bridge_slave_1 entered promiscuous mode [ 1133.788678][T12217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.870371][T12217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.980018][T12217] team0: Port device team_slave_0 added [ 1133.997989][T12217] team0: Port device team_slave_1 added [ 1134.040358][T12217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1134.056752][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.091820][T12217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1134.118322][T12217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1134.125814][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1134.159615][T12217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1134.365553][T12217] device hsr_slave_0 entered promiscuous mode [ 1134.381174][T12217] device hsr_slave_1 entered promiscuous mode [ 1134.399642][T12217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1134.419214][T12217] Cannot create hsr debugfs directory [ 1134.881226][T12313] loop6: detected capacity change from 0 to 1024 [ 1135.073686][T12313] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1136.765152][T12328] loop3: detected capacity change from 0 to 256 [ 1136.838370][ T6998] EXT4-fs (loop6): unmounting filesystem. [ 1136.854125][T12328] FAT-fs (loop3): Directory bread(block 64) failed [ 1136.860860][T12328] FAT-fs (loop3): Directory bread(block 65) failed [ 1136.867902][T12328] FAT-fs (loop3): Directory bread(block 66) failed [ 1136.874663][T12328] FAT-fs (loop3): Directory bread(block 67) failed [ 1136.881669][T12328] FAT-fs (loop3): Directory bread(block 68) failed [ 1136.888390][T12328] FAT-fs (loop3): Directory bread(block 69) failed [ 1136.895534][T12328] FAT-fs (loop3): Directory bread(block 70) failed [ 1136.902282][T12328] FAT-fs (loop3): Directory bread(block 71) failed [ 1136.909289][T12328] FAT-fs (loop3): Directory bread(block 72) failed [ 1136.916450][T12328] FAT-fs (loop3): Directory bread(block 73) failed [ 1138.094816][T12328] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1758'. [ 1138.104374][T12328] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1758'. [ 1138.113524][T12328] tc_dump_action: action bad kind [ 1140.719306][T12341] tipc: Enabled bearer , priority 0 [ 1141.368985][T12346] device syzkaller0 entered promiscuous mode [ 1141.447257][T12341] tipc: Resetting bearer [ 1141.485846][T12353] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1761'. [ 1141.937704][T12340] tipc: Resetting bearer [ 1142.176307][T12340] tipc: Disabling bearer [ 1143.090317][T12217] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1143.372092][T12217] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1143.401945][T12217] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1143.464013][T12217] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1143.685348][ T4585] device hsr_slave_0 left promiscuous mode [ 1144.083729][ T4585] device hsr_slave_1 left promiscuous mode [ 1144.122089][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.262262][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.316586][ T4585] device bridge_slave_1 left promiscuous mode [ 1144.329671][ T4585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.417289][ T4585] device bridge_slave_0 left promiscuous mode [ 1144.481450][ T4585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.652228][ T8396] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1145.779210][ T4585] device veth1_vlan left promiscuous mode [ 1145.818536][ T4585] device veth0_vlan left promiscuous mode [ 1145.851439][ T8396] usb 7-1: Using ep0 maxpacket: 16 [ 1145.858603][ T8396] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.925155][ T8396] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.982777][ T8396] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1146.001131][ T8396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.139198][ T8396] usb 7-1: Product: syz [ 1146.149327][ T8396] usb 7-1: Manufacturer: syz [ 1147.116381][T12400] loop3: detected capacity change from 0 to 256 [ 1147.145002][T12400] FAT-fs (loop3): Directory bread(block 64) failed [ 1147.151849][T12400] FAT-fs (loop3): Directory bread(block 65) failed [ 1147.158802][T12400] FAT-fs (loop3): Directory bread(block 66) failed [ 1147.165414][T12400] FAT-fs (loop3): Directory bread(block 67) failed [ 1147.172062][T12400] FAT-fs (loop3): Directory bread(block 68) failed [ 1147.178865][T12400] FAT-fs (loop3): Directory bread(block 69) failed [ 1147.185512][T12400] FAT-fs (loop3): Directory bread(block 70) failed [ 1147.192122][T12400] FAT-fs (loop3): Directory bread(block 71) failed [ 1147.198835][T12400] FAT-fs (loop3): Directory bread(block 72) failed [ 1147.205551][T12400] FAT-fs (loop3): Directory bread(block 73) failed [ 1147.278800][ T8396] usb 7-1: SerialNumber: syz [ 1147.979050][ T8396] usb 7-1: 0:2 : does not exist [ 1147.996965][ T8396] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1148.241874][ T8396] usb 7-1: USB disconnect, device number 20 [ 1149.703914][T12104] udevd[12104]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1150.563199][ T4585] team0 (unregistering): Port device team_slave_1 removed [ 1150.619947][ T4585] team0 (unregistering): Port device team_slave_0 removed [ 1150.674111][ T4585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1150.730284][ T4585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1151.091160][ T4585] bond0 (unregistering): Released all slaves [ 1151.208680][T12400] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1778'. [ 1151.217918][T12400] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1778'. [ 1151.227038][T12400] tc_dump_action: action bad kind [ 1151.256940][T12407] tipc: Enabled bearer , priority 0 [ 1151.275441][T12410] device syzkaller0 entered promiscuous mode [ 1151.303819][T12427] device syzkaller0 entered promiscuous mode [ 1151.401208][T12410] tipc: Resetting bearer [ 1151.460789][T12410] tipc: Disabling bearer [ 1151.495007][T12217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1151.529993][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1151.548435][ T8634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1151.604276][T12217] 8021q: adding VLAN 0 to HW filter on device team0 [ 1151.640578][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1151.662881][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1151.683938][ T8626] bridge0: port 1(bridge_slave_0) entered blocking state [ 1151.691299][ T8626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1151.710622][T12445] loop5: detected capacity change from 0 to 1024 [ 1151.719794][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1151.735313][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1151.757621][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1151.804622][T12445] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1151.816302][ T8626] bridge0: port 2(bridge_slave_1) entered blocking state [ 1151.823547][ T8626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1151.849651][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1151.906784][T12449] tipc: Enabled bearer , priority 0 [ 1151.918676][T12454] device syzkaller0 entered promiscuous mode [ 1151.927883][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1151.937980][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1151.959944][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1152.932466][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1152.948355][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1153.029236][ T27] audit: type=1800 audit(1774056461.947:59): pid=12458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1783" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1153.089744][ T7268] EXT4-fs (loop5): unmounting filesystem. [ 1153.145481][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1153.211380][ T27] audit: type=1800 audit(1774056461.967:60): pid=12459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1783" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 1153.233368][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1153.281822][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1153.336268][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1153.368964][ T8626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1153.516172][T12217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1153.527140][T12444] tipc: Resetting bearer [ 1153.556621][T12442] tipc: Resetting bearer [ 1154.406502][T12442] tipc: Disabling bearer [ 1155.432064][T12485] delete_channel: no stack [ 1156.329600][T12491] loop5: detected capacity change from 0 to 512 [ 1156.368370][T12492] device syzkaller0 entered promiscuous mode [ 1156.529035][T12491] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1156.553173][T12491] EXT4-fs warning (device loop5): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1156.595730][T12491] EXT4-fs (loop5): mount failed [ 1156.689945][T12104] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1157.023931][T12502] loop5: detected capacity change from 0 to 256 [ 1157.797456][ T4585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1160.854114][ T4585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.037764][ T4585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.093611][T12510] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1795'. [ 1162.111557][T12510] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1795'. [ 1162.138069][T12510] tc_dump_action: action bad kind [ 1162.256434][ T4585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.421430][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1162.428990][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1162.524582][T12217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.554513][T12533] tipc: Enabled bearer , priority 0 [ 1162.785173][T12538] device syzkaller0 entered promiscuous mode [ 1163.770950][T12531] tipc: Resetting bearer [ 1164.873198][T12531] tipc: Disabling bearer [ 1166.011554][ T8396] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1166.231566][ T8396] usb 7-1: Using ep0 maxpacket: 16 [ 1166.244238][ T8396] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.551364][ T8396] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1166.809316][ T8396] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1166.833284][ T8396] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.851360][ T8396] usb 7-1: Product: syz [ 1167.628805][ T8396] usb 7-1: Manufacturer: syz [ 1167.693551][T12587] loop3: detected capacity change from 0 to 256 [ 1167.708488][ T8396] usb 7-1: SerialNumber: syz [ 1167.762645][T12587] FAT-fs (loop3): Directory bread(block 64) failed [ 1167.770787][T12587] FAT-fs (loop3): Directory bread(block 65) failed [ 1167.777641][T12587] FAT-fs (loop3): Directory bread(block 66) failed [ 1167.784452][T12587] FAT-fs (loop3): Directory bread(block 67) failed [ 1167.791386][T12587] FAT-fs (loop3): Directory bread(block 68) failed [ 1167.798060][T12587] FAT-fs (loop3): Directory bread(block 69) failed [ 1167.805043][T12587] FAT-fs (loop3): Directory bread(block 70) failed [ 1167.811734][T12587] FAT-fs (loop3): Directory bread(block 71) failed [ 1167.818604][T12587] FAT-fs (loop3): Directory bread(block 72) failed [ 1167.825386][T12587] FAT-fs (loop3): Directory bread(block 73) failed [ 1168.216439][ T8396] usb 7-1: 0:2 : does not exist [ 1168.333652][ T8396] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1168.836466][ T8396] usb 7-1: USB disconnect, device number 21 [ 1169.395551][T12587] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1809'. [ 1169.404691][T12587] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1809'. [ 1169.413790][T12587] tc_dump_action: action bad kind [ 1169.427201][T12104] udevd[12104]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1170.227418][T12599] loop7: detected capacity change from 0 to 512 [ 1170.434233][T12599] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 1170.674080][T12599] EXT4-fs warning (device loop7): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1171.216315][T12599] EXT4-fs (loop7): mount failed [ 1171.400712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1171.442348][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1171.548315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1171.572416][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1171.779001][T12618] loop7: detected capacity change from 0 to 256 [ 1174.264013][T12217] device veth0_vlan entered promiscuous mode [ 1174.294802][T12217] device veth1_vlan entered promiscuous mode [ 1174.378114][T12622] tipc: Enabled bearer , priority 0 [ 1174.665793][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1174.712878][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1174.801217][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1174.843607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1175.630969][T12639] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1816'. [ 1175.669565][T12612] tipc: Disabling bearer [ 1175.716645][T12217] device veth0_macvtap entered promiscuous mode [ 1175.905628][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1176.009999][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1176.211564][ T4314] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1176.441483][ T4314] usb 7-1: Using ep0 maxpacket: 16 [ 1176.488193][ T4314] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.580543][ T4314] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1176.661104][T12217] device veth1_macvtap entered promiscuous mode [ 1176.673567][ T4314] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1176.692445][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1176.773541][ T4314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.809782][ T4314] usb 7-1: Product: syz [ 1176.837444][ T4314] usb 7-1: Manufacturer: syz [ 1176.879940][ T4314] usb 7-1: SerialNumber: syz [ 1177.253578][ T4314] usb 7-1: 0:2 : does not exist [ 1177.306168][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.312737][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.349690][ T4314] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1177.791809][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.824322][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.834259][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.844898][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.856699][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.909873][T12669] loop5: detected capacity change from 0 to 256 [ 1178.609784][T12669] FAT-fs (loop5): Directory bread(block 64) failed [ 1178.616927][T12669] FAT-fs (loop5): Directory bread(block 65) failed [ 1178.623980][T12669] FAT-fs (loop5): Directory bread(block 66) failed [ 1178.630634][T12669] FAT-fs (loop5): Directory bread(block 67) failed [ 1178.637654][T12669] FAT-fs (loop5): Directory bread(block 68) failed [ 1178.644354][T12669] FAT-fs (loop5): Directory bread(block 69) failed [ 1178.651341][T12669] FAT-fs (loop5): Directory bread(block 70) failed [ 1178.657986][T12669] FAT-fs (loop5): Directory bread(block 71) failed [ 1178.665152][T12669] FAT-fs (loop5): Directory bread(block 72) failed [ 1178.672258][T12669] FAT-fs (loop5): Directory bread(block 73) failed [ 1179.355626][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.515899][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.675436][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.832853][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.013055][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.180698][T12217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1181.277216][T12669] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1824'. [ 1181.286598][T12669] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1824'. [ 1181.295783][T12669] tc_dump_action: action bad kind [ 1181.302266][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1181.366496][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1182.015418][ T4314] usb 7-1: USB disconnect, device number 22 [ 1182.235000][T12104] udevd[12104]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1182.389507][ T27] audit: type=1326 audit(1774056491.387:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12687 comm="syz.3.1828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2d7bb9c799 code=0x0 [ 1182.936614][T12700] loop5: detected capacity change from 0 to 256 [ 1182.975547][T12700] FAT-fs (loop5): Directory bread(block 64) failed [ 1182.982215][T12700] FAT-fs (loop5): Directory bread(block 65) failed [ 1182.988836][T12700] FAT-fs (loop5): Directory bread(block 66) failed [ 1182.995684][T12700] FAT-fs (loop5): Directory bread(block 67) failed [ 1183.002340][T12700] FAT-fs (loop5): Directory bread(block 68) failed [ 1183.008914][T12700] FAT-fs (loop5): Directory bread(block 69) failed [ 1183.015590][T12700] FAT-fs (loop5): Directory bread(block 70) failed [ 1183.022225][T12700] FAT-fs (loop5): Directory bread(block 71) failed [ 1183.028852][T12700] FAT-fs (loop5): Directory bread(block 72) failed [ 1183.035545][T12700] FAT-fs (loop5): Directory bread(block 73) failed [ 1183.902123][T10479] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1183.911990][T10479] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1183.924896][T10479] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1183.933891][T10479] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1183.942871][T10479] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1183.950278][T10479] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1186.027145][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1188.111565][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1188.867256][T12699] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1838'. [ 1188.889836][T12699] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1838'. [ 1188.905390][T12699] tc_dump_action: action bad kind [ 1189.000599][T12722] tipc: Enabled bearer , priority 0 [ 1189.062804][T12736] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1833'. [ 1189.090955][T12727] device syzkaller0 entered promiscuous mode [ 1189.369435][T12727] tipc: Resetting bearer [ 1189.462407][ T4364] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1189.721844][ T4364] usb 6-1: Using ep0 maxpacket: 16 [ 1189.738859][ T4364] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.884955][ T4364] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1190.034266][ T4364] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1190.113994][ T4364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.142499][ T4364] usb 6-1: Product: syz [ 1190.146727][ T4364] usb 6-1: Manufacturer: syz [ 1190.168269][ T4364] usb 6-1: SerialNumber: syz [ 1190.181561][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1190.195141][T12727] tipc: Disabling bearer [ 1190.401989][ T4585] device hsr_slave_0 left promiscuous mode [ 1190.440218][ T4585] device hsr_slave_1 left promiscuous mode [ 1190.459421][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1190.478481][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1190.486752][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1190.501817][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1190.509812][ T4585] device bridge_slave_1 left promiscuous mode [ 1190.524007][ T4585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.532635][ T4364] usb 6-1: 0:2 : does not exist [ 1190.553893][ T4364] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1190.588360][ T4585] device bridge_slave_0 left promiscuous mode [ 1190.606534][ T4585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.646951][ T4364] usb 6-1: USB disconnect, device number 14 [ 1190.747737][ T4585] device veth1_macvtap left promiscuous mode [ 1190.789848][ T4585] device veth0_macvtap left promiscuous mode [ 1190.807454][ T4585] device veth1_vlan left promiscuous mode [ 1190.849705][ T4585] device veth0_vlan left promiscuous mode [ 1190.930296][T12759] udevd[12759]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1192.261398][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1192.869066][T12782] loop5: detected capacity change from 0 to 2048 [ 1193.033885][T12789] loop6: detected capacity change from 0 to 256 [ 1193.081418][T12789] FAT-fs (loop6): Directory bread(block 64) failed [ 1193.088145][T12789] FAT-fs (loop6): Directory bread(block 65) failed [ 1193.095419][T12789] FAT-fs (loop6): Directory bread(block 66) failed [ 1193.102138][T12789] FAT-fs (loop6): Directory bread(block 67) failed [ 1193.109024][T12789] FAT-fs (loop6): Directory bread(block 68) failed [ 1193.115802][T12789] FAT-fs (loop6): Directory bread(block 69) failed [ 1193.122988][T12789] FAT-fs (loop6): Directory bread(block 70) failed [ 1193.129659][T12789] FAT-fs (loop6): Directory bread(block 71) failed [ 1193.136744][T12789] FAT-fs (loop6): Directory bread(block 72) failed [ 1193.143465][T12789] FAT-fs (loop6): Directory bread(block 73) failed [ 1194.899601][T12782] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1194.948653][T12782] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1195.171743][ T4585] bond1 (unregistering): Released all slaves [ 1196.815443][ T7268] EXT4-fs (loop5): unmounting filesystem. [ 1197.985069][ T4585] team0 (unregistering): Port device team_slave_1 removed [ 1198.094189][ T4585] team0 (unregistering): Port device team_slave_0 removed [ 1198.182624][ T4585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1198.256192][ T4585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1198.924936][ T4585] bond0 (unregistering): Released all slaves [ 1199.043875][T12793] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1847'. [ 1199.056474][T12793] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1847'. [ 1199.067358][T12793] tc_dump_action: action bad kind [ 1199.106157][T12816] tipc: Enabled bearer , priority 0 [ 1199.123649][T12817] device syzkaller0 entered promiscuous mode [ 1199.135476][T12826] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1852'. [ 1199.623402][ T4314] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1199.811438][ T4314] usb 7-1: Using ep0 maxpacket: 16 [ 1199.826356][ T4314] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.869094][ T4314] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1199.928516][ T4314] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1199.963936][ T4314] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.004573][ T4314] usb 7-1: Product: syz [ 1200.020579][ T4314] usb 7-1: Manufacturer: syz [ 1200.037958][ T4314] usb 7-1: SerialNumber: syz [ 1200.326871][ T4314] usb 7-1: 0:2 : does not exist [ 1200.338251][ T4314] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1200.430269][ T4314] usb 7-1: USB disconnect, device number 23 [ 1200.943319][T12759] udevd[12759]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1202.035624][T12861] ubi: mtd0 is already attached to ubi31 [ 1203.378108][T12867] fuse: Bad value for 'group_id' [ 1203.597843][T12870] loop6: detected capacity change from 0 to 256 [ 1203.651171][T12870] FAT-fs (loop6): Directory bread(block 64) failed [ 1203.658271][T12870] FAT-fs (loop6): Directory bread(block 65) failed [ 1203.665336][T12870] FAT-fs (loop6): Directory bread(block 66) failed [ 1203.672052][T12870] FAT-fs (loop6): Directory bread(block 67) failed [ 1203.679423][T12870] FAT-fs (loop6): Directory bread(block 68) failed [ 1203.686258][T12870] FAT-fs (loop6): Directory bread(block 69) failed [ 1203.693303][T12870] FAT-fs (loop6): Directory bread(block 70) failed [ 1203.699956][T12870] FAT-fs (loop6): Directory bread(block 71) failed [ 1203.707261][T12870] FAT-fs (loop6): Directory bread(block 72) failed [ 1203.714102][T12870] FAT-fs (loop6): Directory bread(block 73) failed [ 1208.160313][T12826] tipc: Resetting bearer [ 1208.199039][T12826] tipc: Disabling bearer [ 1208.216428][T12870] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1866'. [ 1208.229003][T12870] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1866'. [ 1208.245426][T12870] tc_dump_action: action bad kind [ 1209.655537][T12898] tipc: Enabled bearer , priority 0 [ 1209.669131][T12898] device syzkaller0 entered promiscuous mode [ 1209.764040][T12898] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1877'. [ 1209.791408][T12902] CUSE: DEVNAME unspecified [ 1209.835256][T12893] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1209.957770][T12898] tipc: Resetting bearer [ 1210.089723][T12897] tipc: Resetting bearer [ 1210.216307][T12897] tipc: Disabling bearer [ 1210.425569][T12707] chnl_net:caif_netlink_parms(): no params data found [ 1211.156000][T11362] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1211.511670][T11362] usb 4-1: Using ep0 maxpacket: 16 [ 1211.529886][T11362] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.682337][T11362] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1211.691620][T11666] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1211.877885][T11362] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1211.881582][T11666] usb 7-1: Using ep0 maxpacket: 16 [ 1211.949647][T11362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.033495][T11362] usb 4-1: Product: syz [ 1212.063440][T11362] usb 4-1: Manufacturer: syz [ 1212.110680][T11362] usb 4-1: SerialNumber: syz [ 1212.273245][T11666] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 152, changing to 11 [ 1212.297931][T11666] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1212.306478][T11666] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1212.324441][T11666] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.347630][T11666] usb 7-1: config 0 descriptor?? [ 1212.399180][T12707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1212.436528][T11362] usb 4-1: 0:2 : does not exist [ 1212.471071][T11362] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1212.484410][T12707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1212.532000][T12707] device bridge_slave_0 entered promiscuous mode [ 1212.565979][T11362] usb 4-1: USB disconnect, device number 11 [ 1212.680246][T12707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.690555][T12707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.698874][T12927] fuse: Bad value for 'group_id' [ 1212.712500][T12707] device bridge_slave_1 entered promiscuous mode [ 1212.796312][T11666] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1212.817264][T12759] udevd[12759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.865579][T12707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.902860][T12707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.185587][T12707] team0: Port device team_slave_0 added [ 1213.273432][T12707] team0: Port device team_slave_1 added [ 1213.410605][T11362] usb 7-1: USB disconnect, device number 24 [ 1213.472383][T12707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.496454][T12707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.560679][T12707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.577675][T12707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.585394][T12707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.616542][T12707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.735752][T12707] device hsr_slave_0 entered promiscuous mode [ 1214.763449][T12707] device hsr_slave_1 entered promiscuous mode [ 1214.843576][T12954] loop5: detected capacity change from 0 to 256 [ 1214.867268][T12707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.875009][T12707] Cannot create hsr debugfs directory [ 1214.962434][T11362] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1215.059110][T12954] FAT-fs (loop5): Directory bread(block 64) failed [ 1215.066651][T12954] FAT-fs (loop5): Directory bread(block 65) failed [ 1215.073369][T12954] FAT-fs (loop5): Directory bread(block 66) failed [ 1215.080087][T12954] FAT-fs (loop5): Directory bread(block 67) failed [ 1215.086790][T12954] FAT-fs (loop5): Directory bread(block 68) failed [ 1215.093490][T12954] FAT-fs (loop5): Directory bread(block 69) failed [ 1215.100116][T12954] FAT-fs (loop5): Directory bread(block 70) failed [ 1215.106742][T12954] FAT-fs (loop5): Directory bread(block 71) failed [ 1215.113464][T12954] FAT-fs (loop5): Directory bread(block 72) failed [ 1215.120047][T12954] FAT-fs (loop5): Directory bread(block 73) failed [ 1215.233645][T11362] usb 4-1: Using ep0 maxpacket: 16 [ 1215.241937][T11362] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.268128][T11362] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1215.417459][T11362] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1215.440680][T12954] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1881'. [ 1215.449804][T12954] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1881'. [ 1216.271406][T12954] tc_dump_action: action bad kind [ 1216.319988][T11362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.340056][T11362] usb 4-1: Product: syz [ 1216.344855][T11362] usb 4-1: Manufacturer: syz [ 1216.349558][T11362] usb 4-1: SerialNumber: syz [ 1216.783371][T11362] usb 4-1: 0:2 : does not exist [ 1216.838309][T11362] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1216.913745][T11362] usb 4-1: USB disconnect, device number 12 [ 1217.202613][T12759] udevd[12759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1217.721676][T11666] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1217.921418][T11666] usb 7-1: Using ep0 maxpacket: 16 [ 1217.923998][T12975] CUSE: DEVNAME unspecified [ 1217.931178][T11666] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1217.931477][T11666] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1217.949002][T11666] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1217.957357][T11666] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1217.972363][T11666] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1217.993063][T11666] usb 7-1: config 0 has no interface number 0 [ 1217.999424][T11666] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1218.012759][T11666] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1218.025563][T11666] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1218.038101][T11666] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1218.056639][T11666] usb 7-1: config 0 interface 125 has no altsetting 0 [ 1218.120872][T11666] usb 7-1: config 0 interface 125 has no altsetting 2 [ 1218.168244][T11666] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1218.180328][T11666] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.190441][T11666] usb 7-1: Product: syz [ 1218.194800][T11666] usb 7-1: Manufacturer: syz [ 1218.202764][T11666] usb 7-1: SerialNumber: syz [ 1218.237417][T11666] usb 7-1: config 0 descriptor?? [ 1218.251162][T11666] usb 7-1: selecting invalid altsetting 2 [ 1218.651539][ T4585] device hsr_slave_0 left promiscuous mode [ 1218.685676][ T4585] device hsr_slave_1 left promiscuous mode [ 1218.751618][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1218.769501][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1218.810003][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1218.836332][ T4585] device bridge_slave_1 left promiscuous mode [ 1218.878732][ T4585] bridge0: port 2(bridge_slave_1) entered disabled state [ 1218.936952][ T4585] device bridge_slave_0 left promiscuous mode [ 1218.980157][ T4585] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.988490][T12983] fuse: Bad value for 'group_id' [ 1219.065038][T11666] parport1: fix this legacy no-device port driver! [ 1219.130359][ T4585] device veth1_macvtap left promiscuous mode [ 1219.141545][ T4585] device veth0_macvtap left promiscuous mode [ 1219.156287][ T4585] device veth1_vlan left promiscuous mode [ 1219.239913][T12989] loop5: detected capacity change from 0 to 256 [ 1219.287450][ T4585] device veth0_vlan left promiscuous mode [ 1219.300813][T12989] FAT-fs (loop5): Directory bread(block 64) failed [ 1219.307634][T12989] FAT-fs (loop5): Directory bread(block 65) failed [ 1219.314715][T12989] FAT-fs (loop5): Directory bread(block 66) failed [ 1219.321446][T12989] FAT-fs (loop5): Directory bread(block 67) failed [ 1219.328304][T12989] FAT-fs (loop5): Directory bread(block 68) failed [ 1219.335193][T12989] FAT-fs (loop5): Directory bread(block 69) failed [ 1219.342212][T12989] FAT-fs (loop5): Directory bread(block 70) failed [ 1219.349148][T12989] FAT-fs (loop5): Directory bread(block 71) failed [ 1219.356300][T12989] FAT-fs (loop5): Directory bread(block 72) failed [ 1219.363027][T12989] FAT-fs (loop5): Directory bread(block 73) failed [ 1220.294537][T12970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.362689][T12970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.510963][T12970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.661087][T12970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1220.850561][ T8392] usb 7-1: USB disconnect, device number 25 [ 1224.169221][T11666] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1224.350697][ T4585] team0 (unregistering): Port device team_slave_1 removed [ 1224.381502][T11666] usb 4-1: Using ep0 maxpacket: 16 [ 1224.406955][T11666] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.418005][ T4585] team0 (unregistering): Port device team_slave_0 removed [ 1224.427435][T11666] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1224.456352][T11666] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1224.467807][T11666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.476386][T11666] usb 4-1: Product: syz [ 1224.480610][T11666] usb 4-1: Manufacturer: syz [ 1224.485392][T11666] usb 4-1: SerialNumber: syz [ 1224.522469][ T4585] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1224.588128][ T4585] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1224.702132][T11666] usb 4-1: 0:2 : does not exist [ 1224.731931][T11666] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1224.768457][T11666] usb 4-1: USB disconnect, device number 13 [ 1224.996461][T12759] udevd[12759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1225.019684][ T4585] bond0 (unregistering): Released all slaves [ 1225.145156][T12989] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1887'. [ 1225.154666][T12989] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1887'. [ 1225.167463][T12989] tc_dump_action: action bad kind [ 1225.477074][T13037] loop7: detected capacity change from 0 to 256 [ 1225.549943][T13037] FAT-fs (loop7): Directory bread(block 64) failed [ 1225.556855][T13037] FAT-fs (loop7): Directory bread(block 65) failed [ 1225.563746][T13037] FAT-fs (loop7): Directory bread(block 66) failed [ 1225.570540][T13037] FAT-fs (loop7): Directory bread(block 67) failed [ 1225.577520][T13037] FAT-fs (loop7): Directory bread(block 68) failed [ 1225.584292][T13037] FAT-fs (loop7): Directory bread(block 69) failed [ 1225.591171][T13037] FAT-fs (loop7): Directory bread(block 70) failed [ 1225.598368][T13037] FAT-fs (loop7): Directory bread(block 71) failed [ 1225.605442][T13037] FAT-fs (loop7): Directory bread(block 72) failed [ 1225.612318][T13037] FAT-fs (loop7): Directory bread(block 73) failed [ 1225.776785][T13037] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1905'. [ 1225.786000][T13037] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1905'. [ 1225.795190][T13037] tc_dump_action: action bad kind [ 1226.033017][T12707] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1226.402825][T12707] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1226.689519][T12707] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1226.953093][T12707] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1228.358893][T13041] loop5: detected capacity change from 0 to 2048 [ 1228.741541][T13041] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1228.872415][T13041] ext4 filesystem being mounted at /275/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.062398][T12707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.109234][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1230.132234][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1230.180506][T12707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.209695][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1230.244476][ T7268] EXT4-fs (loop5): unmounting filesystem. [ 1230.296869][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1230.342093][ T4766] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.349239][ T4766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.410356][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1230.443280][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1230.460808][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1230.476406][ T4766] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.483642][ T4766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.505649][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1230.516323][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1230.776896][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1232.789141][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1232.873135][ T4766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1233.041909][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1233.104302][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1233.132403][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1233.172086][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1233.210757][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1233.262002][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1233.323974][T12707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1237.214833][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1237.228006][ T8641] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1237.380996][T12707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1238.857668][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.885397][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.490114][T10479] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1242.511176][T10479] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1242.541674][T10479] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1242.555768][T10479] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1242.563910][T10479] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1242.583112][T10479] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1243.426347][T13202] CUSE: DEVNAME unspecified [ 1243.904221][T13178] chnl_net:caif_netlink_parms(): no params data found [ 1244.041313][ T8399] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1244.741066][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 1245.001496][ T8399] usb 4-1: Using ep0 maxpacket: 16 [ 1245.015361][ T8399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1245.041324][ T8399] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1245.104260][ T8399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.135699][ T8399] usb 4-1: config 0 descriptor?? [ 1245.197906][T13178] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.242086][T13178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1245.253370][T13178] device bridge_slave_0 entered promiscuous mode [ 1245.262495][T13178] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.269718][T13178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.278335][T13178] device bridge_slave_1 entered promiscuous mode [ 1245.563484][T13178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.810539][T13178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1246.021664][ T8399] mcp2221 0003:04D8:00DD.0009: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1246.060298][T13178] team0: Port device team_slave_0 added [ 1246.258832][T13178] team0: Port device team_slave_1 added [ 1246.343683][T13178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1246.389915][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.456436][T13178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1246.479413][ T8392] usb 4-1: USB disconnect, device number 14 [ 1246.555343][T13178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1246.579110][T13178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1246.605268][ C1] vkms_vblank_simulate: vblank timer overrun [ 1246.640306][T13178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1246.821861][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 1246.855484][T13178] device hsr_slave_0 entered promiscuous mode [ 1246.897878][T13178] device hsr_slave_1 entered promiscuous mode [ 1246.907783][T13178] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1246.917035][T13178] Cannot create hsr debugfs directory [ 1248.373868][T13270] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.234606][ T48] Bluetooth: hci5: command 0x040f tx timeout [ 1251.301347][ T48] Bluetooth: hci5: command 0x0419 tx timeout [ 1252.089924][ T4437] device hsr_slave_0 left promiscuous mode [ 1252.132037][ T4437] device hsr_slave_1 left promiscuous mode [ 1252.437335][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.462156][ T4437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.521512][ T7194] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1252.751559][ T7194] usb 6-1: Using ep0 maxpacket: 16 [ 1252.813839][ T7194] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1252.960551][ T7194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.102876][ T7194] usb 6-1: Product: syz [ 1253.117393][ T7194] usb 6-1: Manufacturer: syz [ 1253.138588][ T7194] usb 6-1: SerialNumber: syz [ 1253.214379][ T4437] device bridge_slave_1 left promiscuous mode [ 1253.220901][ T4437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.229335][ T7194] r8152-cfgselector 6-1: config 0 descriptor?? [ 1253.342701][ T4437] device bridge_slave_0 left promiscuous mode [ 1253.349264][ T4437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.503321][ T7194] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1254.525367][ T7194] r8152-cfgselector 6-1: bad CDC descriptors [ 1254.634827][ T7194] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1254.674640][ T7194] r8152-cfgselector 6-1: USB disconnect, device number 15 [ 1256.071992][T13357] fuse: Unknown parameter 'grou00000000000000000000' [ 1256.201523][T13359] loop3: detected capacity change from 0 to 2048 [ 1256.248526][T13359] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1256.276326][T13359] ext4 filesystem being mounted at /455/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.246189][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 1257.326108][ T4437] team0 (unregistering): Port device team_slave_1 removed [ 1257.391300][ T4338] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1257.822240][ T4437] team0 (unregistering): Port device team_slave_0 removed [ 1257.841328][ T4338] usb 6-1: Using ep0 maxpacket: 16 [ 1258.362058][ T4338] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.374338][ T4437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.381408][ T4338] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.402927][ T4338] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1258.416341][ T4338] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1258.423316][ T4338] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1258.432565][ T4338] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.443512][ T4338] usb 6-1: config 0 descriptor?? [ 1258.592339][ T4437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.702712][T13393] fuse: Unknown parameter 'grou00000000000000000000' [ 1260.057475][T13399] loop3: detected capacity change from 0 to 2048 [ 1260.066157][ T4437] bond0 (unregistering): Released all slaves [ 1260.127701][T13399] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1260.142841][T13399] ext4 filesystem being mounted at /460/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1261.451658][ T4338] usbhid 6-1:0.0: can't add hid device: -71 [ 1261.456035][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 1261.457964][ T4338] usbhid: probe of 6-1:0.0 failed with error -71 [ 1261.485006][ T4338] usb 6-1: USB disconnect, device number 16 [ 1261.584505][T13178] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1261.663058][T13178] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1261.704846][T13178] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1261.746514][T13178] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1262.608039][T13178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.641020][T13428] tipc: Enabled bearer , priority 0 [ 1262.650437][T13431] fuse: Unknown parameter 'grou00000000000000000000' [ 1262.688659][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1262.730826][ T2924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1262.835326][T13178] 8021q: adding VLAN 0 to HW filter on device team0 [ 1262.885864][T13435] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1993'. [ 1262.987849][T13440] loop3: detected capacity change from 0 to 256 [ 1264.629986][T13438] tipc: Resetting bearer [ 1264.652562][T13440] FAT-fs (loop3): Directory bread(block 64) failed [ 1264.659305][T13440] FAT-fs (loop3): Directory bread(block 65) failed [ 1264.666581][T13440] FAT-fs (loop3): Directory bread(block 66) failed [ 1264.673811][T13440] FAT-fs (loop3): Directory bread(block 67) failed [ 1264.680842][T13440] FAT-fs (loop3): Directory bread(block 68) failed [ 1264.687752][T13440] FAT-fs (loop3): Directory bread(block 69) failed [ 1264.694829][T13440] FAT-fs (loop3): Directory bread(block 70) failed [ 1264.701547][T13440] FAT-fs (loop3): Directory bread(block 71) failed [ 1264.709026][T13440] FAT-fs (loop3): Directory bread(block 72) failed [ 1264.715903][T13440] FAT-fs (loop3): Directory bread(block 73) failed [ 1265.521364][T13440] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1995'. [ 1265.561161][T13440] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1995'. [ 1265.628945][T13440] tc_dump_action: action bad kind [ 1267.282465][T13425] tipc: Disabling bearer [ 1267.317056][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1267.336554][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1267.413889][ T4781] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.421040][ T4781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.486259][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1267.533689][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1267.562347][ T4781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.569542][ T4781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.634857][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1267.644265][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1267.660677][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1267.715678][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1267.766474][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1267.782115][T13459] loop7: detected capacity change from 0 to 2048 [ 1267.845522][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1267.895974][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1267.906653][T13459] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1267.932073][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1267.972511][T13459] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1268.006763][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1268.023300][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1268.045202][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1268.059264][ T4781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1268.126611][T13178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1268.893605][T10478] EXT4-fs (loop7): unmounting filesystem. [ 1269.163338][T13481] fuse: Unknown parameter 'group_i00000000000000000000' [ 1271.141517][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1271.178243][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1271.490969][T13178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.912233][T13511] loop7: detected capacity change from 0 to 256 [ 1272.016225][T13511] FAT-fs (loop7): Directory bread(block 64) failed [ 1272.023090][T13511] FAT-fs (loop7): Directory bread(block 65) failed [ 1272.029871][T13511] FAT-fs (loop7): Directory bread(block 66) failed [ 1272.036950][T13511] FAT-fs (loop7): Directory bread(block 67) failed [ 1272.043864][T13511] FAT-fs (loop7): Directory bread(block 68) failed [ 1272.050581][T13511] FAT-fs (loop7): Directory bread(block 69) failed [ 1272.057592][T13511] FAT-fs (loop7): Directory bread(block 70) failed [ 1272.064615][T13511] FAT-fs (loop7): Directory bread(block 71) failed [ 1272.071740][T13511] FAT-fs (loop7): Directory bread(block 72) failed [ 1272.078387][T13511] FAT-fs (loop7): Directory bread(block 73) failed [ 1272.198855][T13511] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2011'. [ 1272.208249][T13511] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2011'. [ 1272.217368][T13511] tc_dump_action: action bad kind [ 1273.473724][T13515] loop3: detected capacity change from 0 to 2048 [ 1273.865490][T13515] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1274.000094][T13515] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1275.003485][T13532] fuse: Unknown parameter 'group_i00000000000000000000' [ 1275.251110][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 1276.856327][T13558] device syzkaller0 entered promiscuous mode [ 1277.013985][T13558] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2021'. [ 1277.039804][T13567] loop7: detected capacity change from 0 to 256 [ 1277.086929][T13567] FAT-fs (loop7): Directory bread(block 64) failed [ 1277.093824][T13567] FAT-fs (loop7): Directory bread(block 65) failed [ 1277.101062][T13567] FAT-fs (loop7): Directory bread(block 66) failed [ 1277.107951][T13567] FAT-fs (loop7): Directory bread(block 67) failed [ 1277.114957][T13567] FAT-fs (loop7): Directory bread(block 68) failed [ 1277.121636][T13567] FAT-fs (loop7): Directory bread(block 69) failed [ 1277.128535][T13567] FAT-fs (loop7): Directory bread(block 70) failed [ 1277.135251][T13567] FAT-fs (loop7): Directory bread(block 71) failed [ 1277.142146][T13567] FAT-fs (loop7): Directory bread(block 72) failed [ 1277.148819][T13567] FAT-fs (loop7): Directory bread(block 73) failed [ 1278.718913][T13567] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2023'. [ 1278.728444][T13567] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2023'. [ 1278.738009][T13567] tc_dump_action: action bad kind [ 1279.424300][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1279.457173][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1279.620971][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1279.659576][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1279.686608][T13178] device veth0_vlan entered promiscuous mode [ 1279.703083][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1279.724701][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1279.763909][T13582] fuse: Unknown parameter 'group_i00000000000000000000' [ 1279.793810][T13178] device veth1_vlan entered promiscuous mode [ 1279.807967][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1279.874974][T13584] loop7: detected capacity change from 0 to 2048 [ 1279.883359][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1279.922750][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1279.973545][T13178] device veth0_macvtap entered promiscuous mode [ 1280.014653][T13178] device veth1_macvtap entered promiscuous mode [ 1280.061541][T13584] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1280.076004][T13584] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1280.976898][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1281.148677][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1281.207601][T13178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.236012][T10478] EXT4-fs (loop7): unmounting filesystem. [ 1281.275539][T13178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.305284][T13178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.328280][T13178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.401254][T13178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.471283][T13178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.513092][T13178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1281.557016][T13178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.607850][T13178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.646843][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1281.685631][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1281.732008][T13178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.768543][T13178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.801264][T13178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.856815][T13178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.909731][T13178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.950151][T13178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.024995][T13178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1282.067522][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1282.083788][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1282.130703][T13178] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.157059][T13178] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.221908][T13178] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.230688][T13178] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.528645][T13640] device syzkaller0 entered promiscuous mode [ 1282.598390][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.628162][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.723135][T13646] loop5: detected capacity change from 0 to 256 [ 1282.763999][T13640] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2035'. [ 1282.851076][T13646] FAT-fs (loop5): Directory bread(block 64) failed [ 1282.858080][T13646] FAT-fs (loop5): Directory bread(block 65) failed [ 1282.865168][T13646] FAT-fs (loop5): Directory bread(block 66) failed [ 1282.871911][T13646] FAT-fs (loop5): Directory bread(block 67) failed [ 1282.879477][T13646] FAT-fs (loop5): Directory bread(block 68) failed [ 1282.886524][T13646] FAT-fs (loop5): Directory bread(block 69) failed [ 1282.893605][T13646] FAT-fs (loop5): Directory bread(block 70) failed [ 1282.900301][T13646] FAT-fs (loop5): Directory bread(block 71) failed [ 1282.907439][T13646] FAT-fs (loop5): Directory bread(block 72) failed [ 1282.914303][T13646] FAT-fs (loop5): Directory bread(block 73) failed [ 1283.237403][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1283.534961][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.552263][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.570376][T13646] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2036'. [ 1283.580405][T13646] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2036'. [ 1283.590161][T13646] tc_dump_action: action bad kind [ 1283.787949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1283.827852][T13654] fuse: Unknown parameter 'group_id00000000000000000000' [ 1284.186253][T13665] loop5: detected capacity change from 0 to 2048 [ 1284.900854][T13665] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1284.938555][T13665] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1286.064486][ T7268] EXT4-fs (loop5): unmounting filesystem. [ 1286.707618][T13704] loop6: detected capacity change from 0 to 256 [ 1286.770104][T13704] FAT-fs (loop6): Directory bread(block 64) failed [ 1286.776946][T13704] FAT-fs (loop6): Directory bread(block 65) failed [ 1286.784020][T13704] FAT-fs (loop6): Directory bread(block 66) failed [ 1286.790727][T13704] FAT-fs (loop6): Directory bread(block 67) failed [ 1286.797671][T13704] FAT-fs (loop6): Directory bread(block 68) failed [ 1286.804409][T13704] FAT-fs (loop6): Directory bread(block 69) failed [ 1286.811439][T13704] FAT-fs (loop6): Directory bread(block 70) failed [ 1286.818076][T13704] FAT-fs (loop6): Directory bread(block 71) failed [ 1286.824923][T13704] FAT-fs (loop6): Directory bread(block 72) failed [ 1286.831636][T13704] FAT-fs (loop6): Directory bread(block 73) failed [ 1286.960265][T13704] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2047'. [ 1286.969860][T13704] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2047'. [ 1286.978986][T13704] tc_dump_action: action bad kind [ 1287.698414][T13706] input: syz1 as /devices/virtual/input/input13 [ 1288.118079][T13719] netlink: 'syz.7.2049': attribute type 10 has an invalid length. [ 1288.126063][T13719] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2049'. [ 1288.135159][T13719] device batadv0 entered promiscuous mode [ 1288.142802][T13719] bridge0: port 3(batadv0) entered blocking state [ 1288.149638][T13719] bridge0: port 3(batadv0) entered disabled state [ 1288.161688][T13719] bridge0: port 3(batadv0) entered blocking state [ 1288.168278][T13719] bridge0: port 3(batadv0) entered forwarding state [ 1288.448885][ T4766] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1288.459219][ T4766] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1289.029503][T13721] device syzkaller0 entered promiscuous mode [ 1289.153019][T13726] fuse: Unknown parameter 'group_id00000000000000000000' [ 1289.181442][T13725] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2051'. [ 1293.388475][T13758] loop3: detected capacity change from 0 to 256 [ 1293.440179][T13758] FAT-fs (loop3): Directory bread(block 64) failed [ 1293.446939][T13758] FAT-fs (loop3): Directory bread(block 65) failed [ 1293.453957][T13758] FAT-fs (loop3): Directory bread(block 66) failed [ 1293.460661][T13758] FAT-fs (loop3): Directory bread(block 67) failed [ 1293.467885][T13758] FAT-fs (loop3): Directory bread(block 68) failed [ 1293.474609][T13758] FAT-fs (loop3): Directory bread(block 69) failed [ 1293.481583][T13758] FAT-fs (loop3): Directory bread(block 70) failed [ 1293.488588][T13758] FAT-fs (loop3): Directory bread(block 71) failed [ 1293.495671][T13758] FAT-fs (loop3): Directory bread(block 72) failed [ 1293.502485][T13758] FAT-fs (loop3): Directory bread(block 73) failed [ 1293.719640][T13758] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2060'. [ 1293.728947][T13758] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2060'. [ 1293.738194][T13758] tc_dump_action: action bad kind [ 1294.490325][T13771] netlink: 'syz.3.2063': attribute type 10 has an invalid length. [ 1294.498280][T13771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2063'. [ 1294.507761][T13771] device batadv0 entered promiscuous mode [ 1294.514369][T13771] bridge0: port 3(batadv0) entered blocking state [ 1294.520940][T13771] bridge0: port 3(batadv0) entered disabled state [ 1294.529185][T13771] bridge0: port 3(batadv0) entered blocking state [ 1294.535751][T13771] bridge0: port 3(batadv0) entered forwarding state [ 1294.722545][ T8615] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1294.731993][ T8615] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1298.481339][ T7217] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1298.525516][T13809] loop8: detected capacity change from 0 to 256 [ 1298.721505][ T7217] usb 7-1: Using ep0 maxpacket: 16 [ 1298.732096][ T7217] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1298.752923][ T7217] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1298.768966][ T7217] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1298.787893][ T7217] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.797474][T13809] FAT-fs (loop8): Directory bread(block 64) failed [ 1298.804058][T13809] FAT-fs (loop8): Directory bread(block 65) failed [ 1298.810946][T13809] FAT-fs (loop8): Directory bread(block 66) failed [ 1298.817601][T13809] FAT-fs (loop8): Directory bread(block 67) failed [ 1298.824249][T13809] FAT-fs (loop8): Directory bread(block 68) failed [ 1298.830769][T13809] FAT-fs (loop8): Directory bread(block 69) failed [ 1298.837563][T13809] FAT-fs (loop8): Directory bread(block 70) failed [ 1298.844141][T13809] FAT-fs (loop8): Directory bread(block 71) failed [ 1298.850703][T13809] FAT-fs (loop8): Directory bread(block 72) failed [ 1298.857321][T13809] FAT-fs (loop8): Directory bread(block 73) failed [ 1298.940726][ T7217] usb 7-1: Product: syz [ 1298.961407][ T7217] usb 7-1: Manufacturer: syz [ 1298.970821][T13808] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2072'. [ 1298.991345][ T7217] usb 7-1: SerialNumber: syz [ 1299.043052][T13808] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2072'. [ 1299.095219][T13808] tc_dump_action: action bad kind [ 1299.244566][ T7217] usb 7-1: 0:2 : does not exist [ 1299.271677][ T7217] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1299.343329][ T7217] usb 7-1: USB disconnect, device number 26 [ 1299.402210][T13822] fuse: Unknown parameter 'group_id00000000000000000000' [ 1299.442039][T12759] udevd[12759]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1300.186568][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.193275][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.152671][T13875] fuse: Bad value for 'user_id' [ 1308.407654][T13881] device batadv_slave_0 entered promiscuous mode [ 1308.761397][ T127] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1309.618483][T13879] device batadv_slave_0 left promiscuous mode [ 1309.881300][ T127] usb 6-1: Using ep0 maxpacket: 16 [ 1309.890239][ T127] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.989614][ T127] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1310.029067][ T127] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1310.071457][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.096865][ T127] usb 6-1: Product: syz [ 1310.110121][ T127] usb 6-1: Manufacturer: syz [ 1310.120396][ T127] usb 6-1: SerialNumber: syz [ 1310.309384][T13910] loop3: detected capacity change from 0 to 256 [ 1310.369671][ T127] usb 6-1: 0:2 : does not exist [ 1312.009639][T13910] FAT-fs (loop3): Directory bread(block 64) failed [ 1312.017246][T13910] FAT-fs (loop3): Directory bread(block 65) failed [ 1312.025082][T13910] FAT-fs (loop3): Directory bread(block 66) failed [ 1312.032022][T13910] FAT-fs (loop3): Directory bread(block 67) failed [ 1312.039043][T13910] FAT-fs (loop3): Directory bread(block 68) failed [ 1312.046150][T13910] FAT-fs (loop3): Directory bread(block 69) failed [ 1312.054037][T13910] FAT-fs (loop3): Directory bread(block 70) failed [ 1312.060749][T13910] FAT-fs (loop3): Directory bread(block 71) failed [ 1312.068161][T13910] FAT-fs (loop3): Directory bread(block 72) failed [ 1312.075363][T13910] FAT-fs (loop3): Directory bread(block 73) failed [ 1312.191034][T13910] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2094'. [ 1312.200479][T13910] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2094'. [ 1312.210010][T13910] tc_dump_action: action bad kind [ 1312.425861][ T127] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1312.815109][ T127] usb 6-1: USB disconnect, device number 17 [ 1313.853545][T13443] udevd[13443]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1314.019469][T13921] fuse: Bad value for 'user_id' [ 1315.106094][T13927] loop8: detected capacity change from 0 to 2048 [ 1315.577421][T13927] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1315.839507][T13927] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1316.580829][T13178] EXT4-fs (loop8): unmounting filesystem. [ 1318.788744][ T4340] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1319.011320][ T4340] usb 4-1: Using ep0 maxpacket: 16 [ 1319.034699][ T4340] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.051253][ T4340] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1319.081607][ T4340] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1319.091419][ T4340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.099509][ T4340] usb 4-1: Product: syz [ 1319.103849][ T4340] usb 4-1: Manufacturer: syz [ 1319.108794][ T4340] usb 4-1: SerialNumber: syz [ 1319.334242][ T4340] usb 4-1: 0:2 : does not exist [ 1319.398555][ T4340] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1319.494747][ T4340] usb 4-1: USB disconnect, device number 15 [ 1320.116948][T13965] fuse: Bad value for 'user_id' [ 1320.291112][T13443] udevd[13443]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1320.445880][T13971] loop8: detected capacity change from 0 to 256 [ 1320.795111][T13971] FAT-fs (loop8): Directory bread(block 64) failed [ 1320.801995][T13971] FAT-fs (loop8): Directory bread(block 65) failed [ 1320.809052][T13971] FAT-fs (loop8): Directory bread(block 66) failed [ 1320.815802][T13971] FAT-fs (loop8): Directory bread(block 67) failed [ 1320.822812][T13971] FAT-fs (loop8): Directory bread(block 68) failed [ 1320.829754][T13971] FAT-fs (loop8): Directory bread(block 69) failed [ 1320.836902][T13971] FAT-fs (loop8): Directory bread(block 70) failed [ 1320.843670][T13971] FAT-fs (loop8): Directory bread(block 71) failed [ 1320.850722][T13971] FAT-fs (loop8): Directory bread(block 72) failed [ 1320.857430][T13971] FAT-fs (loop8): Directory bread(block 73) failed [ 1320.964201][T13971] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2111'. [ 1320.973517][T13971] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2111'. [ 1320.982935][T13971] tc_dump_action: action bad kind [ 1323.113655][ T48] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1326.094460][T13981] loop3: detected capacity change from 0 to 2048 [ 1326.461914][T13981] EXT4-fs: failed to create workqueue [ 1326.486698][T13981] EXT4-fs (loop3): mount failed [ 1327.768996][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1327.780593][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1327.810906][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1327.842088][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1327.851615][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1327.859103][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1329.941476][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1330.211407][ T4364] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1331.140452][T14045] loop8: detected capacity change from 0 to 2048 [ 1331.219370][T14045] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1331.261431][ T4364] usb 4-1: Using ep0 maxpacket: 16 [ 1331.269236][ T4364] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1331.288329][ T4364] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1331.299062][T14045] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1331.310842][ T4364] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1331.320060][ T4364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.328131][ T4364] usb 4-1: Product: syz [ 1331.332677][ T4364] usb 4-1: Manufacturer: syz [ 1331.337310][ T4364] usb 4-1: SerialNumber: syz [ 1331.525732][T13995] chnl_net:caif_netlink_parms(): no params data found [ 1331.630972][ T4364] usb 4-1: 0:2 : does not exist [ 1331.643713][ T4364] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1332.021288][T10479] Bluetooth: hci2: command 0x041b tx timeout [ 1332.058256][ T4364] usb 4-1: USB disconnect, device number 16 [ 1332.379373][T13995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.389715][T12759] udevd[12759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1332.425229][T13178] EXT4-fs (loop8): unmounting filesystem. [ 1332.468519][T13995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.510377][T13995] device bridge_slave_0 entered promiscuous mode [ 1332.576478][T13995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.608200][T13995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.647867][T13995] device bridge_slave_1 entered promiscuous mode [ 1332.759214][T13995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1332.830426][T13995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.901282][T11666] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1332.975327][T14072] fuse: Bad value for 'fd' [ 1333.052508][T13995] team0: Port device team_slave_0 added [ 1333.074863][T13995] team0: Port device team_slave_1 added [ 1333.131425][T11666] usb 4-1: Using ep0 maxpacket: 16 [ 1333.147016][T11666] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1333.195664][T13995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1333.204168][T11666] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1333.235633][T13995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.266163][T11666] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1333.310934][T11666] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1333.332681][T11666] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1333.351291][T13995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1333.373858][T11666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.411561][T13995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1333.429609][T11666] usb 4-1: config 0 descriptor?? [ 1333.455994][T13995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1333.583323][T13995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1333.783688][T13995] device hsr_slave_0 entered promiscuous mode [ 1333.836288][T13995] device hsr_slave_1 entered promiscuous mode [ 1333.986842][T13995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1334.025135][T13995] Cannot create hsr debugfs directory [ 1334.103275][T10479] Bluetooth: hci2: command 0x040f tx timeout [ 1336.478810][T10479] Bluetooth: hci2: command 0x0419 tx timeout [ 1336.723618][T11666] usbhid 4-1:0.0: can't add hid device: -71 [ 1336.744322][T11666] usbhid: probe of 4-1:0.0 failed with error -71 [ 1336.755852][T11666] usb 4-1: USB disconnect, device number 17 [ 1337.610511][T14115] loop7: detected capacity change from 0 to 2048 [ 1337.936241][T14115] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1338.078586][T14115] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1338.511430][T10479] Bluetooth: hci2: command 0x0406 tx timeout [ 1338.527532][T14126] fuse: Bad value for 'fd' [ 1338.651416][ T4314] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1338.871350][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 1338.878542][ T4314] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1338.950930][ T4314] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1339.007503][ T2924] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.021961][ T4314] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1339.072015][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.080443][ T4314] usb 4-1: Product: syz [ 1339.144443][ T4314] usb 4-1: Manufacturer: syz [ 1339.176507][ T4314] usb 4-1: SerialNumber: syz [ 1339.267393][T10478] EXT4-fs (loop7): unmounting filesystem. [ 1339.435181][ T4314] usb 4-1: 0:2 : does not exist [ 1339.458385][ T4314] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1339.474131][ T2924] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.507136][ T4314] usb 4-1: USB disconnect, device number 18 [ 1339.525331][T14135] tipc: Started in network mode [ 1339.545178][T14135] tipc: Node identity d259b74fdcc2, cluster identity 4711 [ 1339.565820][T14135] tipc: Enabled bearer , priority 0 [ 1339.616811][T14135] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2145'. [ 1339.647008][T14135] tipc: Resetting bearer [ 1339.774222][ T2924] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.800387][T13995] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1339.962981][T14134] tipc: Disabling bearer [ 1340.168484][T13995] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1340.562104][ T2924] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1340.629618][T13995] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1340.680088][T13995] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1340.741442][ T8399] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1341.831276][ T8399] usb 6-1: Using ep0 maxpacket: 16 [ 1341.838336][ T8399] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.851862][ T8399] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.862303][ T8399] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1341.875622][ T8399] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1341.882541][ T8399] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1341.891995][ T8399] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.902208][ T8399] usb 6-1: config 0 descriptor?? [ 1342.058145][T13443] udevd[13443]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1342.359211][T13995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.575761][ T2924] tipc: Left network mode [ 1342.979271][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1343.000170][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1343.218715][T14191] fuse: Bad value for 'fd' [ 1343.274487][T14188] loop8: detected capacity change from 0 to 2048 [ 1343.337981][T14188] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1343.354514][T13995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1343.385431][T14188] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1345.018360][ T8399] usbhid 6-1:0.0: can't add hid device: -71 [ 1345.027502][ T8399] usbhid: probe of 6-1:0.0 failed with error -71 [ 1345.211139][ T8399] usb 6-1: USB disconnect, device number 18 [ 1345.646102][T14206] tipc: Enabled bearer , priority 0 [ 1345.687299][T14206] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2160'. [ 1345.865268][T14209] tipc: Resetting bearer [ 1345.875070][T13178] EXT4-fs (loop8): unmounting filesystem. [ 1345.929000][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1345.962195][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1345.982159][ T8629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.989387][ T8629] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1346.135846][T14205] tipc: Disabling bearer [ 1346.268094][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1346.289141][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1346.346182][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1346.376307][ T8629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1346.383523][ T8629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1346.697431][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1347.152945][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1347.186745][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1347.244101][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1347.258580][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1347.269940][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1347.496810][T13995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1347.557990][T13995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1347.602862][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1347.642401][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1347.657082][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1347.688533][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1347.718824][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1347.745282][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1349.024910][T14257] fuse: Bad value for 'fd' [ 1349.139726][T14261] loop5: detected capacity change from 0 to 256 [ 1349.305942][T14261] FAT-fs (loop5): Directory bread(block 64) failed [ 1349.313056][T14261] FAT-fs (loop5): Directory bread(block 65) failed [ 1349.320459][T14261] FAT-fs (loop5): Directory bread(block 66) failed [ 1349.327743][T14261] FAT-fs (loop5): Directory bread(block 67) failed [ 1349.335212][T14261] FAT-fs (loop5): Directory bread(block 68) failed [ 1349.342254][T14261] FAT-fs (loop5): Directory bread(block 69) failed [ 1349.349538][T14261] FAT-fs (loop5): Directory bread(block 70) failed [ 1349.356594][T14261] FAT-fs (loop5): Directory bread(block 71) failed [ 1349.365033][T14261] FAT-fs (loop5): Directory bread(block 72) failed [ 1349.372257][T14261] FAT-fs (loop5): Directory bread(block 73) failed [ 1350.331307][ T7880] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1350.541397][ T7880] usb 9-1: Using ep0 maxpacket: 16 [ 1350.554069][ T7880] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.746679][ T7880] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.865676][ T7880] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1351.043688][ T7880] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1351.155468][ T7880] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1351.287725][ T7880] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.462642][ T7880] usb 9-1: config 0 descriptor?? [ 1353.550992][ T7880] usbhid 9-1:0.0: can't add hid device: -71 [ 1353.562156][ T7880] usbhid: probe of 9-1:0.0 failed with error -71 [ 1353.629482][ T7880] usb 9-1: USB disconnect, device number 2 [ 1353.741649][T14277] loop3: detected capacity change from 0 to 2048 [ 1353.876975][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1353.889209][T14277] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1353.918447][ T8629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1353.954526][T14277] ext4 filesystem being mounted at /502/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1353.982748][T13995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1354.044240][T14289] tipc: Enabled bearer , priority 0 [ 1354.113944][T14281] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2173'. [ 1354.293912][T14289] tipc: Resetting bearer [ 1354.572367][T14278] tipc: Disabling bearer [ 1354.926058][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 1355.218014][ T2924] device hsr_slave_0 left promiscuous mode [ 1355.316147][ T2924] device hsr_slave_1 left promiscuous mode [ 1355.335168][ T2924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1355.372638][ T2924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1355.450251][ T2924] device bridge_slave_1 left promiscuous mode [ 1355.491607][ T2924] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.532784][ T2924] device bridge_slave_0 left promiscuous mode [ 1355.559165][ T2924] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.571475][ T7880] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1355.662349][ T2924] device veth1_macvtap left promiscuous mode [ 1355.689318][ T2924] device veth0_macvtap left promiscuous mode [ 1355.699527][ T2924] device veth1_vlan left promiscuous mode [ 1355.740119][ T2924] device veth0_vlan left promiscuous mode [ 1355.921349][ T7880] usb 4-1: Using ep0 maxpacket: 16 [ 1355.928773][ T7880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.029490][ T7880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1356.237413][ T7880] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1356.332182][ T7880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.420300][ T7880] usb 4-1: Product: syz [ 1356.464798][ T7880] usb 4-1: Manufacturer: syz [ 1356.617537][ T7880] usb 4-1: SerialNumber: syz [ 1356.854858][ T7880] usb 4-1: 0:2 : does not exist [ 1356.874648][ T7880] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1356.933029][ T7880] usb 4-1: USB disconnect, device number 19 [ 1357.213191][T13443] udevd[13443]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.690182][T10479] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1358.700095][T10479] CPU: 1 PID: 10479 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1358.707762][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1358.717935][T10479] Workqueue: hci4 hci_rx_work [ 1358.722645][T10479] Call Trace: [ 1358.725932][T10479] [ 1358.728871][T10479] dump_stack_lvl+0x188/0x24e [ 1358.733587][T10479] ? show_regs_print_info+0x12/0x12 [ 1358.738838][T10479] ? load_image+0x400/0x400 [ 1358.743387][T10479] sysfs_create_dir_ns+0x26a/0x290 [ 1358.748573][T10479] ? sysfs_warn_dup+0xa0/0xa0 [ 1358.753392][T10479] ? do_raw_spin_unlock+0x11d/0x230 [ 1358.758611][T10479] kobject_add_internal+0x61c/0xcc0 [ 1358.763835][T10479] kobject_add+0x160/0x230 [ 1358.768271][T10479] ? kobject_init+0x1d0/0x1d0 [ 1358.772968][T10479] ? klist_children_get+0x50/0x50 [ 1358.778005][T10479] ? get_device_parent+0x121/0x3f0 [ 1358.783140][T10479] device_add+0x483/0xfb0 [ 1358.787516][T10479] ? kmem_cache_free+0xf7/0x290 [ 1358.792428][T10479] hci_conn_add_sysfs+0xd1/0x1e0 [ 1358.797422][T10479] le_conn_complete_evt+0x105f/0x1670 [ 1358.802872][T10479] ? le_conn_complete_evt+0xe6/0x1670 [ 1358.808281][T10479] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1358.814587][T10479] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1358.820281][T10479] ? skb_pull_data+0xf7/0x200 [ 1358.825183][T10479] hci_le_conn_complete_evt+0x183/0x440 [ 1358.830748][T10479] ? hci_remote_host_features_evt+0x270/0x270 [ 1358.836836][T10479] hci_event_packet+0x7b6/0x1280 [ 1358.841803][T10479] ? bis_list+0x280/0x280 [ 1358.846156][T10479] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1358.852076][T10479] ? kcov_remote_start+0x4c7/0x7e0 [ 1358.857217][T10479] ? spurious_interrupt+0x80/0xd0 [ 1358.862264][T10479] ? hci_send_to_monitor+0x9c/0x4a0 [ 1358.867483][T10479] hci_rx_work+0x3eb/0xd40 [ 1358.871928][T10479] ? _raw_spin_unlock+0x40/0x40 [ 1358.876824][T10479] ? process_one_work+0x7b0/0x1160 [ 1358.881986][T10479] process_one_work+0x8a2/0x1160 [ 1358.886958][T10479] ? worker_detach_from_pool+0x240/0x240 [ 1358.892610][T10479] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1358.897667][T10479] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1358.903223][T10479] ? kthread_data+0x4b/0xc0 [ 1358.907769][T10479] worker_thread+0xaa2/0x1270 [ 1358.912565][T10479] ? __kthread_parkme+0x162/0x1c0 [ 1358.917616][T10479] kthread+0x29d/0x330 [ 1358.921721][T10479] ? worker_clr_flags+0x1a0/0x1a0 [ 1358.926767][T10479] ? kthread_blkcg+0xd0/0xd0 [ 1358.931378][T10479] ret_from_fork+0x1f/0x30 [ 1358.935927][T10479] [ 1358.951469][T10479] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1358.965272][T10479] Bluetooth: hci4: failed to register connection device [ 1359.062682][ T2924] team0 (unregistering): Port device team_slave_1 removed [ 1359.474551][ T2924] team0 (unregistering): Port device team_slave_0 removed [ 1359.662452][ T2924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.728645][ T2924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1360.205868][ T2924] bond0 (unregistering): Released all slaves [ 1362.026308][T10479] Bluetooth: hci4: command 0x2016 tx timeout [ 1362.037924][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.044333][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.499713][T14366] tipc: Enabled bearer , priority 0 [ 1362.510037][T14366] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2186'. [ 1362.558026][T14366] tipc: Resetting bearer [ 1362.746298][T14364] tipc: Disabling bearer [ 1362.859078][ T8631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1362.941072][ T8631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1363.042097][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1363.059723][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1363.100884][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1363.120361][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1363.189979][T13995] device veth0_vlan entered promiscuous mode [ 1363.239616][T13995] device veth1_vlan entered promiscuous mode [ 1363.340257][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1363.358215][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1363.371452][ T7194] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1363.387357][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1363.424841][ T8622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1363.465723][T13995] device veth0_macvtap entered promiscuous mode [ 1363.496230][T13995] device veth1_macvtap entered promiscuous mode [ 1363.561333][ T7194] usb 6-1: Using ep0 maxpacket: 16 [ 1363.568781][ T7194] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.600214][T13995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.622738][ T7194] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1363.661200][T13995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.677804][ T7194] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1363.701301][T13995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.712610][ T7194] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.720680][ T7194] usb 6-1: Product: syz [ 1363.731200][T13995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.741105][T13995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.759739][ T7194] usb 6-1: Manufacturer: syz [ 1363.764810][ T7194] usb 6-1: SerialNumber: syz [ 1363.796195][T13995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.821318][T13995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.851641][T13995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.883322][T13995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1363.910040][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1363.941624][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1363.952657][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1364.001887][ T7194] usb 6-1: 0:2 : does not exist [ 1364.012757][ T8615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1364.023884][ T7194] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1364.040386][T13995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.071789][T13995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.127778][T13995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.163894][T13995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.199501][ T7194] usb 6-1: USB disconnect, device number 19 [ 1364.360838][T13995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.372781][T13995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.383448][T13995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1364.394786][T13995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.407458][T13995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.419368][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1364.671327][ T5115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1365.197242][T13995] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.206361][T13995] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.215223][T13995] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.224151][T13995] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1365.754937][T10479] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1365.868664][T10479] CPU: 1 PID: 10479 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1365.876398][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1365.886501][T10479] Workqueue: hci1 hci_rx_work [ 1365.891240][T10479] Call Trace: [ 1365.894562][T10479] [ 1365.897572][T10479] dump_stack_lvl+0x188/0x24e [ 1365.902333][T10479] ? show_regs_print_info+0x12/0x12 [ 1365.907610][T10479] ? load_image+0x400/0x400 [ 1365.912208][T10479] sysfs_create_dir_ns+0x26a/0x290 [ 1365.917398][T10479] ? sysfs_warn_dup+0xa0/0xa0 [ 1365.922144][T10479] ? do_raw_spin_unlock+0x11d/0x230 [ 1365.927503][T10479] kobject_add_internal+0x61c/0xcc0 [ 1365.932802][T10479] kobject_add+0x160/0x230 [ 1365.937277][T10479] ? kobject_init+0x1d0/0x1d0 [ 1365.942017][T10479] ? klist_children_get+0x50/0x50 [ 1365.947104][T10479] ? get_device_parent+0x121/0x3f0 [ 1365.952280][T10479] device_add+0x483/0xfb0 [ 1365.956673][T10479] ? kmem_cache_free+0xf7/0x290 [ 1365.961590][T10479] hci_conn_add_sysfs+0xd1/0x1e0 [ 1365.966599][T10479] le_conn_complete_evt+0x105f/0x1670 [ 1365.972029][T10479] ? lock_chain_count+0x20/0x20 [ 1365.976941][T10479] ? le_conn_complete_evt+0xe6/0x1670 [ 1365.982462][T10479] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1365.988760][T10479] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1365.994459][T10479] ? hci_le_meta_evt+0xb2/0x580 [ 1365.999371][T10479] ? skb_pull_data+0xf7/0x200 [ 1366.004117][T10479] hci_le_conn_complete_evt+0x183/0x440 [ 1366.009734][T10479] ? hci_remote_host_features_evt+0x270/0x270 [ 1366.015871][T10479] hci_event_packet+0x7b6/0x1280 [ 1366.020872][T10479] ? bis_list+0x280/0x280 [ 1366.025265][T10479] ? kcov_remote_start+0x27/0x7e0 [ 1366.030344][T10479] ? hci_send_to_monitor+0x9c/0x4a0 [ 1366.035600][T10479] hci_rx_work+0x3eb/0xd40 [ 1366.040088][T10479] ? process_one_work+0x7b0/0x1160 [ 1366.045250][T10479] process_one_work+0x8a2/0x1160 [ 1366.050322][T10479] ? worker_detach_from_pool+0x240/0x240 [ 1366.056031][T10479] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1366.061123][T10479] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1366.066731][T10479] ? kthread_data+0x4b/0xc0 [ 1366.071322][T10479] worker_thread+0xaa2/0x1270 [ 1366.076082][T10479] ? __kthread_parkme+0x162/0x1c0 [ 1366.081173][T10479] kthread+0x29d/0x330 [ 1366.085287][T10479] ? worker_clr_flags+0x1a0/0x1a0 [ 1366.090371][T10479] ? kthread_blkcg+0xd0/0xd0 [ 1366.095012][T10479] ret_from_fork+0x1f/0x30 [ 1366.099504][T10479] [ 1366.172932][T10479] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1366.187743][T10479] Bluetooth: hci1: failed to register connection device [ 1367.676739][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.699948][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.735230][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1367.817953][ T2924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1367.848946][ T2924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1367.877558][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1367.904409][ T4338] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1368.101560][ T4338] usb 4-1: Using ep0 maxpacket: 16 [ 1368.118984][ T4338] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.154244][ T4338] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.185498][ T4338] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1368.235557][ T4338] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1368.245105][ T4338] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1368.262270][T10479] Bluetooth: hci1: command 0x2016 tx timeout [ 1368.402813][ T4338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.413171][ T4338] usb 4-1: config 0 descriptor?? [ 1369.231879][T10479] Bluetooth: hci5: command 0x0406 tx timeout [ 1370.982976][ T4308] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1371.036448][ T4338] usbhid 4-1:0.0: can't add hid device: -71 [ 1371.042898][ T4338] usbhid: probe of 4-1:0.0 failed with error -71 [ 1371.063864][ T4338] usb 4-1: USB disconnect, device number 20 [ 1371.150944][T10479] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1371.161251][T10479] CPU: 1 PID: 10479 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1371.168976][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1371.179154][T10479] Workqueue: hci2 hci_rx_work [ 1371.183943][T10479] Call Trace: [ 1371.187232][T10479] [ 1371.190168][T10479] dump_stack_lvl+0x188/0x24e [ 1371.194891][T10479] ? show_regs_print_info+0x12/0x12 [ 1371.200122][T10479] ? load_image+0x400/0x400 [ 1371.204662][T10479] sysfs_create_dir_ns+0x26a/0x290 [ 1371.209810][T10479] ? sysfs_warn_dup+0xa0/0xa0 [ 1371.214604][T10479] ? do_raw_spin_unlock+0x11d/0x230 [ 1371.219828][T10479] kobject_add_internal+0x61c/0xcc0 [ 1371.225063][T10479] kobject_add+0x160/0x230 [ 1371.229511][T10479] ? kobject_init+0x1d0/0x1d0 [ 1371.234237][T10479] ? klist_children_get+0x50/0x50 [ 1371.239344][T10479] ? get_device_parent+0x121/0x3f0 [ 1371.244504][T10479] device_add+0x483/0xfb0 [ 1371.248881][T10479] ? kmem_cache_free+0xf7/0x290 [ 1371.253756][T10479] hci_conn_add_sysfs+0xd1/0x1e0 [ 1371.258715][T10479] le_conn_complete_evt+0x105f/0x1670 [ 1371.264108][T10479] ? le_conn_complete_evt+0xe6/0x1670 [ 1371.269515][T10479] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 1371.275800][T10479] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1371.281478][T10479] ? skb_pull_data+0xf7/0x200 [ 1371.286199][T10479] hci_le_conn_complete_evt+0x183/0x440 [ 1371.291803][T10479] ? hci_remote_host_features_evt+0x270/0x270 [ 1371.297911][T10479] hci_event_packet+0x7b6/0x1280 [ 1371.302892][T10479] ? bis_list+0x280/0x280 [ 1371.307264][T10479] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1371.313195][T10479] ? kcov_remote_start+0x4c7/0x7e0 [ 1371.318346][T10479] ? spurious_interrupt+0x80/0xd0 [ 1371.323397][T10479] ? hci_send_to_monitor+0x9c/0x4a0 [ 1371.328645][T10479] hci_rx_work+0x3eb/0xd40 [ 1371.333093][T10479] ? _raw_spin_unlock+0x40/0x40 [ 1371.337980][T10479] ? process_one_work+0x7b0/0x1160 [ 1371.343122][T10479] process_one_work+0x8a2/0x1160 [ 1371.348103][T10479] ? worker_detach_from_pool+0x240/0x240 [ 1371.353771][T10479] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1371.358820][T10479] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1371.364391][T10479] ? kthread_data+0x4b/0xc0 [ 1371.368940][T10479] worker_thread+0xaa2/0x1270 [ 1371.373667][T10479] ? __kthread_parkme+0x162/0x1c0 [ 1371.378745][T10479] kthread+0x29d/0x330 [ 1371.382842][T10479] ? worker_clr_flags+0x1a0/0x1a0 [ 1371.387895][T10479] ? kthread_blkcg+0xd0/0xd0 [ 1371.392513][T10479] ret_from_fork+0x1f/0x30 [ 1371.397070][T10479] [ 1371.471563][ T4308] usb 9-1: Using ep0 maxpacket: 16 [ 1372.025646][T10479] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1372.038993][T10479] Bluetooth: hci2: failed to register connection device [ 1372.049840][ T4308] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.060288][ T4308] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1372.072676][ T4308] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1372.081987][ T4308] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.090102][ T4308] usb 9-1: Product: syz [ 1372.094904][ T4308] usb 9-1: Manufacturer: syz [ 1372.099558][ T4308] usb 9-1: SerialNumber: syz [ 1372.304873][T14466] loop5: detected capacity change from 0 to 2048 [ 1372.358618][ T4308] usb 9-1: 0:2 : does not exist [ 1372.380114][ T4308] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1373.998949][T14466] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1374.071588][T14466] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1374.079788][ T4308] usb 9-1: USB disconnect, device number 3 [ 1374.101420][T10479] Bluetooth: hci2: command 0x2016 tx timeout [ 1374.382495][T13443] udevd[13443]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1374.997709][T14486] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2215'. [ 1375.359077][ T7268] EXT4-fs (loop5): unmounting filesystem. [ 1376.278964][T14499] netlink: 'syz.8.2221': attribute type 1 has an invalid length. [ 1376.779771][T14499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1376.878620][T14504] bond1: (slave gretap1): making interface the new active one [ 1376.964103][T14504] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1377.029685][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1377.201864][ T4338] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1377.291275][ T4558] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1377.411380][ T4338] usb 10-1: Using ep0 maxpacket: 16 [ 1377.418472][ T4338] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1377.435568][ T4338] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.456871][ T4338] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1377.477464][ T4338] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1377.487626][ T4338] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1377.544071][ T4558] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1377.560824][ T4338] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.575411][ T4558] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1379.167728][ T4338] usb 10-1: config 0 descriptor?? [ 1379.175159][ T4558] usb 9-1: can't read configurations, error -71 [ 1379.259034][T14521] loop3: detected capacity change from 0 to 2048 [ 1379.392504][T14521] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1379.401134][T14521] ext4 filesystem being mounted at /514/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1381.816225][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 1382.061056][ T4338] usbhid 10-1:0.0: can't add hid device: -71 [ 1382.071468][ T4338] usbhid: probe of 10-1:0.0 failed with error -71 [ 1382.168283][ T4338] usb 10-1: USB disconnect, device number 2 [ 1382.487544][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2231'. [ 1383.155155][T14558] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2237'. [ 1383.573180][T14567] tipc: Enabling of bearer rejected, failed to enable media [ 1383.781399][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1383.801289][ T4558] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 1384.017505][ T4558] usb 9-1: config index 0 descriptor too short (expected 1051, got 27) [ 1384.027362][ T4558] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1384.060799][ T4558] usb 9-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 1384.103077][ T4558] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.132147][ T4558] usb 9-1: Product: syz [ 1384.136742][ T4558] usb 9-1: Manufacturer: syz [ 1384.163609][ T4558] usb 9-1: SerialNumber: syz [ 1384.216665][ T4558] usb 9-1: config 0 descriptor?? [ 1384.261582][T14577] netlink: 44 bytes leftover after parsing attributes in process `syz.9.2240'. [ 1384.490168][ T4558] usb 9-1: USB disconnect, device number 6 [ 1386.716844][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2246'. [ 1388.401910][T14631] tipc: Enabling of bearer rejected, failed to enable media [ 1389.224660][T14631] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2254'. [ 1391.012015][ T4338] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1391.448704][ T4338] usb 10-1: config index 0 descriptor too short (expected 1051, got 27) [ 1391.511473][ T4338] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1391.553199][ T4338] usb 10-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 1391.581923][ T4338] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.590422][ T4338] usb 10-1: Product: syz [ 1391.624641][ T4338] usb 10-1: Manufacturer: syz [ 1391.629570][ T4338] usb 10-1: SerialNumber: syz [ 1391.657395][ T4338] usb 10-1: config 0 descriptor?? [ 1391.998913][T14184] usb 10-1: USB disconnect, device number 3 [ 1392.556873][T14686] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2269'. [ 1392.677579][T14691] tipc: Enabling of bearer rejected, failed to enable media [ 1393.054719][T14700] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2270'. [ 1393.245619][ C0] ------------[ cut here ]------------ [ 1393.251222][ C0] WARNING: CPU: 0 PID: 14703 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 [ 1393.261426][ C0] Modules linked in: [ 1393.265373][ C0] CPU: 0 PID: 14703 Comm: syz.5.2272 Not tainted syzkaller #0 [ 1393.272913][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1393.283058][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1393.289455][ C0] Code: 24 4c 89 e7 e8 9e d3 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 39 3d d2 f7 0f 0b e9 f6 f7 ff ff e8 2d 3d d2 f7 <0f> 0b e9 48 fb ff ff e8 21 3d d2 f7 48 c7 c7 50 d6 fa 8d 4c 89 e6 [ 1393.309250][ C0] RSP: 0018:ffffc90000007a30 EFLAGS: 00010246 [ 1393.315423][ C0] RAX: ffffffff89b03583 RBX: ffffffff89b02386 RCX: ffff8880307f3b80 [ 1393.323503][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1393.331564][ C0] RBP: 0000000000000000 R08: ffff8880307f3b80 R09: 0000000000000003 [ 1393.339588][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888027786228 [ 1393.347654][ C0] R13: dffffc0000000000 R14: ffff888027786760 R15: ffff888061e27824 [ 1393.355728][ C0] FS: 00007fd9a33f66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1393.364761][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1393.371537][ C0] CR2: 0000560c935bb008 CR3: 0000000067ccf000 CR4: 00000000003506f0 [ 1393.379568][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1393.387683][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1393.395754][ C0] Call Trace: [ 1393.399080][ C0] [ 1393.402035][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1393.407653][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1393.413248][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1393.418850][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1393.424350][ C0] __iterate_interfaces+0x243/0x500 [ 1393.429603][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1393.435947][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1393.443281][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1393.449585][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1393.456740][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1393.462051][ C0] __hrtimer_run_queues+0x54a/0xd50 [ 1393.467309][ C0] ? hw_scan_work+0xf50/0xf50 [ 1393.472591][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1393.477776][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1393.483968][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 1393.489142][ C0] handle_softirqs+0x2a1/0x930 [ 1393.494003][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1393.498911][ C0] ? do_softirq+0x210/0x210 [ 1393.503535][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1393.508792][ C0] __irq_exit_rcu+0x13b/0x230 [ 1393.513596][ C0] ? irq_exit_rcu+0x20/0x20 [ 1393.518170][ C0] irq_exit_rcu+0x5/0x20 [ 1393.522524][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1393.528290][ C0] [ 1393.531339][ C0] [ 1393.534333][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1393.540375][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 1393.546989][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0f cc 21 f7 65 8b 05 d0 50 cb 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1393.566704][ C0] RSP: 0018:ffffc900056475a0 EFLAGS: 00000206 [ 1393.572867][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: edb5dbdcff56ae00 [ 1393.580892][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 1393.588981][ C0] RBP: ffffc90005647630 R08: ffffffff90af62ef R09: 1ffffffff215ec5d [ 1393.597059][ C0] R10: dffffc0000000000 R11: fffffbfff215ec5e R12: dffffc0000000000 [ 1393.605127][ C0] R13: 0000000000000000 R14: ffff88802ca386c0 R15: 1ffff92000ac8eb4 [ 1393.613215][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1393.618129][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 1393.623260][ C0] __wake_up_sync_key+0x128/0x190 [ 1393.628351][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 1393.634457][ C0] ? sock_load_diag_module+0x130/0x130 [ 1393.639988][ C0] __unix_dgram_recvmsg+0x4c3/0xdc0 [ 1393.645302][ C0] ? unix_unhash+0x10/0x10 [ 1393.649776][ C0] ? mark_lock+0x94/0x320 [ 1393.654211][ C0] ? unix_dgram_recvmsg+0xa9/0xd0 [ 1393.659296][ C0] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 1393.664761][ C0] ____sys_recvmsg+0x2cb/0x5e0 [ 1393.669602][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 1393.674746][ C0] ? import_iovec+0x6f/0xa0 [ 1393.679299][ C0] ___sys_recvmsg+0x212/0x590 [ 1393.684082][ C0] ? __sys_recvmsg+0x290/0x290 [ 1393.688923][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1393.694048][ C0] ? __might_fault+0xc2/0x120 [ 1393.698766][ C0] ? __might_fault+0xa6/0x120 [ 1393.703533][ C0] do_recvmmsg+0x393/0x870 [ 1393.708018][ C0] ? __sys_recvmmsg+0x290/0x290 [ 1393.712979][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1393.718915][ C0] ? rcu_read_lock_sched_held+0x86/0x110 [ 1393.724649][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 1393.729741][ C0] ? do_recvmmsg+0x870/0x870 [ 1393.734441][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1393.739690][ C0] do_syscall_64+0x4c/0xa0 [ 1393.744204][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1393.748927][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1393.753695][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1393.759642][ C0] RIP: 0033:0x7fd9a519c799 [ 1393.764151][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.783844][ C0] RSP: 002b:00007fd9a33f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1393.792344][ C0] RAX: ffffffffffffffda RBX: 00007fd9a5416090 RCX: 00007fd9a519c799 [ 1393.800366][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1393.808552][ C0] RBP: 00007fd9a5232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1393.816609][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1393.824663][ C0] R13: 00007fd9a5416128 R14: 00007fd9a5416090 R15: 00007fff8a943548 [ 1393.832762][ C0] [ 1393.835820][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1393.843130][ C0] CPU: 0 PID: 14703 Comm: syz.5.2272 Not tainted syzkaller #0 [ 1393.850621][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1393.860716][ C0] Call Trace: [ 1393.864028][ C0] [ 1393.866903][ C0] dump_stack_lvl+0x188/0x24e [ 1393.871628][ C0] ? memcpy+0x3c/0x60 [ 1393.875652][ C0] ? show_regs_print_info+0x12/0x12 [ 1393.880906][ C0] ? load_image+0x400/0x400 [ 1393.885462][ C0] panic+0x2e5/0x730 [ 1393.889410][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1393.893973][ C0] __warn+0x2f8/0x4f0 [ 1393.897996][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1393.903765][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1393.909523][ C0] report_bug+0x2ba/0x4f0 [ 1393.913901][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1393.919669][ C0] handle_bug+0x3a/0x70 [ 1393.923875][ C0] exc_invalid_op+0x16/0x40 [ 1393.928434][ C0] asm_exc_invalid_op+0x16/0x20 [ 1393.933332][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 1393.939798][ C0] Code: 24 4c 89 e7 e8 9e d3 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 39 3d d2 f7 0f 0b e9 f6 f7 ff ff e8 2d 3d d2 f7 <0f> 0b e9 48 fb ff ff e8 21 3d d2 f7 48 c7 c7 50 d6 fa 8d 4c 89 e6 [ 1393.959448][ C0] RSP: 0018:ffffc90000007a30 EFLAGS: 00010246 [ 1393.965564][ C0] RAX: ffffffff89b03583 RBX: ffffffff89b02386 RCX: ffff8880307f3b80 [ 1393.973574][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1393.981582][ C0] RBP: 0000000000000000 R08: ffff8880307f3b80 R09: 0000000000000003 [ 1393.989590][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888027786228 [ 1393.997612][ C0] R13: dffffc0000000000 R14: ffff888027786760 R15: ffff888061e27824 [ 1394.005647][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1394.011243][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 1394.017032][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1394.022635][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 1394.028149][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 1394.033741][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1394.039187][ C0] __iterate_interfaces+0x243/0x500 [ 1394.044446][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1394.050735][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1394.057993][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1394.064277][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 1394.071354][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1394.076621][ C0] __hrtimer_run_queues+0x54a/0xd50 [ 1394.081878][ C0] ? hw_scan_work+0xf50/0xf50 [ 1394.086622][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1394.091781][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 1394.097889][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 1394.103119][ C0] handle_softirqs+0x2a1/0x930 [ 1394.107908][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1394.112789][ C0] ? do_softirq+0x210/0x210 [ 1394.117663][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1394.122910][ C0] __irq_exit_rcu+0x13b/0x230 [ 1394.127606][ C0] ? irq_exit_rcu+0x20/0x20 [ 1394.132139][ C0] irq_exit_rcu+0x5/0x20 [ 1394.136403][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1394.142055][ C0] [ 1394.145001][ C0] [ 1394.147950][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1394.154044][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 1394.160566][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0f cc 21 f7 65 8b 05 d0 50 cb 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 1394.180274][ C0] RSP: 0018:ffffc900056475a0 EFLAGS: 00000206 [ 1394.186388][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: edb5dbdcff56ae00 [ 1394.194393][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: 0000000000000001 [ 1394.202392][ C0] RBP: ffffc90005647630 R08: ffffffff90af62ef R09: 1ffffffff215ec5d [ 1394.210507][ C0] R10: dffffc0000000000 R11: fffffbfff215ec5e R12: dffffc0000000000 [ 1394.218523][ C0] R13: 0000000000000000 R14: ffff88802ca386c0 R15: 1ffff92000ac8eb4 [ 1394.226549][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1394.231436][ C0] ? __wake_up_common+0x2a4/0x4e0 [ 1394.236489][ C0] __wake_up_sync_key+0x128/0x190 [ 1394.241561][ C0] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 1394.247590][ C0] ? sock_load_diag_module+0x130/0x130 [ 1394.253746][ C0] __unix_dgram_recvmsg+0x4c3/0xdc0 [ 1394.258984][ C0] ? unix_unhash+0x10/0x10 [ 1394.265115][ C0] ? mark_lock+0x94/0x320 [ 1394.269490][ C0] ? unix_dgram_recvmsg+0xa9/0xd0 [ 1394.274549][ C0] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 1394.279956][ C0] ____sys_recvmsg+0x2cb/0x5e0 [ 1394.284767][ C0] ? __sys_recvmsg_sock+0x40/0x40 [ 1394.289832][ C0] ? import_iovec+0x6f/0xa0 [ 1394.294355][ C0] ___sys_recvmsg+0x212/0x590 [ 1394.299073][ C0] ? __sys_recvmsg+0x290/0x290 [ 1394.303883][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1394.308939][ C0] ? __might_fault+0xc2/0x120 [ 1394.313640][ C0] ? __might_fault+0xa6/0x120 [ 1394.318335][ C0] do_recvmmsg+0x393/0x870 [ 1394.322784][ C0] ? __sys_recvmmsg+0x290/0x290 [ 1394.327670][ C0] ? __ia32_sys_get_robust_list+0x100/0x100 [ 1394.333586][ C0] ? rcu_read_lock_sched_held+0x86/0x110 [ 1394.339260][ C0] __x64_sys_recvmmsg+0x195/0x250 [ 1394.344355][ C0] ? do_recvmmsg+0x870/0x870 [ 1394.348977][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1394.354202][ C0] do_syscall_64+0x4c/0xa0 [ 1394.358642][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1394.363344][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1394.368053][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1394.373965][ C0] RIP: 0033:0x7fd9a519c799 [ 1394.378401][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.398028][ C0] RSP: 002b:00007fd9a33f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1394.406470][ C0] RAX: ffffffffffffffda RBX: 00007fd9a5416090 RCX: 00007fd9a519c799 [ 1394.414467][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1394.422459][ C0] RBP: 00007fd9a5232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1394.430444][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1394.438435][ C0] R13: 00007fd9a5416128 R14: 00007fd9a5416090 R15: 00007fff8a943548 [ 1394.446433][ C0] [ 1394.450045][ C0] Kernel Offset: disabled [ 1394.454392][ C0] Rebooting in 86400 seconds..