last executing test programs: 2m15.717475025s ago: executing program 4 (id=36): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) userfaultfd(0x80401) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x3a}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 2m12.112385298s ago: executing program 4 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000300), 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 2m11.748341073s ago: executing program 4 (id=49): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x5, 0xe, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000500)}, {&(0x7f0000001440)="884ab464847da64b706f21833e820163d1f2bd12864a028d63d2b6d5b3f4b8ee1929e89e43e9a2d3eeea181e9b1464a9528b1ff78a976a56932a993f225583f10287998b6908650c21d03a45a07796fb1c4863e5c36cbe082d128e5b37d9e2755530bfc088c19cff45e48558cc8b80cb22d4939d168953c6ba6262b4e500000020bced710000000044df68525aaca640244729bc08fd4698a8ebfd7863b07462dd358739b9b03b8c6fed19900201139ee540319bfe186a57d03d6fa69056e764a159376720070fb3f59e048076486ba3eb60ec8d524fb6f04c7c503dbbd3c35b10392c4c02963515dcb81232e5b664682ba3432820992f5feef072584fd1730da81a99a550f80999d0db425c3f67874cb5652f3efa34998cd1750cb1fb873aa326bc611405970de6751bd21dfd6f34278462b4fa3d3f065e16d63a45b5b5a59841ec1e300395635454730a82ba7a386c4874743e8a58bf364bca9357864f25e4ae82bcead5d781fc00c7c83765f585892919baaff679965a79ec24deaa1ab25ad85736371dad808f809dcf806f37801b0b645f7e1ead1f7d253267eda1dd7f74bfb3ccf7202cf630aee34906e52f5cbf684075961b34fbd8dca037dc4fd16ebbf7b04e5da931aa3d00bbf979db9cc6f350f0bc6c5b3627c7c09aa72e06e2a9364399cd94d2751a41be853c83e484d58602299f800559418dd5d1062e008c94766560b9aa648af83675d62e50c4f8e32e7af92c854a03b12b694688de4e351dfc829fd227e11cd6b7390a76aa5004f72c9a7a4b46a430b29d87415cff34671471a02484162a927df10e87d43904c5f307f862e1b7c1402eab9f28677f269e98bf96d9f9b54cf240fc54d2c59c589ca77bb7fae8d2fbbe7bf2dbfe77ef49d74631476b45804d57f7293c24d9d96771d614bd75c4e6a29bb6227e14209ef852ac050b1c68418408ee03f1765a7331719207375be9777c8c3ddb9ea41f95441b9a6e964cb10d9b87a1d241272ffa0e6b85dea2098fa7cc5c044dc5cd63a6b4c7fbb134d5f3d92535755a2ae442386ca633108f74fdfc439ba7b3a42f48ac6ca97e32f9eb0e6e3404e3e9daf1dcfb32233e051de56fe2fc3837768c7ca58d93fa3d115d751c1a1d977879ff9eeb9625f64edf2dfe8eb997e7aef141972935639eb8309eeb0d48feef10e2b4df31c873378655c4f740fa88fbcbde4911f50bf98d5e956a7cf02ab25769cd8ffaa99451aff5d234de158e0b2be61170627be036fdeda08550cbc41457fde37a28b4dc1e88d27bcbd43cbb8cff537e63e04a963b7c776e21a3ebe0b8c0982656a69982020090eb0b6a333f7bcabda3a889b846926275276b8baf5c82ff47b8140bec940982a5f22dcc987ba1f20df0f826d5b1b7f9405d5f9f0a576f03c1fad24f610b002eb44b0b000034fe8dac914891c3c8ed430391fe8b7d184eff0632c3dc682a92db0a1f9ac98de3f4b7afe1fa1dd22be007880c0314cca16579ac0da7b0a1666f9b75eead478ad61447c6d6a8cf95d426b14759099b55ade8d86b5d9dcd51fd2438605fa4cdb67e4189dd7786554c0931bdc2d8a97c16818a24695f4f6b3698cf5f64c46a0985a118b72277f385a1cac6852423f9d7f8bd85241297bb652d0b144c22bd81d26b973c3819b93161bf52c8d9d772f76fb707d3a3833101", 0x4a9}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 2m8.401962951s ago: executing program 4 (id=58): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x2c}, @call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800004}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0xfcc940c8f4dc176, 0x22, &(0x7f0000001780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1fe1, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @tail_call, @map_fd={0x18, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x92c82931af6e08b0}}}, &(0x7f00000018c0)='syzkaller\x00', 0xde22, 0x8f, &(0x7f0000001900)=""/143, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001ac0)={0x5, 0xe, 0xffffffff, 0x5}, 0x10, 0x0, r0, 0x0, 0x0, &(0x7f0000001c80), 0x10, 0x800000}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x2000000a}}, 0x10) close_range(r5, r5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000180), &(0x7f0000000200), 0x8, 0x53, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) 2m2.468578621s ago: executing program 4 (id=68): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x5, 0xe, @dev={0xfe, 0x80, '\x00', 0x17}, 0x7}, 0x1c) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000000500)}, {&(0x7f0000001440)="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", 0x4a9}], 0x2, 0x0, 0x0, 0x2c}, 0x44004) 2m1.069782485s ago: executing program 4 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfffe, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x10000000, 0xf, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x30}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 1m46.029873824s ago: executing program 32 (id=72): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a00)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfffe, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x100, 0x10000000, 0xf, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x30}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 11.696723968s ago: executing program 3 (id=460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x17, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff0018400063", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 10.206616775s ago: executing program 3 (id=465): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x5, 0x4}, {0x4, 0x1ff}}}}, 0x11) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x3, 0x3}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r5, 0x6a98047402e98331, 0xa1, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x40010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffff, 0x10800) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x2, 0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_ro(r7, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) 9.672969224s ago: executing program 1 (id=469): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xd4839000) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x20000) read$midi(r0, &(0x7f0000000040)=""/25, 0x19) 9.086073325s ago: executing program 3 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) setns(0xc9, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 8.405745755s ago: executing program 1 (id=475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x17, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff0018400063", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 7.951096689s ago: executing program 1 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000300)='pcsp', 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 7.615769725s ago: executing program 1 (id=482): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x5, 0x4}, {0x4, 0x1ff}}}}, 0x11) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x3, 0x3}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r5, 0x6a98047402e98331, 0xa1, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x40010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffff, 0x10800) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x2, 0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_ro(r7, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) 6.937579071s ago: executing program 5 (id=483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8541, 0x1a9) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) setgroups(0x0, 0x0) getgroups(0x0, 0x0) setregid(0x0, 0x0) 5.581279051s ago: executing program 1 (id=485): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f00000010c0)='net/fib_trie\x00') lseek(r3, 0x2000, 0x0) 4.956423996s ago: executing program 5 (id=486): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 4.693202563s ago: executing program 2 (id=487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@exp_fastopen={0xfe, 0xa, 0xf989, "d50f8b5405be"}]}}}}}}}, 0x0) 4.593405568s ago: executing program 0 (id=488): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f864d2, 0x0) 4.572390723s ago: executing program 5 (id=489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x17, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff0018400063", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 4.426050459s ago: executing program 2 (id=490): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x22, 0x0, &(0x7f0000000740)="e02742e8b3d11cbf5edede86080070e9b38a6a6d8a5f784f3c2b3a79eb13f732936b", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x80, 0x2c0002) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000580)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "182325", 0x8, 0x2c, 0x0, @remote, @local, {[@routing={0x89, 0x0, 0x0, 0x1}]}}}}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x14, 0x24, 0x21, 0x70bd2d}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_open_dev$mtd(0x0, 0x48a99fbe, 0x10b241) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0xdc, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0xc0}, 0x20000004) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000000)=0x60a0, 0x4) r10 = open$dir(&(0x7f0000000040)='./file0\x00', 0x204083, 0x81) fchmodat(r10, &(0x7f0000000080)='./file0\x00', 0xb0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000680)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e21, @private=0xa010102}], 0x3c) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_P2P_DEVICE(r11, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4c, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 4.341345654s ago: executing program 0 (id=491): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, 0x0) capset(0x0, 0x0) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 4.06063993s ago: executing program 2 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000300)='pcsp', 0x4) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00), 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) read$FUSE(r2, &(0x7f0000002600)={0x2020}, 0x2020) r3 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 2.861593544s ago: executing program 0 (id=493): syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2) socket$key(0xf, 0x3, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) r0 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.833211311s ago: executing program 3 (id=494): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046f41, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00003, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, 0x0, 0x1, 0x0, 0x0) 2.831946978s ago: executing program 2 (id=495): r0 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0x5, 0x4}, {0x4, 0x1ff}}}}, 0x11) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x3, 0x3}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r5, 0x6a98047402e98331, 0xa1, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x40010) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x41, 0xfffffffc, {0xa, 0x40, 0x9, 0xfd, r6}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0xbe2e5b1053dc3ea0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000000), 0xffffffff, 0x10800) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x2, 0xffffffffffffffff, &(0x7f0000000080)) openat$cgroup_ro(r7, &(0x7f00000000c0)='cpuacct.usage_sys\x00', 0x0, 0x0) 2.706058301s ago: executing program 5 (id=496): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@errors_remount}, {@debug}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x56d, &(0x7f0000000540)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIsVdOJlLt9YfE7yYl6LDgd7P0mZlNF1Gk861Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoinhTOelJm6VJk3Vpm5rPB872vjknfc+Tc56X982bkAD61kj6Ty7iuYj4Mok4UrdvMLKdIyvHLT2+OZluSSwvf/hHEkn2WO34JPv/YFb5f0T88nnEqdz6dssLizMTxWJhLquPVmavjZYXFk9fmZ2YLkwXro6Nj597fXzsrTff6Fqsr1z865sP7r977osTS1//9PDo3STOx6FsX30cz+BWfWUkRrLXZCjONxx4tguN9ZJkp0+ATRnI8nwo0j7gSAxkWQ/8930WEctAn0rkP/Sp2jigNrfv0jx413j0zsoEaH38gyvvjcS+6tzowFLyxMwone8Od6H9tI2ff793N92ie+9DALR163ZEnBkcXN//JVn/t3lnOjimsQ39H2yf++n459Vm45/c6vgnmox/DjbJ3c1on/+5hw2H7OlCs6vS8d/bTce/q4tWwwNZ7XB1zDeUXL5SLKR92/8i4mQM7U3rG63nnFt6sNxqX/34L93S9mtjwew8Hg7uffI5UxOViWeJud6j2xHPNx3/JqvXP2ly/dPX42KHbRwv3Hux1b728W+t5e8jXm56/ddWtJKN1ydHq/fDaO2uWO/PO8d/bdX+TsefXv8DK/H/nU0JG+MfTurXa8tP38Z3+/4ptNq32ft/T/JRtVzrDG5MVCpzZyP2JO+vf3xs7bm1eu34NP6TJzbu/5rd//sj4uMO479z7McXNh//1krjn9r4/m+4/k9fePDep9+2ar+z6/9atXQye6ST/q/TE3yW1w4AAAAAAAB6TS4iDkWSy6+Wc7l8fuXzHcfiQK5YKldOXS7NX52K6ndlh2MoV1vpPrL2eYjqcutw3ecjxhrq4xFxNCK+GthfrecnS8WpnQ4eAAAAAAAAAAAAAAAAAAAAesTBFt//T/02sNNnB2w5P/kN/att/nfjl56AntQm/1/6ZLtOBNh2xv/Qv+Q/9C/5D/1L/kP/kv/Qv+Q/9C/5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAF118cKFdFteenxzMq1PXV+YnyldPz1VKM/kZ+cn85OluWv56VJpuljIT5Zm2/29Yql07exYzN8YrRTKldHywuKl2dL81cqlK7M/HI4oDG1LVAAAAAAAAAAAAAAAAAAAALC7lBcWZyaKxcKcQrWwN3riNHZRYbA3TqM/CxFb1sRO90wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsObfAAAA//9IKziJ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r3, &(0x7f0000000040), 0x27, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x100000, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{0x0}], 0x1) sendmmsg$sock(r3, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000080) 2.218734052s ago: executing program 1 (id=497): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001740)=[{&(0x7f0000000140)=""/50, 0x32}], 0x1) 1.556727127s ago: executing program 3 (id=498): socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) cachestat(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r2 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x85) syz_ublk_setup_io_uring(0x20, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.436573206s ago: executing program 2 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 1.398377898s ago: executing program 0 (id=500): connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc, 0x4}, 0x0, [0x9faf, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x4, 0xfeffffff, 0x0, 0x0, 0xffff, 0x1, 0x0, 0x0, 0x20000000, 0x0, 0x4, 0x0, 0x6, 0x8, 0x7fff, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x3, 0x0, 0x401, 0x0, 0xffffffff, 0xdc, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0xfffffffe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x83, 0x4, 0x1000, 0x0, 0xf, 0xc559, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0x20000100, 0x1, 0x0, 0x0, 0x66bd, 0x0, 0xfefffffd, 0x1, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x9bd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf, 0x0, 0x2], [0x8, 0xa, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0xffff, 0x0, 0x0, 0xffffff7f, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0xf, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000, 0x8000000, 0x403, 0x0, 0x0, 0x0, 0x80, 0x8, 0x0, 0x7, 0xca, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x8d, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffeffff, 0x1fd, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x7fd, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x401, 0x100000, 0x4, 0x10000, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 562.67049ms ago: executing program 5 (id=501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x80000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 425.490784ms ago: executing program 0 (id=502): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r0], 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x2000c050) ioctl$HCIINQUIRY(r2, 0x800448f0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{0x0}], 0x1, 0x0, 0x0, 0x2400c000}, 0x40c0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r6, &(0x7f0000000700)="b068aa", 0x3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x402) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) accept4(r7, 0x0, 0x0, 0x800) sendmmsg(r7, &(0x7f0000001140)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4, 0x1, {0xa, 0x4e20, 0x1, @empty, 0x6}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="102383327678dcf79957", 0xa}, {&(0x7f0000000300)="1499f156e99f27f8eead6dae04f1c6ec9ad7107d67394b65bab9998e53834274d1567c40d168b7f8c90ba283321cc7bae91d2a6bf453d99fdac6d19e91521ffed843b21086b7abb510b27934893094b95c459819ea7dbb41a820c34d853c711a1df26fafc885f56ab24f68470d93e2698fa616c295b876e32d305e74a744f093508b010bcf085894bad391fae6d04249bbf1e1adf30063641e046607821dc7063db4b98b4272cdb73dae3458d20609e22ed4fbfcc72e", 0xb6}], 0x2, 0xffffffffffffffff}}, {{&(0x7f0000000440)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="939a5f1d90dc2bd7da059309d92b37092e4809eafbfc5412ed2cce8fa40a0a4cfe410538df65e15d17c6ae403a6458", 0x2f}], 0x1}}, {{&(0x7f0000000600)=@sco, 0x80, &(0x7f0000001040)=[{&(0x7f0000000680)="14a644a1c525214ae06029f9443a66b3ad46d802b727d657b5c76f25cf525c5232e8c5b89566cd5e0cf918ec934a1a264aa8e5e0e12b4495ac4dc05c", 0x3c}, {&(0x7f00000006c0)="74e7980aa7cb34d5f956bd7167220cf1912d32db35b6a1bcc85099d61e113d9b0e981f0deb9fdd754ebdd42135ca0b5537e08d4c76e79050d8c0cf96137f0cf73141db4f3b87e5a77d795ae6b2d7fb2973ee2c43433e16edae5eb02f9eb4c64110ab852d9926cb8db318e6835bfc29d430098acb8bf388e4fff3b12885", 0x7d}, {&(0x7f00000007c0)}, {&(0x7f0000000e40)="1081a9faaf320ef563f7e17d66e0403b0cc0e7908970e85353fbf350855880169e30ba5a7ecab52a129d493c3f040247953c6f13cd4a5855b272a922d50b08b6b12ecd3cd1e3e5eaf7d5f47541278118a205b5a12968d92be40dfaa6065a1599fc431c1a95bbea2da4b7417e2425f444eb1c296bb92030899cb6f0ee65cd6a40d554afcfec7def2f11d580d0f2438826cc21d10a41d8b87be1ec26db4e520fd1fe5ce69a510b2ac104c67722dfd82c42568a6335792547986ff02bb19213", 0xbe}, {&(0x7f0000000f40)}, {0x0}, {&(0x7f0000001000)="2168d1552ee29a", 0x7}], 0x7}}], 0x3, 0x44) 405.164758ms ago: executing program 2 (id=503): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r1 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040011) 390.687283ms ago: executing program 3 (id=504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) setns(0xc9, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r3, @ANYBLOB="000000000000000018100000", @ANYRES32=r4, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r5, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 25.13014ms ago: executing program 5 (id=505): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/cec/cec0/status\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/256, 0x100) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000740)=ANY=[@ANYBLOB="00164c000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x3, 0x139, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x127, 0x1, 0x1, 0x3, 0x10, 0x3, "", [{{0x9, 0x4, 0x0, 0x54, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x9, 0x24, 0x6, 0x0, 0x0, "3d55e815"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x7, 0xa, 0xf2}, [@ncm={0x6, 0x24, 0x1a, 0x3, 0x1}, @country_functional={0x6, 0x24, 0x7, 0x0, 0x6}, @country_functional={0x10, 0x24, 0x7, 0x2, 0x5, [0x3, 0x81, 0x7, 0x0, 0x7]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1}, @mdlm_detail={0xbb, 0x24, 0x13, 0x9, "714c51a5b3e85ec241f596e1d6a2aa7b841aeb53103ee7737783aef09121e6488780512501c7ecfbef40b11b8bcdac0c9436bb8be5e2b40efa49a8e2a6aefa29b962345218991449619fde8f11b0e6ca101563f4b4b55d0c418f40f587ef36a3a0b5492c462128926fe66c6f39a72a7d09e932c24c176ac3a883830c7dbec31c2c486ee641fa53ed3fb72f5823d261227f40227c3f23030d1e3e435e15e7d1855657557d0b876c5fbb08dd900702921b05f0e462c30b05"}, @mbim={0xc, 0x24, 0x1b, 0xfffe, 0x0, 0x9, 0x8, 0x6, 0xa1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x8, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x6, 0x7}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xe, 0x2, 0x32, 0x40, 0x7}, 0x4a, &(0x7f0000000300)={0x5, 0xf, 0x4a, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "8666250816677c07da889bb3d5efd4a3"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "cbbe81cd4cfdc3453372612486d2c568"}, @generic={0x13, 0x10, 0x1, "ef55f0cd163e66ba9a14119f948843d6"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x7, 0x3}]}, 0x4, [{0xf4, &(0x7f0000000380)=@string={0xf4, 0x3, "50a166516ae3e3f422a74155e561458247aec0aaeb319e364eeea2c088585bab76a5b02554ef8991c525d3854158717b59a7ead7cf335974793d5c0193dcf5f3a92955d621087c130a223f26aa10ed272f3ecd304c783e5532c01167daba375d041ddc0845d47204743c5f3fd8dfc4ebe19e2d9d396139facd14bdee0905bec12969c72220938a75b838b8440ce6d1905ffb19ad6673f3fba17f463be91879bf097d6b8e81a85e6b80c8ec46c21ac3752d3cf194502096730cb361660f6c173cc1991f921cc042d31a870dc103815564aa34e127a1a9b334fc96d2246a1c0cfb0b7ba0b31ca692ff6c523029bacad9fc8517"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2010}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x140c}}]}) 0s ago: executing program 0 (id=506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x17, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff0018400063", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="000000000000000040001280"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. syzkaller login: [ 79.138423][ T5605] cgroup: Unknown subsys name 'net' [ 79.232640][ T5605] cgroup: Unknown subsys name 'cpuset' [ 79.241282][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.812340][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.278055][ T5618] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.287679][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.295784][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.303682][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.313401][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.318274][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.319702][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.322771][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.323760][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.331386][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.333055][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.346991][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.368029][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.376256][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.392654][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.446583][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.455061][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.459464][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.462308][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.472479][ T5627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.475908][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.478649][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.486724][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.512279][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.520431][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.359600][ T4934] Bluetooth: hci1: command tx timeout [ 85.391452][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.392246][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.392597][ T5625] bridge_slave_0: entered allmulticast mode [ 85.399482][ T5625] bridge_slave_0: entered promiscuous mode [ 85.449255][ T5623] Bluetooth: hci2: command tx timeout [ 85.449255][ T4934] Bluetooth: hci0: command tx timeout [ 85.476152][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.476607][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.477021][ T5625] bridge_slave_1: entered allmulticast mode [ 85.484105][ T5625] bridge_slave_1: entered promiscuous mode [ 85.518903][ T5623] Bluetooth: hci4: command tx timeout [ 85.576152][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.576375][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.576772][ T5616] bridge_slave_0: entered allmulticast mode [ 85.583650][ T5616] bridge_slave_0: entered promiscuous mode [ 85.591938][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.592175][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.592540][ T5616] bridge_slave_1: entered allmulticast mode [ 85.597353][ T5616] bridge_slave_1: entered promiscuous mode [ 85.599640][ T5623] Bluetooth: hci3: command tx timeout [ 85.674386][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.684332][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.770383][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.780257][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.819869][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.822732][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.823141][ T5624] bridge_slave_0: entered allmulticast mode [ 85.827780][ T5624] bridge_slave_0: entered promiscuous mode [ 85.859206][ T5625] team0: Port device team_slave_0 added [ 85.875790][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.876879][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.877245][ T5615] bridge_slave_0: entered allmulticast mode [ 85.883108][ T5615] bridge_slave_0: entered promiscuous mode [ 85.886968][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.887253][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.887787][ T5624] bridge_slave_1: entered allmulticast mode [ 85.898116][ T5624] bridge_slave_1: entered promiscuous mode [ 85.952302][ T5625] team0: Port device team_slave_1 added [ 85.970419][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.970650][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.970995][ T5617] bridge_slave_0: entered allmulticast mode [ 85.975972][ T5617] bridge_slave_0: entered promiscuous mode [ 85.989528][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.989819][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.992088][ T5617] bridge_slave_1: entered allmulticast mode [ 85.997349][ T5617] bridge_slave_1: entered promiscuous mode [ 86.014876][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.015152][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.015566][ T5615] bridge_slave_1: entered allmulticast mode [ 86.022526][ T5615] bridge_slave_1: entered promiscuous mode [ 86.070581][ T5616] team0: Port device team_slave_0 added [ 86.108578][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.117039][ T5616] team0: Port device team_slave_1 added [ 86.123010][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.123052][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.123118][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.172516][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.182735][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.201063][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.201102][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.203237][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.223123][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.250723][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.313185][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.354306][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.354354][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.355701][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.367983][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.368027][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.368102][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.444490][ T5615] team0: Port device team_slave_0 added [ 86.451474][ T5624] team0: Port device team_slave_0 added [ 86.476085][ T5617] team0: Port device team_slave_0 added [ 86.482801][ T5615] team0: Port device team_slave_1 added [ 86.491231][ T5624] team0: Port device team_slave_1 added [ 86.523354][ T5625] hsr_slave_0: entered promiscuous mode [ 86.527285][ T5625] hsr_slave_1: entered promiscuous mode [ 86.536084][ T5617] team0: Port device team_slave_1 added [ 86.607532][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.607580][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.607606][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.666384][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.666431][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.666475][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.673769][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.673786][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.673813][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.712367][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.712385][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.712409][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.734756][ T5616] hsr_slave_0: entered promiscuous mode [ 86.737767][ T5616] hsr_slave_1: entered promiscuous mode [ 86.744748][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 86.744972][ T5616] Cannot create hsr debugfs directory [ 86.789267][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.789320][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.789424][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.852574][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.852626][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.852700][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.138456][ T5624] hsr_slave_0: entered promiscuous mode [ 87.143528][ T5624] hsr_slave_1: entered promiscuous mode [ 87.145967][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 87.146043][ T5624] Cannot create hsr debugfs directory [ 87.167202][ T5615] hsr_slave_0: entered promiscuous mode [ 87.172010][ T5615] hsr_slave_1: entered promiscuous mode [ 87.174668][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 87.174738][ T5615] Cannot create hsr debugfs directory [ 87.250802][ T5617] hsr_slave_0: entered promiscuous mode [ 87.254104][ T5617] hsr_slave_1: entered promiscuous mode [ 87.256561][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 87.256591][ T5617] Cannot create hsr debugfs directory [ 87.440029][ T5623] Bluetooth: hci1: command tx timeout [ 87.518964][ T5623] Bluetooth: hci0: command tx timeout [ 87.519009][ T5623] Bluetooth: hci2: command tx timeout [ 87.609178][ T5623] Bluetooth: hci4: command tx timeout [ 87.688952][ T5623] Bluetooth: hci3: command tx timeout [ 87.794535][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.806640][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.810770][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.824149][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.840600][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.851037][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.853185][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.868011][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.943298][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.953342][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.962082][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.972952][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.981292][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.991717][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.006167][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.016819][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.095887][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.110955][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.125207][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.134896][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.139692][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.152213][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.164812][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.174990][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.271655][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.286263][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.294520][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.304185][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.326728][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.336373][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.342013][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.353661][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.400133][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.475388][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.483631][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.496231][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.505322][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.517386][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.542144][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.553997][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.571282][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.582922][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.593857][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.594941][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.637691][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.637972][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.696836][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.772524][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.818622][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.819076][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.842441][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.877269][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.885656][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.885915][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.961869][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.966130][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.029413][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.029549][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.040400][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.040681][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.080173][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.080540][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.086844][ T1184] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.087164][ T1184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.184593][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.230571][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.287410][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.287545][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.357501][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.357795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.519448][ T5623] Bluetooth: hci1: command tx timeout [ 89.600292][ T5623] Bluetooth: hci2: command tx timeout [ 89.600343][ T5623] Bluetooth: hci0: command tx timeout [ 89.680270][ T4934] Bluetooth: hci4: command tx timeout [ 89.762421][ T4934] Bluetooth: hci3: command tx timeout [ 89.985940][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.204012][ T5625] veth0_vlan: entered promiscuous mode [ 90.255450][ T5625] veth1_vlan: entered promiscuous mode [ 90.396447][ T5625] veth0_macvtap: entered promiscuous mode [ 90.458077][ T5625] veth1_macvtap: entered promiscuous mode [ 90.516874][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.531841][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.581436][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.615817][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.650516][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.743539][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.821113][ T3379] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.822928][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.822993][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.930631][ T5616] veth0_vlan: entered promiscuous mode [ 90.975195][ T5624] veth0_vlan: entered promiscuous mode [ 91.036639][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.036704][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.066922][ T5616] veth1_vlan: entered promiscuous mode [ 91.083542][ T5624] veth1_vlan: entered promiscuous mode [ 91.112951][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.171538][ T3379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.171577][ T3379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.283705][ T5625] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.305702][ T5616] veth0_macvtap: entered promiscuous mode [ 91.338617][ T5624] veth0_macvtap: entered promiscuous mode [ 91.356771][ T5616] veth1_macvtap: entered promiscuous mode [ 91.402250][ T5624] veth1_macvtap: entered promiscuous mode [ 91.459029][ T5617] veth0_vlan: entered promiscuous mode [ 91.506546][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.542879][ T5617] veth1_vlan: entered promiscuous mode [ 91.563924][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.575793][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.602389][ T4934] Bluetooth: hci1: command tx timeout [ 91.621846][ T5615] veth0_vlan: entered promiscuous mode [ 91.636720][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.662188][ T5615] veth1_vlan: entered promiscuous mode [ 91.679220][ T4934] Bluetooth: hci0: command tx timeout [ 91.679498][ T5623] Bluetooth: hci2: command tx timeout [ 91.779917][ T4934] Bluetooth: hci4: command tx timeout [ 91.836088][ T5615] veth0_macvtap: entered promiscuous mode [ 91.849388][ T4934] Bluetooth: hci3: command tx timeout [ 91.884004][ T5615] veth1_macvtap: entered promiscuous mode [ 91.998255][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.088571][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.113645][ T990] cfg80211: failed to load regulatory.db [ 92.147729][ T1184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.267909][ T1184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.323318][ T1184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.452721][ T5812] syz.3.6 uses obsolete (PF_INET,SOCK_PACKET) [ 92.588939][ T3379] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.610624][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.619409][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.637343][ T3379] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.637521][ T3379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.637705][ T3379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.637847][ T3379] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.637944][ T3379] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.638042][ T3379] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.638137][ T3379] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.638300][ T3379] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.127400][ T5617] veth0_macvtap: entered promiscuous mode [ 93.389421][ T5617] veth1_macvtap: entered promiscuous mode [ 93.401307][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.401335][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.640492][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.878392][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.887311][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.073083][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.123743][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.133321][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.375475][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.376132][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.376169][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.376382][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.506388][ T5822] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.647568][ T2148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.673358][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.673402][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.753157][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.786389][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.797254][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.003552][ T2148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.017807][ T2148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.953835][ T5835] capability: warning: `syz.2.9' uses 32-bit capabilities (legacy support in use) [ 96.007414][ T5835] program syz.2.9 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.190846][ T5842] xt_hashlimit: size too large, truncated to 1048576 [ 98.550909][ T922] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.770842][ T922] usb 5-1: Using ep0 maxpacket: 32 [ 99.506189][ T12] IPVS: starting estimator thread 0... [ 99.514831][ T5870] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 99.600865][ T5871] IPVS: using max 25 ests per chain, 60000 per kthread [ 99.772220][ T922] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 99.800617][ T922] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 99.800753][ T922] usb 5-1: config 0 has no interface number 0 [ 99.800819][ T922] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.800851][ T922] usb 5-1: config 0 interface 85 has no altsetting 0 [ 99.817857][ T922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.817890][ T922] usb 5-1: Product: syz [ 99.817906][ T922] usb 5-1: Manufacturer: syz [ 99.817922][ T922] usb 5-1: SerialNumber: syz [ 100.058779][ T922] usb 5-1: config 0 descriptor?? [ 100.933664][ T922] appletouch 5-1:0.85: Geyser mode initialized. [ 100.942723][ T922] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input5 [ 101.117725][ T5887] loop0: detected capacity change from 0 to 256 [ 101.208784][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 101.208870][ T989] usb 5-1: USB disconnect, device number 2 [ 101.799276][ T989] appletouch 5-1:0.85: input: appletouch disconnected [ 102.079381][ T5896] xt_hashlimit: size too large, truncated to 1048576 [ 103.311340][ T5911] warning: `syz.2.37' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.994934][ T5931] loop2: detected capacity change from 0 to 256 [ 107.108489][ T5953] xt_hashlimit: size too large, truncated to 1048576 [ 109.809295][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.57'. [ 111.450994][ T5996] loop1: detected capacity change from 0 to 1024 [ 111.455274][ T5996] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.538056][ T5996] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 111.547622][ T5996] System zones: 0-1, 3-12 [ 111.605537][ T5996] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.258461][ T5616] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.905113][ T6013] xt_hashlimit: size too large, truncated to 1048576 [ 117.944345][ T6041] LUN: removable file: (no medium) [ 118.038866][ T31] audit: type=1800 audit(1786598373.720:2): pid=6041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.75" name="file" dev="configfs" ino=9579 res=0 errno=0 [ 118.216171][ T6029] Can't find ip_set type hash:ip,ma [ 120.073874][ T6063] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 121.028782][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.179614][ T25] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 121.190866][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.190932][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.190973][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 121.191003][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.191050][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.138050][ T25] gud 1-1:1.0: Failed to get connectors (error=-71) [ 122.144970][ T25] gud 1-1:1.0: probe with driver gud failed with error -71 [ 122.199387][ T25] usb 1-1: USB disconnect, device number 2 [ 123.047266][ T31] audit: type=1800 audit(1786598378.770:3): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.89" name="file" dev="configfs" ino=9663 res=0 errno=0 [ 123.758788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 124.395420][ T6103] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 125.320552][ T6109] Bluetooth: MGMT ver 1.23 [ 125.320629][ T6109] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 129.685686][ T31] audit: type=1800 audit(1786598385.410:4): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.101" name="file" dev="configfs" ino=9731 res=0 errno=0 [ 131.029294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 131.438833][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.729135][ T6146] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 132.782563][ T5623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.786114][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.794688][ T5623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.797804][ T5623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.800625][ T5623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 132.961919][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.962093][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.513783][ T6171] loop0: detected capacity change from 0 to 512 [ 133.566334][ T6174] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 134.440646][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.881060][ T5623] Bluetooth: hci5: command tx timeout [ 135.484127][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.703552][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.827556][ T5623] Bluetooth: Wrong link type (-57) [ 135.939981][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.606208][ T6212] loop0: detected capacity change from 0 to 512 [ 136.693670][ T50] bridge_slave_1: left allmulticast mode [ 136.693756][ T50] bridge_slave_1: left promiscuous mode [ 136.733493][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.741092][ T922] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 136.814718][ T50] bridge_slave_0: left allmulticast mode [ 136.814777][ T50] bridge_slave_0: left promiscuous mode [ 136.819847][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.898785][ T922] usb 3-1: Using ep0 maxpacket: 16 [ 136.905358][ T922] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 136.916738][ T922] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.929694][ T922] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.942740][ T922] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.949599][ T922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.970163][ T5623] Bluetooth: hci5: command tx timeout [ 136.978723][ T922] usb 3-1: config 0 descriptor?? [ 137.506233][ T922] nzxt-smart2 0003:1E71:2009.0001: item fetching failed at offset 0/5 [ 137.520206][ T922] nzxt-smart2 0003:1E71:2009.0001: probe with driver nzxt-smart2 failed with error -22 [ 137.593139][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.604572][ T922] usb 3-1: USB disconnect, device number 2 [ 137.654605][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.696513][ T50] bond0 (unregistering): Released all slaves [ 137.767786][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.768036][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.768475][ T6156] bridge_slave_0: entered allmulticast mode [ 137.803344][ T6156] bridge_slave_0: entered promiscuous mode [ 137.833973][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.834315][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.834672][ T6156] bridge_slave_1: entered allmulticast mode [ 137.855813][ T6156] bridge_slave_1: entered promiscuous mode [ 138.203869][ T6239] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.130'. [ 139.050438][ T4934] Bluetooth: hci5: command tx timeout [ 139.162454][ T6156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.194246][ T6156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.456103][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 139.467584][ T6156] team0: Port device team_slave_0 added [ 139.493654][ T6156] team0: Port device team_slave_1 added [ 139.557219][ T6259] loop2: detected capacity change from 0 to 512 [ 139.807797][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.816147][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.844100][ T6156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.858369][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.865957][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.894520][ T6156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.068605][ T6156] hsr_slave_0: entered promiscuous mode [ 140.077324][ T6156] hsr_slave_1: entered promiscuous mode [ 140.089634][ T6156] debugfs: 'hsr0' already exists in 'hsr' [ 140.096650][ T6156] Cannot create hsr debugfs directory [ 140.789889][ T6274] capability: warning: `syz.0.141' uses deprecated v2 capabilities in a way that may be insecure [ 141.128896][ T4934] Bluetooth: hci5: command tx timeout [ 142.074379][ T50] hsr_slave_0: left promiscuous mode [ 142.083578][ T50] hsr_slave_1: left promiscuous mode [ 142.098763][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.114329][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.136406][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.144704][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.202756][ T50] veth1_macvtap: left promiscuous mode [ 142.202873][ T50] veth0_macvtap: left promiscuous mode [ 142.216991][ T50] veth1_vlan: left promiscuous mode [ 142.217316][ T50] veth0_vlan: left promiscuous mode [ 142.904791][ T6309] loop1: detected capacity change from 0 to 512 [ 143.092433][ T50] team0 (unregistering): Port device team_slave_1 removed [ 143.138320][ T50] team0 (unregistering): Port device team_slave_0 removed [ 143.351823][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 146.241704][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 146.635525][ T6355] loop2: detected capacity change from 0 to 256 [ 147.086166][ T6353] loop0: detected capacity change from 0 to 512 [ 147.245354][ T6156] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 147.284808][ T6156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.290965][ T6156] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 147.354631][ T6156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.369760][ T6156] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 147.475558][ T6156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.525959][ T6156] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 147.624045][ T6156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.908451][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.958848][ T5740] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 147.968195][ T6156] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.004729][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.005011][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.053450][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.053580][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.109613][ T5740] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 148.120297][ T5740] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 148.120364][ T5740] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 148.145589][ T5740] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 148.145658][ T5740] usb 4-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 148.173341][ T5740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.181679][ T5740] usb 4-1: Product: syz [ 148.186029][ T5740] usb 4-1: Manufacturer: syz [ 148.191785][ T5740] usb 4-1: SerialNumber: syz [ 148.212341][ T5740] ti_usb_3410_5052 4-1:2.0: TI USB 5052 2 port adapter converter detected [ 148.232707][ T5740] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 148.252049][ T5740] usb 4-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 148.430633][ T6367] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 148.459839][ T5740] usb 4-1: USB disconnect, device number 2 [ 148.524876][ T5740] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 148.551891][ T5740] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 148.563788][ T5740] ti_usb_3410_5052 4-1:2.0: device disconnected [ 149.170478][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 149.546337][ T6399] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 149.651408][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 149.707000][ T6399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 149.853563][ T6415] loop1: detected capacity change from 0 to 512 [ 149.909776][ T5726] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 150.062576][ T5726] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 150.074033][ T5726] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 150.074080][ T5726] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 150.074115][ T5726] usb 4-1: config 220 has no interface number 2 [ 150.074181][ T5726] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 150.074213][ T5726] usb 4-1: config 220 interface 0 has no altsetting 0 [ 150.074238][ T5726] usb 4-1: config 220 interface 76 has no altsetting 0 [ 150.074258][ T5726] usb 4-1: config 220 interface 1 has no altsetting 0 [ 150.107985][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.108054][ T5726] usb 4-1: Product: syz [ 150.108096][ T5726] usb 4-1: Manufacturer: syz [ 150.108140][ T5726] usb 4-1: SerialNumber: syz [ 150.466745][ T6156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.483316][ T5726] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 150.483471][ T5726] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 150.489787][ T5726] uvcvideo 4-1:220.0: No valid video chain found. [ 150.490632][ T5726] usb 4-1: selecting invalid altsetting 0 [ 150.595795][ T5726] usb 4-1: selecting invalid altsetting 0 [ 150.595853][ T5726] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 150.635569][ T5726] usb 4-1: USB disconnect, device number 3 [ 151.918716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 153.189731][ T5726] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 153.404357][ T5726] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 153.483946][ T5726] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 153.495257][ T5726] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 153.535715][ T5726] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 153.549816][ T5726] usb 3-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 153.614759][ T5726] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.624261][ T5726] usb 3-1: Product: syz [ 153.631281][ T5726] usb 3-1: Manufacturer: syz [ 153.637842][ T5726] usb 3-1: SerialNumber: syz [ 153.985426][ T5726] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 154.176820][ T5726] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 154.412097][ T6451] syzkaller0: entered promiscuous mode [ 154.412139][ T6451] syzkaller0: entered allmulticast mode [ 154.436381][ T5726] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 154.483624][ T5726] usb 3-1: USB disconnect, device number 3 [ 154.540953][ T5726] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 154.570811][ T5726] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 154.583663][ T5726] ti_usb_3410_5052 3-1:2.0: device disconnected [ 154.643672][ T6156] veth0_vlan: entered promiscuous mode [ 154.692815][ T6156] veth1_vlan: entered promiscuous mode [ 154.712179][ T6460] loop1: detected capacity change from 0 to 512 [ 154.874418][ T6156] veth0_macvtap: entered promiscuous mode [ 154.914244][ T6156] veth1_macvtap: entered promiscuous mode [ 154.970085][ T4934] Bluetooth: Wrong link type (-57) [ 155.009362][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.076459][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.165381][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.258925][ T1102] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.277523][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.309609][ T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.474299][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.482498][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.691584][ T3379] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.691628][ T3379] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.909149][ T6497] Can't find ip_set type hash:ip,mar [ 157.118923][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 157.498488][ T6514] loop1: detected capacity change from 0 to 512 [ 157.684531][ T9] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 157.698324][ T9] usb 1-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.701902][ T9] usb 1-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.708873][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.708953][ T9] usb 1-1: Product: syz [ 157.709001][ T9] usb 1-1: Manufacturer: syz [ 157.709048][ T9] usb 1-1: SerialNumber: syz [ 157.749878][ T9] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 157.784281][ T9] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 157.828402][ T9] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 157.977937][ T6494] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 158.001059][ T5726] usb 1-1: USB disconnect, device number 3 [ 158.021179][ T6523] ip6gre1: entered promiscuous mode [ 158.026632][ T6523] ip6gre1: entered allmulticast mode [ 158.052018][ T5726] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 158.084459][ T5726] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 158.097459][ T5726] ti_usb_3410_5052 1-1:2.0: device disconnected [ 158.727760][ T4934] Bluetooth: Wrong link type (-57) [ 158.994368][ T6537] uprobe: syz.3.213:6537 failed to unregister, leaking uprobe [ 162.440747][ T6568] loop2: detected capacity change from 0 to 512 [ 162.696656][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.5.224'. [ 162.735172][ T6576] l2tp_ppp: sess 2/0: no socket in recv [ 165.719041][ T6624] loop2: detected capacity change from 0 to 512 [ 166.270274][ T4934] Bluetooth: Wrong link type (-57) [ 166.270404][ T4934] Bluetooth: hci4: link tx timeout [ 166.270699][ T4934] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 168.320587][ T4934] Bluetooth: hci4: command 0x0406 tx timeout [ 169.429304][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 169.838876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 170.331919][ T6675] Set syz1 is full, maxelem 1029 reached [ 171.046904][ T6696] loop0: detected capacity change from 0 to 512 [ 173.544492][ T6722] Set syz1 is full, maxelem 1029 reached [ 173.844575][ T6738] loop5: detected capacity change from 0 to 512 [ 174.310145][ T922] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 174.492163][ T922] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 174.503314][ T922] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 174.514907][ T922] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 174.528924][ T922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.528967][ T922] usb 3-1: Product: syz [ 174.528988][ T922] usb 3-1: Manufacturer: syz [ 174.529008][ T922] usb 3-1: SerialNumber: syz [ 174.566157][ T922] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 174.583700][ T922] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 174.598910][ T922] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 174.767892][ T6747] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 174.820611][ T5712] usb 3-1: USB disconnect, device number 4 [ 175.788534][ T5712] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 175.804516][ T5712] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 175.808453][ T5712] ti_usb_3410_5052 3-1:2.0: device disconnected [ 177.200976][ T6785] loop5: detected capacity change from 0 to 512 [ 178.388998][ T5726] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 178.456741][ T6803] binder: 6802:6803 ioctl 4018620d 0 returned -22 [ 179.180921][ T5726] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 179.289651][ T5726] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 179.433824][ T5726] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 179.455154][ T5726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.455206][ T5726] usb 2-1: Product: syz [ 179.455244][ T5726] usb 2-1: Manufacturer: syz [ 179.455267][ T5726] usb 2-1: SerialNumber: syz [ 179.505993][ T5726] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 179.617320][ T5726] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 179.664416][ T5726] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 181.618518][ T5740] usb 2-1: USB disconnect, device number 2 [ 181.639100][ T6827] program syz.3.297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.668577][ T5740] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 181.716042][ T5740] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 181.748540][ T5740] ti_usb_3410_5052 2-1:2.0: device disconnected [ 185.525415][ T6871] loop5: detected capacity change from 0 to 512 [ 185.670061][ T6874] program syz.2.311 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.711398][ T5726] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 185.869525][ T5726] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 185.880317][ T5726] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 185.891815][ T5726] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 185.904614][ T5726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.904690][ T5726] usb 1-1: Product: syz [ 185.904714][ T5726] usb 1-1: Manufacturer: syz [ 185.904736][ T5726] usb 1-1: SerialNumber: syz [ 185.953255][ T5726] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 185.978088][ T5726] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 186.008818][ T5726] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 186.218894][ T6869] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 186.257024][ T5740] usb 1-1: USB disconnect, device number 4 [ 186.323847][ T5740] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 187.291602][ T5740] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 187.292602][ T5740] ti_usb_3410_5052 1-1:2.0: device disconnected [ 188.831617][ T6911] program syz.3.323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.909284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 190.715793][ T6920] loop5: detected capacity change from 0 to 256 [ 190.763693][ T6922] loop3: detected capacity change from 0 to 512 [ 194.406909][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.407505][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.993662][ T6960] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.327'. [ 195.249861][ T6966] loop1: detected capacity change from 0 to 512 [ 195.343230][ T6969] can0: slcan on ptm0. [ 196.490403][ T6976] ucsi_ccg 0-0008: ucsi_ccg_init failed - -110 [ 196.493871][ T6976] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -110 [ 196.494587][ T6976] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 196.549787][ T6967] can0 (unregistered): slcan off ptm0. [ 196.802183][ T6986] program syz.2.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.429601][ T7001] loop2: detected capacity change from 0 to 256 [ 197.975726][ T7005] Zero length message leads to an empty skb [ 198.127921][ T7008] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.353'. [ 198.354861][ T7014] loop5: detected capacity change from 0 to 1024 [ 198.357855][ T7014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.433341][ T7014] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 198.433662][ T7014] System zones: 0-1, 3-12 [ 198.487806][ T7014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.526004][ T7019] loop0: detected capacity change from 0 to 512 [ 199.489883][ T6156] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.816519][ T7027] program syz.0.359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.481633][ T7033] can0: slcan on ptm0. [ 200.828476][ T7041] i2c i2c-0: Failed to register i2c client ccgx-ucsi at 0x08 (-16) [ 200.836391][ T7039] mmap: syz.5.360 (7039) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 201.439137][ T7031] can0 (unregistered): slcan off ptm0. [ 203.763038][ T7057] loop5: detected capacity change from 0 to 512 [ 204.016641][ T7067] program syz.1.371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.135793][ T7069] loop3: detected capacity change from 0 to 1024 [ 204.163019][ T7069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 204.269716][ T7069] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 204.269970][ T7069] System zones: 0-1, 3-12 [ 204.296584][ T7069] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.182703][ T5625] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.921069][ T7102] program syz.5.382 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.213367][ T7110] loop2: detected capacity change from 0 to 1024 [ 206.233568][ T7110] EXT4-fs: Ignoring removed nomblk_io_submit option [ 206.277144][ T7110] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 206.312510][ T7110] System zones: 0-1, 3-12 [ 206.337400][ T7110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.352629][ T7114] loop1: detected capacity change from 0 to 512 [ 207.119933][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 207.119987][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 207.120031][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 207.345168][ T5624] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.371523][ T4934] Bluetooth: Wrong link type (-57) [ 208.974118][ T7141] program syz.2.396 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.123762][ T7149] loop5: detected capacity change from 0 to 512 [ 209.653981][ T7156] loop0: detected capacity change from 0 to 256 [ 210.189748][ T4934] Bluetooth: Wrong link type (-57) [ 213.637538][ T7194] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present [ 213.705818][ T7197] loop0: detected capacity change from 0 to 512 [ 214.923072][ T4934] Bluetooth: Wrong link type (-57) [ 216.706127][ T7236] loop0: detected capacity change from 0 to 512 [ 217.140398][ T5733] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 217.299673][ T5733] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 217.311529][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.325332][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.325396][ T5733] usb 4-1: Product: syz [ 217.325416][ T5733] usb 4-1: Manufacturer: syz [ 217.325436][ T5733] usb 4-1: SerialNumber: syz [ 217.366619][ T5733] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 217.393084][ T5733] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 217.574700][ T5733] usb 4-1: USB disconnect, device number 4 [ 217.817558][ T7252] netlink: 20 bytes leftover after parsing attributes in process `syz.1.433'. [ 218.075535][ T4934] Bluetooth: Wrong link type (-57) [ 220.608385][ T7290] sd 0:0:1:0: PR command failed: 1026 [ 220.618739][ T7290] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 220.627195][ T7290] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 222.248862][ T4934] Bluetooth: Wrong link type (-57) [ 224.955016][ T7317] loop5: detected capacity change from 0 to 256 [ 226.847757][ T7335] loop2: detected capacity change from 0 to 512 [ 228.233923][ T4934] Bluetooth: Wrong link type (-57) [ 228.528991][ T922] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 228.668745][ T922] usb 1-1: device descriptor read/64, error -71 [ 228.918826][ T922] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 229.002480][ T7360] xt_hashlimit: size too large, truncated to 1048576 [ 229.149038][ T922] usb 1-1: device descriptor read/64, error -71 [ 229.259064][ T922] usb usb1-port1: attempt power cycle [ 229.618821][ T922] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 229.657167][ T922] usb 1-1: device descriptor read/8, error -71 [ 229.889228][ T922] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 229.905273][ T7372] sd 0:0:1:0: PR command failed: 1026 [ 229.905358][ T7372] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 229.905471][ T7372] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 229.929014][ T922] usb 1-1: device descriptor read/8, error -71 [ 230.039056][ T922] usb usb1-port1: unable to enumerate USB device [ 231.210071][ T4934] Bluetooth: Wrong link type (-57) [ 233.994515][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 235.722834][ T4934] Bluetooth: Wrong link type (-57) [ 235.960000][ T7431] loop5: detected capacity change from 0 to 1024 [ 236.741024][ T7431] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.845834][ T7431] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6042c028, mo2=0102] [ 236.846098][ T7431] System zones: 0-1, 3-12 [ 236.877349][ T7431] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.941334][ T7443] input: syz0 as /devices/virtual/input/input8 [ 237.661415][ T6156] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.955895][ T7448] Bluetooth: MGMT ver 1.23 [ 238.267890][ T2148] ------------[ cut here ]------------ [ 238.267925][ T2148] !dev [ 238.268550][ T2148] WARNING: drivers/infiniband/core/restrack.c:138 at res_to_rt+0x1c4/0x230, CPU#0: kworker/u8:9/2148 [ 238.288519][ T2148] Modules linked in: [ 238.293617][ T2148] CPU: 0 UID: 0 PID: 2148 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.304738][ T2148] Tainted: [L]=SOFTLOCKUP [ 238.309187][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.319505][ T2148] Workqueue: ib_addr process_one_req [ 238.324894][ T2148] RIP: 0010:res_to_rt+0x1c4/0x230 [ 238.330044][ T2148] Code: 41 5d 41 5e 41 5f c3 cc cc cc cc cc e8 35 ae f5 f8 48 8d 3d be 10 b6 07 43 0f b6 44 25 00 84 c0 75 48 8b 33 67 48 0f b9 3a 90 <0f> 0b 90 31 c0 eb cc 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fe ff [ 238.350452][ T2148] RSP: 0018:ffffc90006e57850 EFLAGS: 00010293 [ 238.356942][ T2148] RAX: ffffffff88d1fda5 RBX: ffff8880293f64f8 RCX: ffff88802be4ddc0 [ 238.365130][ T2148] RDX: 0000000000000000 RSI: ffffffff8ffa1230 RDI: 0000000000000003 [ 238.373349][ T2148] RBP: 0000000000000000 R08: ffff88802be4ddc0 R09: 000000000000000a [ 238.381406][ T2148] R10: 0000000000000009 R11: 0000000000000000 R12: dffffc0000000000 [ 238.389483][ T2148] R13: 1ffff1100527ec9f R14: 0000000000000000 R15: 0000000000000003 [ 238.397500][ T2148] FS: 0000000000000000(0000) GS:ffff888124cfc000(0000) knlGS:0000000000000000 [ 238.406513][ T2148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 238.413368][ T2148] CR2: 0000200000001000 CR3: 000000007761c000 CR4: 00000000003526f0 [ 238.421582][ T2148] Call Trace: [ 238.425052][ T2148] [ 238.428024][ T2148] rdma_restrack_add+0x5a/0x8a0 [ 238.432959][ T2148] ? addr_handler+0x406/0x5a0 [ 238.437695][ T2148] addr_handler+0x41a/0x5a0 [ 238.442297][ T2148] ? __pfx_addr_handler+0x10/0x10 [ 238.448120][ T2148] ? __pfx_addr_handler+0x10/0x10 [ 238.453752][ T2148] process_one_req+0x2eb/0x540 [ 238.458568][ T2148] ? process_scheduled_works+0x97a/0x1630 [ 238.464469][ T2148] process_scheduled_works+0xc3d/0x1630 [ 238.470139][ T2148] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.476175][ T2148] ? assign_work+0x3cf/0x5d0 [ 238.480850][ T2148] worker_thread+0xa47/0xfb0 [ 238.485501][ T2148] ? __kthread_parkme+0x71/0x1f0 [ 238.490550][ T2148] kthread+0x38b/0x480 [ 238.494698][ T2148] ? __pfx_worker_thread+0x10/0x10 [ 238.499958][ T2148] ? __pfx_kthread+0x10/0x10 [ 238.504588][ T2148] ret_from_fork+0x514/0xb70 [ 238.509383][ T2148] ? __pfx_ret_from_fork+0x10/0x10 [ 238.514560][ T2148] ? __switch_to+0xc89/0x1420 [ 238.519353][ T2148] ? __pfx_kthread+0x10/0x10 [ 238.523988][ T2148] ret_from_fork_asm+0x1a/0x30 [ 238.528868][ T2148] [ 238.531939][ T2148] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 238.539252][ T2148] CPU: 0 UID: 0 PID: 2148 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.550302][ T2148] Tainted: [L]=SOFTLOCKUP [ 238.554660][ T2148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 238.564756][ T2148] Workqueue: ib_addr process_one_req [ 238.570105][ T2148] Call Trace: [ 238.573421][ T2148] [ 238.576415][ T2148] vpanic+0x56d/0xa60 [ 238.580447][ T2148] ? __pfx__printk+0x10/0x10 [ 238.585088][ T2148] ? __pfx_vpanic+0x10/0x10 [ 238.589643][ T2148] ? is_bpf_text_address+0x292/0x2b0 [ 238.594978][ T2148] ? is_bpf_text_address+0x26/0x2b0 [ 238.600238][ T2148] panic+0xc5/0xd0 [ 238.604010][ T2148] ? __pfx_panic+0x10/0x10 [ 238.608484][ T2148] ? ret_from_fork_asm+0x1a/0x30 [ 238.613475][ T2148] __warn+0x315/0x4c0 [ 238.617510][ T2148] ? res_to_rt+0x1c4/0x230 [ 238.621976][ T2148] ? res_to_rt+0x1c4/0x230 [ 238.626536][ T2148] __report_bug+0x276/0x570 [ 238.631117][ T2148] ? trace_contention_end+0x3d/0x140 [ 238.636539][ T2148] ? res_to_rt+0x1c4/0x230 [ 238.641039][ T2148] ? __pfx___report_bug+0x10/0x10 [ 238.646217][ T2148] ? cma_acquire_dev_by_src_ip+0x733/0x8f0 [ 238.652087][ T2148] ? __mutex_unlock_slowpath+0x731/0x900 [ 238.657781][ T2148] ? res_to_rt+0x1c4/0x230 [ 238.662248][ T2148] report_bug+0x16b/0x220 [ 238.666639][ T2148] ? res_to_rt+0x1c4/0x230 [ 238.671130][ T2148] ? res_to_rt+0x1c6/0x230 [ 238.675602][ T2148] handle_bug+0x9c/0x200 [ 238.679905][ T2148] exc_invalid_op+0x1a/0x50 [ 238.684540][ T2148] asm_exc_invalid_op+0x1a/0x20 [ 238.689439][ T2148] RIP: 0010:res_to_rt+0x1c4/0x230 [ 238.694510][ T2148] Code: 41 5d 41 5e 41 5f c3 cc cc cc cc cc e8 35 ae f5 f8 48 8d 3d be 10 b6 07 43 0f b6 44 25 00 84 c0 75 48 8b 33 67 48 0f b9 3a 90 <0f> 0b 90 31 c0 eb cc 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 59 fe ff [ 238.714250][ T2148] RSP: 0018:ffffc90006e57850 EFLAGS: 00010293 [ 238.720452][ T2148] RAX: ffffffff88d1fda5 RBX: ffff8880293f64f8 RCX: ffff88802be4ddc0 [ 238.728469][ T2148] RDX: 0000000000000000 RSI: ffffffff8ffa1230 RDI: 0000000000000003 [ 238.736481][ T2148] RBP: 0000000000000000 R08: ffff88802be4ddc0 R09: 000000000000000a [ 238.744501][ T2148] R10: 0000000000000009 R11: 0000000000000000 R12: dffffc0000000000 [ 238.752522][ T2148] R13: 1ffff1100527ec9f R14: 0000000000000000 R15: 0000000000000003 [ 238.760542][ T2148] ? res_to_rt+0x225/0x230 [ 238.765032][ T2148] rdma_restrack_add+0x5a/0x8a0 [ 238.769936][ T2148] ? addr_handler+0x406/0x5a0 [ 238.774690][ T2148] addr_handler+0x41a/0x5a0 [ 238.779364][ T2148] ? __pfx_addr_handler+0x10/0x10 [ 238.784476][ T2148] ? __pfx_addr_handler+0x10/0x10 [ 238.789547][ T2148] process_one_req+0x2eb/0x540 [ 238.794362][ T2148] ? process_scheduled_works+0x97a/0x1630 [ 238.800122][ T2148] process_scheduled_works+0xc3d/0x1630 [ 238.805761][ T2148] ? __pfx_process_scheduled_works+0x10/0x10 [ 238.811804][ T2148] ? assign_work+0x3cf/0x5d0 [ 238.816456][ T2148] worker_thread+0xa47/0xfb0 [ 238.821111][ T2148] ? __kthread_parkme+0x71/0x1f0 [ 238.826112][ T2148] kthread+0x38b/0x480 [ 238.830216][ T2148] ? __pfx_worker_thread+0x10/0x10 [ 238.835379][ T2148] ? __pfx_kthread+0x10/0x10 [ 238.840011][ T2148] ret_from_fork+0x514/0xb70 [ 238.844663][ T2148] ? __pfx_ret_from_fork+0x10/0x10 [ 238.849871][ T2148] ? __switch_to+0xc89/0x1420 [ 238.854725][ T2148] ? __pfx_kthread+0x10/0x10 [ 238.859447][ T2148] ret_from_fork_asm+0x1a/0x30 [ 238.864292][ T2148] [ 238.867951][ T2148] Kernel Offset: disabled [ 238.872384][ T2148] Rebooting in 86400 seconds..