last executing test programs: 19m40.72072181s ago: executing program 32 (id=202): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r1 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r0, 0xffffffffffffffff, 0x0) 13m39.975404363s ago: executing program 33 (id=1472): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x15, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000002"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0) r3 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r3, &(0x7f0000f62000/0x1000)=nil, 0x7000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0xc, 0x2, 0x47425247, 0x1, 0x2, 0x6, 0x2, 0x9, 0x0, 0x0, 0x2, 0x4}}) r4 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x2980) ioctl$RTC_WKALM_RD(r4, 0x40187014, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0xffffffffffffff7f, 0x4, 0x100000001, 0x800000, 0x6, 0x3, 0x6, 0xfffffffffffffffd, 0x501002}) 9m34.040090757s ago: executing program 6 (id=4028): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) unshare(0x40200) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x3, 0xbbdd}, {0x2, 0x100, 0x3000}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) 9m32.985042522s ago: executing program 6 (id=4033): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/52, 0x34}, 0x1000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0xe7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x801, &(0x7f00000001c0)={0xa, 0x4e20, 0xffffffff, @mcast1}, 0x1c) 9m32.476714581s ago: executing program 6 (id=4037): mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) futex(&(0x7f0000004000)=0x2, 0x8d, 0xfffffffd, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000003140)={0x3, 0x1000000}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x12, r1, 0x0) 9m32.235691925s ago: executing program 6 (id=4040): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='.\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) 9m31.921213084s ago: executing program 6 (id=4042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00007d2000/0x800000)=nil, 0x800000, 0x8) close(r1) 9m30.006835222s ago: executing program 6 (id=4065): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000310000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m29.395565309s ago: executing program 34 (id=4065): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000310000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m58.599904679s ago: executing program 5 (id=4850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003980)}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) 6m52.619600548s ago: executing program 5 (id=4869): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m48.972930713s ago: executing program 5 (id=4872): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d6", 0x29}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195d826f9", 0x86}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m46.573455314s ago: executing program 5 (id=4876): setsockopt(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r5, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) 6m44.696214284s ago: executing program 2 (id=4880): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x6000006, 0xfffffefc, 0x6}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = inotify_init1(0x800) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) inotify_add_watch(r0, &(0x7f0000000180)='./control\x00', 0xa4000960) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r5, &(0x7f0000000080)=""/4096, 0x1000) 6m44.54115461s ago: executing program 5 (id=4881): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r3, 0x0, 0x0) 6m42.913820779s ago: executing program 2 (id=4887): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x6, 0x0, &(0x7f0000000500)) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/223, 0xdf}], 0x1, 0x9, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f0000000540)="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", 0x1ab) readlinkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=""/209, 0xd1) 6m42.907464372s ago: executing program 5 (id=4888): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd8", 0x4c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 6m40.157550847s ago: executing program 2 (id=4895): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908", 0x41}, {&(0x7f00000006c0)="080c0434", 0x4}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272", 0x7e}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m38.195113434s ago: executing program 2 (id=4899): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000006c0)={0x0, &(0x7f0000000500)}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m36.692952498s ago: executing program 2 (id=4906): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98e", 0x1c}, {&(0x7f00000006c0)='\b\f', 0x2}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c", 0x5a}], 0x3}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb00000000000020000400"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m36.384804873s ago: executing program 2 (id=4911): r0 = fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x80000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 6m27.616786012s ago: executing program 35 (id=4888): sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd8", 0x4c}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINK={0x8, 0x5, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f00000003c0)={{0x2, @multicast2, 0xdffd, 0x800002, 'nq\x00', 0x8, 0x3, 0x3}, {@private=0xa010300, 0xfffd, 0x3, 0x8, 0x8, 0x2000050}}, 0x44) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 6m19.267983278s ago: executing program 36 (id=4911): r0 = fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x200003}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0, 0x80000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) ioctl$UFFDIO_REGISTER(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 5m35.278180757s ago: executing program 4 (id=5157): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffd, 0x10000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, {0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0xffffffffffffffff, 0x25f}}, 0x48) socket$kcm(0x2c, 0x3, 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='vxfs\x00', 0x1000080, 0x0) socket$netlink(0x10, 0x3, 0x0) 5m33.050032785s ago: executing program 4 (id=5164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r1, &(0x7f00000025c0), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r2 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x1bb, 0x0, 0x0, 0x0, 0x55}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) 5m24.105412592s ago: executing program 4 (id=5181): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2, 0xffff, 0x9dfe, 0x11}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d820000005200"}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f00"], 0x18) openat$cgroup(r3, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2d, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) socket$packet(0x11, 0x2, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x84) 5m22.563460568s ago: executing program 4 (id=5186): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 5m22.008103344s ago: executing program 4 (id=5192): r0 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @multicast}, 0x10) add_key$user(0x0, &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000780), 0x0, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5m17.466564252s ago: executing program 4 (id=5197): unshare(0x20000400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r2, 0xfffffffffffffffd, 0x0) readv(r2, &(0x7f0000000b40)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) process_madvise(r1, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001000)='\x00', 0x1}, {&(0x7f00000006c0)="970127369c", 0x5}], 0x3, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000480)=""/136, 0x88}], 0x2}, 0x3f}], 0x2, 0x2041, 0x0) sync() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f0000000040)={0x1, 0x2, @raw_data=[0x2, 0x0, 0x6, 0x8, 0x4, 0xfffffffd, 0x8, 0x7ff, 0xfffffffe, 0x1ff, 0x9, 0xcb2, 0x6, 0x9, 0x1fc, 0x4]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x746280000, 0x82040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000040)=0x1) 5m2.276023212s ago: executing program 37 (id=5197): unshare(0x20000400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002080)='pagemap\x00') lseek(r2, 0xfffffffffffffffd, 0x0) readv(r2, &(0x7f0000000b40)=[{&(0x7f0000000240)=""/236, 0xec}], 0x1) process_madvise(r1, &(0x7f00000015c0)=[{0x0}, {&(0x7f0000001000)='\x00', 0x1}, {&(0x7f00000006c0)="970127369c", 0x5}], 0x3, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000004580)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/157, 0x9d}, {&(0x7f0000000480)=""/136, 0x88}], 0x2}, 0x3f}], 0x2, 0x2041, 0x0) sync() r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000300)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r6, 0xc0485660, &(0x7f0000000040)={0x1, 0x2, @raw_data=[0x2, 0x0, 0x6, 0x8, 0x4, 0xfffffffd, 0x8, 0x7ff, 0xfffffffe, 0x1ff, 0x9, 0xcb2, 0x6, 0x9, 0x1fc, 0x4]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r7 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x746280000, 0x82040) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r7, 0xc0045520, &(0x7f0000000040)=0x1) 2m42.644938198s ago: executing program 7 (id=5634): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405668, &(0x7f0000000140)={0x2000009, 0x3, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x31303453}) 2m41.404388897s ago: executing program 7 (id=5638): r0 = socket(0x2, 0x80805, 0x0) connect$inet(r0, 0x0, 0x0) 2m40.976945765s ago: executing program 7 (id=5643): r0 = socket(0x1e, 0x4, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x4c) 2m40.733162792s ago: executing program 7 (id=5646): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)) 2m40.538220677s ago: executing program 7 (id=5649): r0 = syz_open_dev$vivid(&(0x7f0000000480), 0x0, 0x2) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f00000004c0)={0xc, @capture={0x0, 0x0, {0x3ff, 0x4}, 0x4, 0x7ff}}) 2m40.206926874s ago: executing program 7 (id=5654): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 2m25.152916996s ago: executing program 38 (id=5654): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x70bd25, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) 49.984976012s ago: executing program 0 (id=6624): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2) 49.547721359s ago: executing program 0 (id=6629): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xc3f, 0x70bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 48.451832495s ago: executing program 0 (id=6640): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001d0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a", 0x43}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x1cb) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 48.165117147s ago: executing program 0 (id=6644): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x16) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000058c0)={0x2020}, 0x2020) 47.716709864s ago: executing program 0 (id=6650): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netfilter\x00') r1 = fanotify_init(0x40, 0x40000) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x8) fanotify_mark(r1, 0x1, 0x40001019, r2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000002640)={0x3, 0xa5b1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 46.163072695s ago: executing program 0 (id=6672): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000200)='c', 0xffffff3c}], 0x1, 0xb) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000003c0)=0x7) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}}, 0x0, 0x0, 0x4f, 0x0, "3e4641f3cce9866040f8cb5c3e0ab71972958a84663af93d3c2eb62e424b5be5390875d92be4947a277f4d830f65459a4ca20bddc220b47f0647cd8b5989b758bc6d65fa511e8d1833f9496a0c8de6e9"}, 0xd8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r3, 0xe4776000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000380)=[{0x7, 0x0, 0x9, 0x4}, {0x8, 0x0, 0x0, 0x2c}, {0x5, 0x6, 0x6, 0x3}, {0x4, 0x56, 0x14, 0x6}, {0x7, 0x1, 0x2, 0x800}]}) msgctl$IPC_RMID(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRES16=r5, @ANYBLOB="4d0c15626548c978392e1030a9089abd8cc296452a582dda3ea59a51067deff50fab2b02dd61e77e07cb6ad2657a6630", @ANYRESDEC=0x0, @ANYBLOB="4d9793290bc0107515f0e30f453d40b881e26bc395674138da2ba3233ef77360e3c12d3128ddac78f396633e8d92a929fc2b7d8325cdaf864b53d3d5df98d544c00c03f2552ae92fbd61ee95db8197663a26043ddddeafd71ae2fe5f37475746640f22af9ddf7d765125dbcf7db23abc2df5adb1eec3691d7a4216b112977b63366145721e0eb196a3daa241efbf3dc8d021c9dc4ed35b24b0096964109e96152d506f951809ed1cf816e4c76d55bd1d3ae59dbbf9024e6c6520c9ca91fb234b4655267b34a5327c9f23181c8cf061db178ce7d13a5471aa3ddb2faaea5d7b80d3411d"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000000000109000100"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209b00000000028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x35, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f6318ac44e"}}) socket$nl_route(0x10, 0x3, 0x0) 45.631286592s ago: executing program 39 (id=6672): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000200)='c', 0xffffff3c}], 0x1, 0xb) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000003c0)=0x7) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x6}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}}, 0x0, 0x0, 0x4f, 0x0, "3e4641f3cce9866040f8cb5c3e0ab71972958a84663af93d3c2eb62e424b5be5390875d92be4947a277f4d830f65459a4ca20bddc220b47f0647cd8b5989b758bc6d65fa511e8d1833f9496a0c8de6e9"}, 0xd8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x83, 0x0, "a30b3b28af4d2f246a01a845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a0000c6df82b800"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r3, 0xe4776000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x5, &(0x7f0000000380)=[{0x7, 0x0, 0x9, 0x4}, {0x8, 0x0, 0x0, 0x2c}, {0x5, 0x6, 0x6, 0x3}, {0x4, 0x56, 0x14, 0x6}, {0x7, 0x1, 0x2, 0x800}]}) msgctl$IPC_RMID(0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRES16=r5, @ANYBLOB="4d0c15626548c978392e1030a9089abd8cc296452a582dda3ea59a51067deff50fab2b02dd61e77e07cb6ad2657a6630", @ANYRESDEC=0x0, @ANYBLOB="4d9793290bc0107515f0e30f453d40b881e26bc395674138da2ba3233ef77360e3c12d3128ddac78f396633e8d92a929fc2b7d8325cdaf864b53d3d5df98d544c00c03f2552ae92fbd61ee95db8197663a26043ddddeafd71ae2fe5f37475746640f22af9ddf7d765125dbcf7db23abc2df5adb1eec3691d7a4216b112977b63366145721e0eb196a3daa241efbf3dc8d021c9dc4ed35b24b0096964109e96152d506f951809ed1cf816e4c76d55bd1d3ae59dbbf9024e6c6520c9ca91fb234b4655267b34a5327c9f23181c8cf061db178ce7d13a5471aa3ddb2faaea5d7b80d3411d"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000060a010400000000000000000000000109000100"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e21, 0xc, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a2bd205f00f81bef965a071f0d1aadd97b9640d9a0cd9ea71a5e9aec7f03d4406a7710c42cb5e754b089928abcd7589d209b00000000028eb7fafaa8b125736e00"}, 0xd8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x35, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db1ac8225b997fc21693c0942f0686928c388bc6f6318ac44e"}}) socket$nl_route(0x10, 0x3, 0x0) 10.814497427s ago: executing program 9 (id=7045): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1902) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x52, 0x1, 0x0, "600000eef2000020000000ddee4f9100000000000000000000ff0057e31e9400"}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xa3, 0x1b0c07, 0x0, 0x0, 0x1000}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r0, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x84383, 0x0) 10.251203587s ago: executing program 9 (id=7050): r0 = fsopen(&(0x7f0000000200)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) inotify_init1(0x80800) socket$packet(0x11, 0x3, 0x300) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000000}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) 9.699247486s ago: executing program 9 (id=7059): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b00)={0x18, &(0x7f0000000740)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f00000001c0)={0x0, 0x16}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 6.635916443s ago: executing program 3 (id=7083): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000440)=0x8000a, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1400000002010500"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 6.549046853s ago: executing program 9 (id=7084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffe3523, 0x6, 0xefcb, 0x7fff, 0xb2, "20ab980900eea4a7446c180000cd681ec267a0", 0x6, 0x4}) 6.05315808s ago: executing program 3 (id=7089): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x98}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 4.604963293s ago: executing program 3 (id=7093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x109982) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x80000001}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 3.278808994s ago: executing program 1 (id=7098): mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(0x0, 0xbc9dc8fbd81cb4a1) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.15695663s ago: executing program 3 (id=7099): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) wait4(r0, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"a2e3ad21ed0d09f91b0b380987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f37096c060890e0878f0e1ac6e7049b094a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130f91850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153fae46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c343f7f140f319539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004c0400000000000000ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d984836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885e94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffd6f}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ptrace(0x10, r3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0xa, 0x0) ioctl$UI_GET_VERSION(r5, 0x8004552d, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000040)) 3.107853111s ago: executing program 8 (id=7100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r3, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r3, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008080) 2.948333241s ago: executing program 1 (id=7101): getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0x2020) 1.961100643s ago: executing program 8 (id=7102): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x3, 0x0) 1.788405283s ago: executing program 3 (id=7103): ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x6, 0x0, 0x0) 1.775729596s ago: executing program 1 (id=7104): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) setsockopt$sock_int(r2, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) 1.5850422s ago: executing program 8 (id=7105): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x3}}}}}}}, 0x0) 1.555419078s ago: executing program 1 (id=7106): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000200)={0x0, 0x0}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) unlink(&(0x7f0000000180)='./bus\x00') 1.555137407s ago: executing program 9 (id=7107): unshare(0x20000400) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='attr\x00') syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) getdents(r1, &(0x7f0000001080)=""/4096, 0x1000) 1.379291989s ago: executing program 8 (id=7108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f00000002c0)=0x3) 1.221257891s ago: executing program 1 (id=7109): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000380)=0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x28, 0x26, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x14, 0xdd, 0x0, 0x1, [@nested={0x10, 0x67, 0x0, 0x1, [@typed={0xc, 0x13f, 0x0, 0x0, @u64=0x10}]}]}]}, 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x208}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) 536.425855ms ago: executing program 8 (id=7110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$inet6_tcp(0xa, 0x1, 0x0) 274.931696ms ago: executing program 3 (id=7111): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r3, 0xa1) shutdown(r3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x94) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 216.860168ms ago: executing program 8 (id=7112): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) wait4(r0, 0x0, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, &(0x7f0000001040)={0xe, {"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", 0xfffffffffffffd6f}}, 0x1006) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ptrace(0x10, r3) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0xa, 0x0) ioctl$UI_GET_VERSION(r5, 0x8004552d, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x541c, &(0x7f0000000040)) 99.866592ms ago: executing program 1 (id=7113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x15, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x3, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 0s ago: executing program 9 (id=7114): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) fchdir(0xffffffffffffffff) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x1, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) kernel console output (not intermixed with test programs): ch=c000003e syscall=202 compat=0 ip=0x7fbfe22ccdd9 code=0x7ffc0000 [ 795.408240][ T36] audit: type=1326 audit(1778273554.539:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.4.4462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbfe22ccdd9 code=0x7ffc0000 [ 795.410135][ T36] audit: type=1326 audit(1778273554.539:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.4.4462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe22ccdd9 code=0x7ffc0000 [ 795.410467][ T36] audit: type=1326 audit(1778273554.539:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.4.4462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe22ccdd9 code=0x7ffc0000 [ 795.528246][ T36] audit: type=1326 audit(1778273554.659:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.4.4462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe22ccdd9 code=0x7ffc0000 [ 795.529049][ T36] audit: type=1326 audit(1778273554.659:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.4.4462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe22ccdd9 code=0x7ffc0000 [ 795.535628][ T36] audit: type=1326 audit(1778273554.659:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.4.4462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe22ccdd9 code=0x7ffc0000 [ 795.535682][ T36] audit: type=1326 audit(1778273554.659:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.4.4462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe22ccdd9 code=0x7ffc0000 [ 795.535723][ T36] audit: type=1326 audit(1778273554.659:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17574 comm="syz.4.4462" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfe22ccdd9 code=0x7ffc0000 [ 796.586892][T17605] binder: 17604:17605 ioctl c0306201 200000000080 returned -14 [ 796.599230][T17605] binder: 17604:17605 ioctl c0306201 2000000003c0 returned -14 [ 797.160059][T17630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4481'. [ 802.347857][T17724] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4513'. [ 802.348396][T17724] gretap0: entered promiscuous mode [ 802.373936][T17724] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4513'. [ 802.374222][T17724] 0ªî{X¹¦: renamed from gretap0 [ 802.557645][T17724] 0ªî{X¹¦: left promiscuous mode [ 802.558339][T17724] 0ªî{X¹¦: entered allmulticast mode [ 802.588989][T17724] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 808.868909][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.868991][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.164085][T17895] netlink: 'syz.4.4565': attribute type 1 has an invalid length. [ 812.474216][T17898] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 812.475488][T17898] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 813.000767][ T1251] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 813.039941][T17902] bond1: (slave gretap2): making interface the new active one [ 813.087081][T17902] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 813.197209][ T1251] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.197287][ T1251] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 813.197321][ T1251] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.233633][ T1251] usb 8-1: config 0 descriptor?? [ 813.398968][ T1251] pwc: Askey VC010 type 2 USB webcam detected. [ 814.124663][ T1251] pwc: recv_control_msg error -32 req 02 val 2b00 [ 814.138297][ T1251] pwc: recv_control_msg error -32 req 02 val 2700 [ 814.149901][ T1251] pwc: recv_control_msg error -32 req 02 val 2c00 [ 814.158172][ T1251] pwc: recv_control_msg error -32 req 04 val 1000 [ 814.160384][ T1251] pwc: recv_control_msg error -32 req 04 val 1300 [ 814.227201][T17937] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4576'. [ 814.711213][ T1251] pwc: recv_control_msg error -32 req 04 val 1400 [ 814.934576][ T1251] pwc: recv_control_msg error -32 req 02 val 2000 [ 814.935884][ T1251] pwc: recv_control_msg error -32 req 02 val 2100 [ 814.939788][ T1251] pwc: recv_control_msg error -32 req 04 val 1500 [ 815.194195][ T1251] pwc: recv_control_msg error -71 req 02 val 2400 [ 815.194759][ T1251] pwc: recv_control_msg error -71 req 02 val 2600 [ 815.196091][ T1251] pwc: recv_control_msg error -71 req 02 val 2900 [ 815.197010][ T1251] pwc: recv_control_msg error -71 req 02 val 2800 [ 815.198249][ T1251] pwc: recv_control_msg error -71 req 04 val 1100 [ 815.198846][ T1251] pwc: recv_control_msg error -71 req 04 val 1200 [ 815.297340][ T1251] pwc: Registered as video103. [ 815.309159][ T1251] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input14 [ 815.344730][ T1251] usb 8-1: USB disconnect, device number 2 [ 819.344255][T17956] syz.7.4586 (17956) used greatest stack depth: 16832 bytes left [ 823.475947][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4609'. [ 825.207432][ T36] kauditd_printk_skb: 20 callbacks suppressed [ 825.207454][ T36] audit: type=1326 audit(1778273584.339:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.5.4617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c43bcdd9 code=0x7ffc0000 [ 825.207797][ T36] audit: type=1326 audit(1778273584.339:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.5.4617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c43bcdd9 code=0x7ffc0000 [ 825.210251][ T36] audit: type=1326 audit(1778273584.339:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.5.4617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c43bcdd9 code=0x7ffc0000 [ 825.210322][ T36] audit: type=1326 audit(1778273584.339:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.5.4617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c43bcdd9 code=0x7ffc0000 [ 825.325381][ T36] audit: type=1326 audit(1778273584.459:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.5.4617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0c43bcdd9 code=0x7ffc0000 [ 825.325447][ T36] audit: type=1326 audit(1778273584.459:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.5.4617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0c43bcb42 code=0x7ffc0000 [ 825.325496][ T36] audit: type=1326 audit(1778273584.459:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.5.4617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fd0c43bcbd7 code=0x7ffc0000 [ 825.325544][ T36] audit: type=1326 audit(1778273584.459:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.5.4617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fd0c4379ad1 code=0x7ffc0000 [ 825.325592][ T36] audit: type=1326 audit(1778273584.459:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.5.4617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fd0c43bdbc9 code=0x7ffc0000 [ 825.327592][ T36] audit: type=1326 audit(1778273584.339:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18054 comm="syz.5.4617" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7fd0c43bcdd9 code=0x7ffc0000 [ 830.941026][T18125] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[18128] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[18125] [ 833.383538][T18143] fuse: fd is not a fuse device [ 837.519599][T18189] vxfs: unable to read disk superblock at 1 [ 837.520164][T18189] vxfs: unable to read disk superblock at 8 [ 837.520181][T18189] vxfs: can't find superblock. [ 854.189867][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 854.189892][ T36] audit: type=1800 audit(1778273613.279:546): pid=18348 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.4693" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 854.219173][T18348] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 854.219223][T18348] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 854.219244][T18348] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 858.660673][T11450] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 858.813275][T11450] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 858.813341][T11450] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 858.813365][T11450] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.861593][T11450] usb 8-1: config 0 descriptor?? [ 858.980965][T11450] pwc: Askey VC010 type 2 USB webcam detected. [ 859.305351][T11450] pwc: recv_control_msg error -32 req 02 val 2b00 [ 859.308689][T11450] pwc: recv_control_msg error -32 req 02 val 2700 [ 859.310096][T11450] pwc: recv_control_msg error -32 req 02 val 2c00 [ 859.330868][T11450] pwc: recv_control_msg error -32 req 04 val 1000 [ 859.331674][T11450] pwc: recv_control_msg error -32 req 04 val 1300 [ 859.335445][T11450] pwc: recv_control_msg error -32 req 04 val 1400 [ 859.339369][T11450] pwc: recv_control_msg error -32 req 02 val 2000 [ 859.370045][T11450] pwc: recv_control_msg error -32 req 02 val 2100 [ 859.372778][T11450] pwc: recv_control_msg error -32 req 04 val 1500 [ 859.374007][T11450] pwc: recv_control_msg error -32 req 02 val 2500 [ 859.375519][T11450] pwc: recv_control_msg error -32 req 02 val 2400 [ 860.758573][T11450] pwc: recv_control_msg error -71 req 02 val 2900 [ 860.759145][T11450] pwc: recv_control_msg error -71 req 02 val 2800 [ 860.759892][T11450] pwc: recv_control_msg error -71 req 04 val 1100 [ 860.760386][T11450] pwc: recv_control_msg error -71 req 04 val 1200 [ 861.155651][T11450] pwc: Registered as video103. [ 861.171070][T11450] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input15 [ 862.083252][T11450] usb 8-1: USB disconnect, device number 3 [ 866.852833][T18489] overlayfs: failed to clone lowerpath [ 866.973876][T18490] overlayfs: failed to clone lowerpath [ 870.342782][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.342863][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.864256][T18515] Bluetooth: hci1: Unknown advertising packet type: 0x18 [ 870.864284][T18515] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 870.864302][T18515] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 870.864314][T18515] Bluetooth: hci1: Malformed LE Event: 0x0d [ 872.555719][T18515] Bluetooth: hci0: command 0x0406 tx timeout [ 879.778145][ T59] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 880.498682][ T59] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 882.510069][ T59] Bluetooth: hci4: unexpected event for opcode 0x0000 [ 882.684599][ T59] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 884.865200][T18647] PKCS8: Unsupported PKCS#8 version [ 886.540724][ T59] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 886.541143][ T59] Bluetooth: hci4: Injecting HCI hardware error event [ 886.550399][ T59] Bluetooth: hci4: hardware error 0x00 [ 886.700781][T18515] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 886.701046][T18515] Bluetooth: hci0: Injecting HCI hardware error event [ 886.707293][T18515] Bluetooth: hci0: hardware error 0x00 [ 888.202523][T18679] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 890.650683][T18515] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 890.650832][ T59] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 891.040787][ T1251] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 891.190671][ T1251] usb 8-1: Using ep0 maxpacket: 32 [ 891.193269][ T1251] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 891.193299][ T1251] usb 8-1: config 0 has no interface number 0 [ 891.193357][ T1251] usb 8-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 891.193382][ T1251] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 891.193410][ T1251] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 891.193438][ T1251] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 891.193463][ T1251] usb 8-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 891.193490][ T1251] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 891.193512][ T1251] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 891.193536][ T1251] usb 8-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 65024, setting to 1024 [ 891.193562][ T1251] usb 8-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 891.193585][ T1251] usb 8-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.582465][ T1251] usb 8-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 892.582501][ T1251] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.582523][ T1251] usb 8-1: Product: syz [ 892.582537][ T1251] usb 8-1: Manufacturer: syz [ 892.582552][ T1251] usb 8-1: SerialNumber: syz [ 892.630115][ T1251] usb 8-1: config 0 descriptor?? [ 892.640110][T18705] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 892.648906][T18705] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 892.668385][ T1251] usb 8-1: will this work? Response EP is not usually 3 [ 892.668412][ T1251] usb 8-1: will this work? Image data EP is not usually 2 [ 892.968205][ T1251] scsi host1: microtekX6 [ 893.047275][ T1251] usb 8-1: USB disconnect, device number 4 [ 893.086646][ T57] usb 8-1: error -19 submitting URB [ 893.122768][ T57] usb 8-1: error -19 submitting URB [ 893.160762][ T57] usb 8-1: error -19 submitting URB [ 894.750420][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4843'. [ 905.681443][ T5714] IPVS: starting estimator thread 0... [ 906.715410][T18805] IPVS: using max 7 ests per chain, 16800 per kthread [ 912.831527][T18865] netlink: 'syz.2.4887': attribute type 12 has an invalid length. [ 915.028340][T18890] misc userio: Invalid payload size [ 915.031917][T18890] misc userio: No port type given on /dev/userio [ 916.981789][T18903] vxfs: unable to read disk superblock at 1 [ 916.982062][T18903] vxfs: unable to read disk superblock at 8 [ 916.982077][T18903] vxfs: can't find superblock. [ 918.002945][T18912] Bluetooth: MGMT ver 1.23 [ 918.686296][T18931] hub 8-0:1.0: USB hub found [ 918.709015][T18931] hub 8-0:1.0: 1 port detected [ 928.884900][T18515] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 928.968649][T18515] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 928.988803][T18515] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 928.999927][T18515] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 929.009802][T18515] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 929.030702][ T4980] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 929.191659][ T4980] usb 8-1: Using ep0 maxpacket: 16 [ 929.197366][ T4980] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 929.197398][ T4980] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.197417][ T4980] usb 8-1: config 0 has no interface number 0 [ 929.201086][ T4980] usb 8-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 929.201113][ T4980] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.201132][ T4980] usb 8-1: Product: syz [ 929.201145][ T4980] usb 8-1: Manufacturer: syz [ 929.201158][ T4980] usb 8-1: SerialNumber: syz [ 929.217096][ T4980] usb 8-1: config 0 descriptor?? [ 929.234594][ T4980] uvcvideo 8-1:0.105: probe with driver uvcvideo failed with error -22 [ 929.523963][T19025] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4941'. [ 931.111428][T18515] Bluetooth: hci5: command tx timeout [ 931.553011][ T4980] usb 8-1: USB disconnect, device number 5 [ 931.750720][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.750800][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.191282][T18515] Bluetooth: hci5: command tx timeout [ 935.264270][T18515] Bluetooth: hci5: command tx timeout [ 935.890807][T19080] binfmt_misc: register: failed to install interpreter file éq‰Y’3aK [ 937.220725][ T1251] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 937.340819][ T59] Bluetooth: hci5: command tx timeout [ 937.423794][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 937.446028][ T1251] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 937.446101][ T1251] usb 8-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 937.446126][ T1251] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.569907][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 937.571434][ T1251] usb 8-1: config 0 descriptor?? [ 937.579777][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 937.581444][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 937.586314][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 937.636156][ T1251] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 938.119745][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4973'. [ 939.423226][ T36] audit: type=1326 audit(1778273698.559:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.4.4978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfe22c6b57 code=0x7ffc0000 [ 939.423285][ T36] audit: type=1326 audit(1778273698.559:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.4.4978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfe226e159 code=0x7ffc0000 [ 939.423332][ T36] audit: type=1326 audit(1778273698.559:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.4.4978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfe22c6b57 code=0x7ffc0000 [ 939.423403][ T36] audit: type=1326 audit(1778273698.559:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.4.4978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfe226e159 code=0x7ffc0000 [ 939.423634][ T36] audit: type=1326 audit(1778273698.559:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.4.4978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfe22c6b57 code=0x7ffc0000 [ 939.423952][ T36] audit: type=1326 audit(1778273698.559:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.4.4978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfe226e159 code=0x7ffc0000 [ 939.499422][ T36] audit: type=1326 audit(1778273698.629:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.4.4978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfe22c6b57 code=0x7ffc0000 [ 939.499862][ T36] audit: type=1326 audit(1778273698.629:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.4.4978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfe226e159 code=0x7ffc0000 [ 939.500170][ T36] audit: type=1326 audit(1778273698.629:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.4.4978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfe22c6b57 code=0x7ffc0000 [ 939.500319][ T36] audit: type=1326 audit(1778273698.629:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19129 comm="syz.4.4978" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfe226e159 code=0x7ffc0000 [ 939.678094][ T9] usb 8-1: USB disconnect, device number 6 [ 939.829657][ T59] Bluetooth: hci4: command tx timeout [ 941.752865][T19165] vxfs: unable to read disk superblock at 1 [ 941.753137][T19165] vxfs: unable to read disk superblock at 8 [ 941.753154][T19165] vxfs: can't find superblock. [ 941.901780][ T59] Bluetooth: hci4: command tx timeout [ 941.919949][T19014] bridge0: port 1(bridge_slave_0) entered blocking state [ 941.920161][T19014] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.938125][T19014] bridge_slave_0: entered allmulticast mode [ 941.955212][T19014] bridge_slave_0: entered promiscuous mode [ 942.089025][T19014] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.089716][T19014] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.089997][T19014] bridge_slave_1: entered allmulticast mode [ 942.131995][T19014] bridge_slave_1: entered promiscuous mode [ 942.542615][T19172] overlayfs: failed to clone upperpath [ 942.914567][T19014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 942.967330][T19014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.147704][T19014] team0: Port device team_slave_0 added [ 943.158383][T19014] team0: Port device team_slave_1 added [ 944.284761][T19014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.284782][T19014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.284812][T19014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.358733][ T59] Bluetooth: hci4: command tx timeout [ 944.409084][T19014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.409104][T19014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.409143][T19014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.064527][T19014] hsr_slave_0: entered promiscuous mode [ 945.068372][T19014] hsr_slave_1: entered promiscuous mode [ 945.089503][T19014] debugfs: 'hsr0' already exists in 'hsr' [ 945.089534][T19014] Cannot create hsr debugfs directory [ 946.141675][T19216] netlink: 456 bytes leftover after parsing attributes in process `syz.4.5008'. [ 946.381457][ T59] Bluetooth: hci4: command tx timeout [ 949.588834][T19095] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.588975][T19095] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.589758][T19095] bridge_slave_0: entered allmulticast mode [ 949.636297][T19095] bridge_slave_0: entered promiscuous mode [ 949.648195][T19095] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.648438][T19095] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.648678][T19095] bridge_slave_1: entered allmulticast mode [ 949.656817][T19095] bridge_slave_1: entered promiscuous mode [ 949.760915][T19095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.774560][T19095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 950.200741][ T5714] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 950.359594][ T5714] usb 8-1: Using ep0 maxpacket: 16 [ 950.367848][ T5714] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.367911][ T5714] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 950.367941][ T5714] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 950.367963][ T5714] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 950.367988][ T5714] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 950.371659][ T5714] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 950.371693][ T5714] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 950.371727][ T5714] usb 8-1: Manufacturer: syz [ 950.385656][ T5714] usb 8-1: config 0 descriptor?? [ 951.423724][ T5714] rc_core: IR keymap rc-hauppauge not found [ 951.423748][ T5714] Registered IR keymap rc-empty [ 951.423950][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.621253][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.644738][ T5714] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 951.656395][ T5714] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input16 [ 951.688301][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.794777][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.816257][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.830902][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.850832][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.870757][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.890737][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.910711][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.930718][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 951.951013][ T5714] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 953.109759][ T5714] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 953.109790][ T5714] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 953.132603][ T5714] usb 8-1: USB disconnect, device number 7 [ 958.388958][T19095] team0: Port device team_slave_0 added [ 958.407003][T19095] team0: Port device team_slave_1 added [ 959.128480][T19095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.128499][T19095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.128528][T19095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.131268][T19095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.131283][T19095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.131310][T19095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.161278][T19095] hsr_slave_0: entered promiscuous mode [ 961.166178][T19095] hsr_slave_1: entered promiscuous mode [ 961.169872][T19095] debugfs: 'hsr0' already exists in 'hsr' [ 961.169903][T19095] Cannot create hsr debugfs directory [ 961.459546][T19014] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 962.426384][T19014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 962.475651][T19014] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 962.684794][T19014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 962.746221][T19014] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 963.828276][T19014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 964.817697][T19014] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 966.971494][T19014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 968.224932][T19014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.347731][T19014] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.487392][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.487478][ T5877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.525195][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.525279][ T5877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 970.649928][T19095] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 971.124088][T19095] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.138234][T19528] ±ÿ: renamed from veth0_vlan (while UP) [ 972.364320][T19095] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 972.433076][T19095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.671397][T19095] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 974.143638][T19095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 974.203489][T19095] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 974.247205][T19095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 976.081742][T19589] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5149'. [ 979.051194][T19095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.610867][T19014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.534857][T19095] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.819477][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.915156][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.973294][T19621] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5159'. [ 981.077881][T19621] syz_tun: entered promiscuous mode [ 981.112372][T19621] macvtap1: entered promiscuous mode [ 981.126174][T19621] macvtap1: entered allmulticast mode [ 981.126198][T19621] syz_tun: entered allmulticast mode [ 981.381168][T19623] syz_tun: left allmulticast mode [ 981.382417][T19623] syz_tun: left promiscuous mode [ 981.423033][T19623] macvtap1: left promiscuous mode [ 981.423066][T19623] macvtap1: left allmulticast mode [ 981.550023][T16622] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.550606][T16622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.805524][T19014] veth0_vlan: entered promiscuous mode [ 985.875982][T19014] veth1_vlan: entered promiscuous mode [ 986.514379][T19644] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 986.613110][T19014] veth0_macvtap: entered promiscuous mode [ 986.667699][T19014] veth1_macvtap: entered promiscuous mode [ 989.578607][T19680] lo speed is unknown, defaulting to 1000 [ 989.593558][T19680] lo speed is unknown, defaulting to 1000 [ 989.707897][T19680] lo speed is unknown, defaulting to 1000 [ 989.874121][T19680] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 989.874149][T19680] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 989.874172][T19680] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 990.314954][T18515] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 990.392398][T18515] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 990.400802][T18515] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 990.437401][T19680] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 990.567214][T18515] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 990.602077][T18515] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 992.595158][T19680] lo speed is unknown, defaulting to 1000 [ 992.688120][T19095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.700732][T18515] Bluetooth: hci6: command tx timeout [ 992.711462][T19680] lo speed is unknown, defaulting to 1000 [ 992.795869][T19680] lo speed is unknown, defaulting to 1000 [ 993.050390][T19680] lo speed is unknown, defaulting to 1000 [ 993.057213][T19680] lo speed is unknown, defaulting to 1000 [ 993.165788][T19732] batadv_slave_1: entered promiscuous mode [ 993.786982][T19726] batadv_slave_1: left promiscuous mode [ 993.837070][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.870940][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.513433][T18515] Bluetooth: hci6: command tx timeout [ 996.566491][T19680] lo speed is unknown, defaulting to 1000 [ 996.580246][T19680] lo speed is unknown, defaulting to 1000 [ 998.521886][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 998.548885][T18679] Bluetooth: hci6: command tx timeout [ 998.624922][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 998.639365][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 998.687333][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 998.734393][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1000.625453][ T59] Bluetooth: hci6: command tx timeout [ 1001.043326][T19686] lo speed is unknown, defaulting to 1000 [ 1001.157267][ T59] Bluetooth: hci5: command tx timeout [ 1003.260750][ T59] Bluetooth: hci5: command tx timeout [ 1003.863054][T19750] lo speed is unknown, defaulting to 1000 [ 1005.360705][ T59] Bluetooth: hci5: command tx timeout [ 1007.420926][ T59] Bluetooth: hci5: command tx timeout [ 1007.543708][T19880] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5246'. [ 1007.733796][T19686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.734037][T19686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.735076][T19686] bridge_slave_0: entered allmulticast mode [ 1007.761682][T19686] bridge_slave_0: entered promiscuous mode [ 1007.921597][T19880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.004638][T19880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.050365][T19880] bond0 (unregistering): Released all slaves [ 1008.103014][T19686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.103194][T19686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.103471][T19686] bridge_slave_1: entered allmulticast mode [ 1008.110126][T19686] bridge_slave_1: entered promiscuous mode [ 1008.402998][T19686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.438694][T19686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.983065][T19686] team0: Port device team_slave_0 added [ 1011.229133][T19686] team0: Port device team_slave_1 added [ 1011.350809][ T5698] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1011.408205][T19686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.408224][T19686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.408262][T19686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.490023][T19686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.490037][T19686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.490053][T19686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.667567][ T5698] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1011.668505][ T5698] usb 8-1: config 13 has an invalid interface number: 50 but max is 3 [ 1011.668523][ T5698] usb 8-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.668534][ T5698] usb 8-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 1011.668546][ T5698] usb 8-1: config 13 has no interface number 0 [ 1011.668584][ T5698] usb 8-1: config 13 interface 50 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 1011.668600][ T5698] usb 8-1: config 13 interface 50 has no altsetting 0 [ 1011.698655][ T5698] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 1011.698685][ T5698] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.698703][ T5698] usb 8-1: Product: syz [ 1011.698717][ T5698] usb 8-1: Manufacturer: syz [ 1011.698729][ T5698] usb 8-1: SerialNumber: syz [ 1012.099072][T19686] hsr_slave_0: entered promiscuous mode [ 1012.115422][T19686] hsr_slave_1: entered promiscuous mode [ 1012.118000][T19686] debugfs: 'hsr0' already exists in 'hsr' [ 1012.118079][T19686] Cannot create hsr debugfs directory [ 1012.350214][ T5698] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1012.414911][ T5698] usb 8-1: USB disconnect, device number 8 [ 1012.507876][ T633] usb 8-1: Failed to submit usb control message: -19 [ 1012.507921][ T633] usb 8-1: unable to send the bmi data to the device: -19 [ 1012.507950][ T633] usb 8-1: unable to get target info from device [ 1012.507967][ T633] usb 8-1: could not get target info (-19) [ 1012.508397][ T633] usb 8-1: could not probe fw (-19) [ 1015.143134][T18515] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1015.154737][T18515] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1015.157173][T18515] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1015.208044][T18515] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1015.226898][T18515] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1017.421907][ T59] Bluetooth: hci4: command tx timeout [ 1017.524425][T19750] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.524676][T19750] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.524906][T19750] bridge_slave_0: entered allmulticast mode [ 1017.562966][T19750] bridge_slave_0: entered promiscuous mode [ 1018.981552][T19750] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.981711][T19750] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.981965][T19750] bridge_slave_1: entered allmulticast mode [ 1018.986475][T19750] bridge_slave_1: entered promiscuous mode [ 1019.468761][T19750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.500637][ T59] Bluetooth: hci4: command tx timeout [ 1019.674803][T19750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.042321][T16625] bridge_slave_1: left allmulticast mode [ 1020.042348][T16625] bridge_slave_1: left promiscuous mode [ 1020.042632][T16625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.222721][T16625] bridge_slave_0: left allmulticast mode [ 1020.222762][T16625] bridge_slave_0: left promiscuous mode [ 1020.223039][T16625] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.580619][ T59] Bluetooth: hci4: command tx timeout [ 1023.324061][T20055] 9p: Bad value for 'rfdno' [ 1023.664441][ T59] Bluetooth: hci4: command tx timeout [ 1027.802841][T16625] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.882028][T16625] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.924803][T16625] bond0 (unregistering): Released all slaves [ 1028.598827][T20073] tipc: Started in network mode [ 1028.598860][T20073] tipc: Node identity 9e5885141f68, cluster identity 4711 [ 1028.599088][T20073] tipc: Enabled bearer , priority 0 [ 1028.667305][T19750] team0: Port device team_slave_0 added [ 1028.775855][T19750] team0: Port device team_slave_1 added [ 1029.061115][T20080] tipc: Resetting bearer [ 1029.225017][T20080] tipc: Disabling bearer [ 1029.634546][T19971] lo speed is unknown, defaulting to 1000 [ 1031.085715][T19750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.085736][T19750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1031.085764][T19750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.426392][T16625] hsr_slave_0: left promiscuous mode [ 1031.440973][T16625] hsr_slave_1: left promiscuous mode [ 1031.441838][T16625] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.471847][T16625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.512171][T16625] veth1_macvtap: left promiscuous mode [ 1031.512264][T16625] veth0_macvtap: left promiscuous mode [ 1031.512414][T16625] veth1_vlan: left promiscuous mode [ 1031.512522][T16625] veth0_vlan: left promiscuous mode [ 1032.132116][T16625] team0 (unregistering): Port device team_slave_1 removed [ 1032.187882][T16625] team0 (unregistering): Port device team_slave_0 removed [ 1032.362518][T19750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1032.362537][T19750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1032.362594][T19750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.807962][T20143] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5337'. [ 1041.746407][T20179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1041.747048][T20180] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1041.874607][T19448] lo speed is unknown, defaulting to 1000 [ 1042.166911][T20191] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5360'. [ 1042.215715][ T5728] IPVS: starting estimator thread 0... [ 1042.235023][T19750] hsr_slave_0: entered promiscuous mode [ 1042.236565][T19750] hsr_slave_1: entered promiscuous mode [ 1042.237526][T19750] debugfs: 'hsr0' already exists in 'hsr' [ 1042.237567][T19750] Cannot create hsr debugfs directory [ 1042.301712][T20192] IPVS: using max 8 ests per chain, 19200 per kthread [ 1049.084673][T20255] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5379'. [ 1049.362100][T18515] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1049.467128][T18515] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1049.469026][T18515] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1049.509963][T18515] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1049.518561][T18515] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1052.113523][ T59] Bluetooth: hci1: command tx timeout [ 1053.160668][ T5728] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1053.314139][ T5728] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1053.314169][ T5728] usb 8-1: config 0 has no interface number 0 [ 1053.314216][ T5728] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1053.314241][ T5728] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.314279][ T5728] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1053.314304][ T5728] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.382267][ T5728] usb 8-1: config 0 descriptor?? [ 1053.958968][ T5728] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 1053.959008][ T5728] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 1053.959035][ T5728] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 1053.959062][ T5728] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 1053.959088][ T5728] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 1053.959123][ T5728] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 1053.959150][ T5728] prodikeys 0003:041E:2801.0009: unknown main item tag 0x0 [ 1053.973166][ T5728] prodikeys 0003:041E:2801.0009: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.7-1/input1 [ 1054.132037][ T5728] hid_prodikeys: hid-prodikeys: failed to find output report [ 1054.132037][ T5728] [ 1054.382248][ T59] Bluetooth: hci1: command tx timeout [ 1054.634301][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.634378][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.147473][T19971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.147630][T19971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.147926][T19971] bridge_slave_0: entered allmulticast mode [ 1055.167752][T19971] bridge_slave_0: entered promiscuous mode [ 1055.207860][T19971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.208005][T19971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.224944][T19971] bridge_slave_1: entered allmulticast mode [ 1055.227901][T19971] bridge_slave_1: entered promiscuous mode [ 1055.314331][T19448] usb 8-1: USB disconnect, device number 9 [ 1056.259179][T19971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.270857][T20248] lo speed is unknown, defaulting to 1000 [ 1056.460858][ T59] Bluetooth: hci1: command tx timeout [ 1056.557026][T19971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1057.534219][T20412] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.171434][T19971] team0: Port device team_slave_0 added [ 1058.799337][ T59] Bluetooth: hci1: command tx timeout [ 1058.831071][T19971] team0: Port device team_slave_1 added [ 1058.998186][T18515] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1059.146912][T18515] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1059.149291][T18515] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1059.201020][T18515] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1059.202380][T18515] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1059.798035][T20434] bridge0: port 3(26±ÿ) entered blocking state [ 1059.798167][T20434] bridge0: port 3(26±ÿ) entered disabled state [ 1059.798412][T20434] ±ÿ: entered allmulticast mode [ 1059.871084][T20434] ±ÿ: left allmulticast mode [ 1059.949982][T19971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.950001][T19971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.950029][T19971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.976958][T19971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.976976][T19971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.977002][T19971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.135978][T19971] hsr_slave_0: entered promiscuous mode [ 1061.148976][T19971] hsr_slave_1: entered promiscuous mode [ 1061.174706][T19971] debugfs: 'hsr0' already exists in 'hsr' [ 1061.174759][T19971] Cannot create hsr debugfs directory [ 1061.576251][ T59] Bluetooth: hci2: command tx timeout [ 1062.922220][T20418] lo speed is unknown, defaulting to 1000 [ 1063.647289][ T59] Bluetooth: hci2: command tx timeout [ 1064.345117][ T13] bridge_slave_1: left allmulticast mode [ 1064.345154][ T13] bridge_slave_1: left promiscuous mode [ 1064.345434][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.147750][ T13] bridge_slave_0: left allmulticast mode [ 1065.147790][ T13] bridge_slave_0: left promiscuous mode [ 1065.148081][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.580515][ T59] Bluetooth: hci2: command tx timeout [ 1066.610254][ T13] bridge_slave_1: left allmulticast mode [ 1066.610294][ T13] bridge_slave_1: left promiscuous mode [ 1066.622419][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.322210][ T13] bridge_slave_0: left allmulticast mode [ 1067.322238][ T13] bridge_slave_0: left promiscuous mode [ 1067.322412][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.011295][ T13] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 1068.011343][ T13] ip6gre1 (unregistering): left promiscuous mode [ 1068.471768][ T13] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1068.571918][ T13] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1068.621254][T18515] Bluetooth: hci2: command tx timeout [ 1068.851376][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.911745][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.951748][ T13] bond0 (unregistering): Released all slaves [ 1068.959801][ T13] bond1 (unregistering): Released all slaves [ 1068.977497][ T13] bond2 (unregistering): Released all slaves [ 1068.995732][ T13] bond3 (unregistering): Released all slaves [ 1069.014655][ T13] bond4 (unregistering): Released all slaves [ 1069.561472][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.641911][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.663513][ T13] bond0 (unregistering): Released all slaves [ 1070.520371][ T13] tipc: Left network mode [ 1072.582892][T20248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1072.583117][T20248] bridge0: port 1(bridge_slave_0) entered disabled state [ 1072.583386][T20248] bridge_slave_0: entered allmulticast mode [ 1072.639264][T20248] bridge_slave_0: entered promiscuous mode [ 1072.660104][T20248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1072.660253][T20248] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.660672][T20248] bridge_slave_1: entered allmulticast mode [ 1072.662512][T20248] bridge_slave_1: entered promiscuous mode [ 1072.812427][T20248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.940325][T20248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.197511][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1073.332822][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1073.375279][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1073.394306][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1073.397352][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1073.854549][T20248] team0: Port device team_slave_0 added [ 1074.113515][T20248] team0: Port device team_slave_1 added [ 1074.280659][ T13] hsr_slave_0: left promiscuous mode [ 1074.320784][ T13] hsr_slave_1: left promiscuous mode [ 1074.321579][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.344376][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.391607][ T13] batman_adv: batadv0: Removing interface: dummy0 [ 1074.530922][ T13] hsr_slave_0: left promiscuous mode [ 1074.550883][ T13] hsr_slave_1: left promiscuous mode [ 1074.551705][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.592068][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.471471][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1075.500873][T18515] Bluetooth: hci5: command tx timeout [ 1075.531446][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1076.592707][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1076.631436][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1077.028969][T20248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.028989][T20248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.029018][T20248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.071327][T20248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.071344][T20248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1077.071370][T20248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.489589][T20248] hsr_slave_0: entered promiscuous mode [ 1077.508159][T20248] hsr_slave_1: entered promiscuous mode [ 1077.521767][T20248] debugfs: 'hsr0' already exists in 'hsr' [ 1077.521798][T20248] Cannot create hsr debugfs directory [ 1077.590064][T20418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.590190][T20418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.590556][T20418] bridge_slave_0: entered allmulticast mode [ 1077.593749][T20418] bridge_slave_0: entered promiscuous mode [ 1077.595998][T18515] Bluetooth: hci5: command tx timeout [ 1077.600347][T20527] lo speed is unknown, defaulting to 1000 [ 1077.631129][T20418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.631269][T20418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.631528][T20418] bridge_slave_1: entered allmulticast mode [ 1077.641573][T20418] bridge_slave_1: entered promiscuous mode [ 1078.492607][T20418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.934990][T20418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.959635][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1079.057172][T20418] team0: Port device team_slave_0 added [ 1079.086204][T20418] team0: Port device team_slave_1 added [ 1079.442485][T20418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.442507][T20418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.442534][T20418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.462069][T20418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.462087][T20418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.462114][T20418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.666283][T18515] Bluetooth: hci5: command tx timeout [ 1079.866476][T20418] hsr_slave_0: entered promiscuous mode [ 1079.868989][T20418] hsr_slave_1: entered promiscuous mode [ 1079.872277][T20418] debugfs: 'hsr0' already exists in 'hsr' [ 1079.872306][T20418] Cannot create hsr debugfs directory [ 1080.895014][ T13] IPVS: stop unused estimator thread 0... [ 1081.074392][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1081.278119][T20527] bridge0: port 1(bridge_slave_0) entered blocking state [ 1081.278347][T20527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.278577][T20527] bridge_slave_0: entered allmulticast mode [ 1081.282797][T20527] bridge_slave_0: entered promiscuous mode [ 1081.307471][T20527] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.307684][T20527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.308019][T20527] bridge_slave_1: entered allmulticast mode [ 1081.310299][T20527] bridge_slave_1: entered promiscuous mode [ 1081.475567][T20527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1081.556168][T20527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1081.740304][T20527] team0: Port device team_slave_0 added [ 1081.740564][T18515] Bluetooth: hci5: command tx timeout [ 1081.744609][T20527] team0: Port device team_slave_1 added [ 1081.923372][T20527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.923392][T20527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.923422][T20527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1082.121544][ T13] bridge_slave_1: left allmulticast mode [ 1082.121584][ T13] bridge_slave_1: left promiscuous mode [ 1082.121880][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.223118][ T13] bridge_slave_0: left allmulticast mode [ 1082.223158][ T13] bridge_slave_0: left promiscuous mode [ 1082.223440][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.431011][ T13] bridge_slave_1: left allmulticast mode [ 1082.431039][ T13] bridge_slave_1: left promiscuous mode [ 1082.431215][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.501945][ T13] bridge_slave_0: left allmulticast mode [ 1082.501979][ T13] bridge_slave_0: left promiscuous mode [ 1082.502155][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.631175][ T13] bridge_slave_1: left allmulticast mode [ 1082.631205][ T13] bridge_slave_1: left promiscuous mode [ 1082.631439][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.715883][ T13] bridge_slave_0: left allmulticast mode [ 1082.715910][ T13] bridge_slave_0: left promiscuous mode [ 1082.716087][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.981451][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.092412][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.154000][ T13] bond0 (unregistering): Released all slaves [ 1083.311434][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.391417][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.452330][ T13] bond0 (unregistering): Released all slaves [ 1083.631876][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.711833][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.772394][ T13] bond0 (unregistering): Released all slaves [ 1083.791794][T20527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1083.791808][T20527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1083.791824][T20527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1083.807960][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1084.406951][T20527] hsr_slave_0: entered promiscuous mode [ 1084.407923][T20527] hsr_slave_1: entered promiscuous mode [ 1084.408527][T20527] debugfs: 'hsr0' already exists in 'hsr' [ 1084.408545][T20527] Cannot create hsr debugfs directory [ 1085.122813][T20248] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1085.215916][T20248] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1085.282123][T20248] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1085.365572][T20248] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1085.407369][T20248] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1085.448328][T20248] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1085.600827][ T13] hsr_slave_0: left promiscuous mode [ 1085.640732][ T13] hsr_slave_1: left promiscuous mode [ 1085.641875][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.691980][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.890765][ T13] hsr_slave_0: left promiscuous mode [ 1085.910755][ T13] hsr_slave_1: left promiscuous mode [ 1085.911559][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.961604][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.100937][ T13] hsr_slave_0: left promiscuous mode [ 1086.121536][ T13] hsr_slave_1: left promiscuous mode [ 1086.122352][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.161296][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.603334][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1086.661307][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1087.143039][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1087.194390][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1087.693601][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1087.731285][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1088.019233][T20248] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1088.054733][T20248] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1088.056881][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1089.016933][T20418] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1089.269631][T20418] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1089.297511][T20418] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1089.486700][T20418] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1089.523846][T20418] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1089.641996][T20418] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1089.668676][T20418] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1089.695868][T20418] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1090.774369][T20248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.182911][T20527] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1091.258692][T20527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1091.267627][T20527] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1091.389496][T20527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1091.530601][T20527] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1091.574349][T20527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1091.577154][T20248] 8021q: adding VLAN 0 to HW filter on device team0 [ 1091.578979][T20527] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1091.645534][T20527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1091.674615][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.674877][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.882018][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.882539][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1092.635893][T20418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1092.763445][T20418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1092.865095][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.865257][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1092.934884][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.935033][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.107298][T20527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.271041][T20527] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.390910][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.391063][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.497723][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.497969][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.136792][T20248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.159326][T20248] veth0_vlan: entered promiscuous mode [ 1095.174205][T20418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.286611][T20248] veth1_vlan: entered promiscuous mode [ 1095.614959][T20248] veth0_macvtap: entered promiscuous mode [ 1095.657186][T20248] veth1_macvtap: entered promiscuous mode [ 1095.716263][T20527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.767301][T20248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.799759][T20248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.834284][ T635] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.847352][ T635] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.865671][ T635] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.889490][ T635] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.974532][T20527] veth0_vlan: entered promiscuous mode [ 1097.307446][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.307469][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.341077][T20527] veth1_vlan: entered promiscuous mode [ 1097.688304][T20418] veth0_vlan: entered promiscuous mode [ 1097.693127][T16628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1097.693150][T16628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.886495][T20418] veth1_vlan: entered promiscuous mode [ 1097.981770][T20527] veth0_macvtap: entered promiscuous mode [ 1098.013862][T20527] veth1_macvtap: entered promiscuous mode [ 1098.096221][T20527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.169916][T20527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.224698][T20418] veth0_macvtap: entered promiscuous mode [ 1098.262522][ T1128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.263241][T20418] veth1_macvtap: entered promiscuous mode [ 1098.271503][ T1128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.284158][ T1128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.287730][ T1128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.642588][T20418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.972258][T20418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.227567][ T1429] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.304824][ T1429] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.335792][ T1429] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.554286][ T1429] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.559087][ T1429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1101.559108][ T1429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.400499][ T36] kauditd_printk_skb: 308 callbacks suppressed [ 1105.400523][ T36] audit: type=1800 audit(1778273864.519:865): pid=20813 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.7.5496" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1107.256461][T20829] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5500'. [ 1107.790676][T20827] netlink: 'syz.7.5500': attribute type 12 has an invalid length. [ 1108.008485][T15964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.008513][T15964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.262292][T16622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.262316][T16622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.860654][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1111.864056][T20859] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge0, syncid = 32, id = 0 [ 1111.943848][T15964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.943881][T15964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.416550][ T9] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1112.416582][ T9] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1112.416594][ T9] usb 9-1: Product: syz [ 1112.416602][ T9] usb 9-1: SerialNumber: syz [ 1113.348693][T20863] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1113.662963][ T9] usb 9-1: config 0 descriptor?? [ 1114.124996][T20878] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20002 [ 1115.000688][ T9] usb 9-1: USB disconnect, device number 2 [ 1116.112340][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.112420][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.779354][T20921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.840595][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1120.020598][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1120.023211][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.023257][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1120.027103][ T9] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1120.027133][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.027154][ T9] usb 8-1: Product: syz [ 1120.027169][ T9] usb 8-1: Manufacturer: syz [ 1120.027184][ T9] usb 8-1: SerialNumber: syz [ 1120.196524][ T9] usb 8-1: config 0 descriptor?? [ 1120.208992][ T9] gs_usb 8-1:0.0: Required endpoints not found [ 1121.867630][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1121.961958][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1121.995010][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1122.018938][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1122.068747][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1122.771200][ T36] audit: type=1326 audit(1778273881.869:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.5529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7919acdd9 code=0x7ffc0000 [ 1122.771259][ T36] audit: type=1326 audit(1778273881.869:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.5529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7919acdd9 code=0x7ffc0000 [ 1122.771307][ T36] audit: type=1326 audit(1778273881.879:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.5529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7919acdd9 code=0x7ffc0000 [ 1122.771355][ T36] audit: type=1326 audit(1778273881.879:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.5529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7919acdd9 code=0x7ffc0000 [ 1122.771403][ T36] audit: type=1326 audit(1778273881.879:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.5529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7ff7919acdd9 code=0x7ffc0000 [ 1122.771453][ T36] audit: type=1326 audit(1778273881.879:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.5529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7919acdd9 code=0x7ffc0000 [ 1122.771501][ T36] audit: type=1326 audit(1778273881.879:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.5529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7919acdd9 code=0x7ffc0000 [ 1122.771546][ T36] audit: type=1326 audit(1778273881.879:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.5529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7919acdd9 code=0x7ffc0000 [ 1122.771594][ T36] audit: type=1326 audit(1778273881.879:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.5529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7919acdd9 code=0x7ffc0000 [ 1122.771642][ T36] audit: type=1326 audit(1778273881.879:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20963 comm="syz.3.5529" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7919acdd9 code=0x7ffc0000 [ 1122.924482][T20874] usb 8-1: USB disconnect, device number 10 [ 1124.410055][ T59] Bluetooth: hci4: command tx timeout [ 1126.460778][ T59] Bluetooth: hci4: command tx timeout [ 1128.540665][ T59] Bluetooth: hci4: command tx timeout [ 1129.194321][T20745] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1129.354496][T20745] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.354599][T20745] usb 8-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1129.354634][T20745] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.642946][T20745] usb 8-1: config 0 descriptor?? [ 1130.727337][ T59] Bluetooth: hci4: command tx timeout [ 1131.401504][T20745] usb 8-1: USB disconnect, device number 11 [ 1133.586840][T16628] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1138.054540][T20945] lo speed is unknown, defaulting to 1000 [ 1142.578367][T21126] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5577'. [ 1144.704037][T16628] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.940648][T20874] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1145.105098][T20874] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 1145.105134][T20874] usb 4-1: config 0 has no interface number 1 [ 1145.105198][T20874] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1145.105238][T20874] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1145.107717][T20874] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1145.107746][T20874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1145.107767][T20874] usb 4-1: SerialNumber: syz [ 1145.294196][T20874] usb 4-1: config 0 descriptor?? [ 1145.325457][T20874] uvcvideo 4-1:0.199: Found UVC 0.00 device (0002:0000) [ 1145.325494][T20874] uvcvideo 4-1:0.199: No valid video chain found. [ 1145.592742][T20745] usb 4-1: USB disconnect, device number 3 [ 1145.777972][T16628] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.930577][T20874] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1146.083664][T20874] usb 9-1: Using ep0 maxpacket: 16 [ 1146.089801][T20874] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1146.118979][T20874] usb 9-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice= 0.40 [ 1146.119012][T20874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.119033][T20874] usb 9-1: Product: syz [ 1146.119047][T20874] usb 9-1: Manufacturer: syz [ 1146.119060][T20874] usb 9-1: SerialNumber: syz [ 1146.516950][T20874] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1146.743146][T21185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5596'. [ 1147.224510][T20874] snd-usb-audio 9-1:1.1: probe with driver snd-usb-audio failed with error -71 [ 1147.254951][T20874] snd-usb-audio 9-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 1147.385312][T20874] usb 9-1: USB disconnect, device number 3 [ 1149.241574][T16628] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.440069][T21220] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5612'. [ 1151.307256][T21243] Unknown options in mask b7f2 [ 1154.005400][T21300] netlink: zone id is out of range [ 1154.005417][T21300] netlink: zone id is out of range [ 1154.005425][T21300] netlink: zone id is out of range [ 1154.005434][T21300] netlink: zone id is out of range [ 1154.005441][T21300] netlink: zone id is out of range [ 1154.005448][T21300] netlink: zone id is out of range [ 1154.005455][T21300] netlink: zone id is out of range [ 1154.005463][T21300] netlink: zone id is out of range [ 1154.005470][T21300] netlink: zone id is out of range [ 1154.005477][T21300] netlink: zone id is out of range [ 1154.282358][T20945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.282479][T20945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.282737][T20945] bridge_slave_0: entered allmulticast mode [ 1154.322827][T20945] bridge_slave_0: entered promiscuous mode [ 1154.371730][T20945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.371887][T20945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.372149][T20945] bridge_slave_1: entered allmulticast mode [ 1154.394327][T20945] bridge_slave_1: entered promiscuous mode [ 1156.014481][T21329] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5658'. [ 1156.564752][T20945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.689929][T20945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.770306][T21345] kernel profiling enabled (shift: 9) [ 1156.991184][ T59] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 1157.082735][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5669'. [ 1157.582625][T16628] bridge_slave_1: left allmulticast mode [ 1157.582666][T16628] bridge_slave_1: left promiscuous mode [ 1157.582964][T16628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.667393][T16628] bridge_slave_0: left allmulticast mode [ 1157.667433][T16628] bridge_slave_0: left promiscuous mode [ 1157.667726][T16628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.201810][T16628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.282156][T16628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.327166][T16628] bond0 (unregistering): Released all slaves [ 1159.366833][T20945] team0: Port device team_slave_0 added [ 1159.391738][T21367] net_ratelimit: 61 callbacks suppressed [ 1159.391762][T21367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1159.461780][T20945] team0: Port device team_slave_1 added [ 1159.499416][T21439] netlink: 'syz.3.5711': attribute type 1 has an invalid length. [ 1159.788227][T20945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.788249][T20945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.788279][T20945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.810962][T20945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.810980][T20945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.811007][T20945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.831665][T21446] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5713'. [ 1160.124795][T21450] tmpfs: Bad value for 'mpol' [ 1161.161422][T21466] RDS: rds_bind could not find a transport for ::ffff:172.30.1.9, load rds_tcp or rds_rdma? [ 1161.645462][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5717'. [ 1162.608263][T20945] hsr_slave_0: entered promiscuous mode [ 1162.609764][T20945] hsr_slave_1: entered promiscuous mode [ 1162.626803][T20945] debugfs: 'hsr0' already exists in 'hsr' [ 1162.626834][T20945] Cannot create hsr debugfs directory [ 1164.358893][T21495] CIFS: iocharset name too long [ 1168.300669][T16628] hsr_slave_0: left promiscuous mode [ 1168.322729][T16628] hsr_slave_1: left promiscuous mode [ 1168.324410][T16628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1168.324439][T16628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.372348][T16628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1168.372377][T16628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1168.465860][T16628] veth1_macvtap: left promiscuous mode [ 1168.465979][T16628] veth0_macvtap: left promiscuous mode [ 1168.466262][T16628] veth1_vlan: left promiscuous mode [ 1168.466458][T16628] veth0_vlan: left promiscuous mode [ 1170.246465][T16628] team0 (unregistering): Port device team_slave_1 removed [ 1170.341086][T16628] team0 (unregistering): Port device team_slave_0 removed [ 1170.367008][T18515] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1170.437281][T18515] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1170.439880][T18515] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1170.497487][T18515] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1170.498863][T18515] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1170.711480][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1172.812968][T18515] Bluetooth: hci2: command tx timeout [ 1172.820245][T21613] netlink: 'syz.3.5777': attribute type 32 has an invalid length. [ 1173.780568][T21057] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1173.995942][T21057] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1173.997521][T21057] usb 9-1: config 63 has an invalid interface number: 66 but max is 0 [ 1173.997549][T21057] usb 9-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.997570][T21057] usb 9-1: config 63 has no interface number 0 [ 1173.997604][T21057] usb 9-1: config 63 interface 66 has no altsetting 0 [ 1174.157202][T21057] usb 9-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1174.157237][T21057] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.157258][T21057] usb 9-1: Product: syz [ 1174.157273][T21057] usb 9-1: Manufacturer: syz [ 1174.157288][T21057] usb 9-1: SerialNumber: syz [ 1174.485446][T18515] Bluetooth: hci1: command 0x0406 tx timeout [ 1174.865912][T18515] Bluetooth: hci2: command tx timeout [ 1174.901306][T21057] uvcvideo 9-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 1174.901341][T21057] uvcvideo 9-1:63.66: No valid video chain found. [ 1174.904898][T21057] usb 9-1: USB disconnect, device number 4 [ 1175.781802][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1176.955303][ T59] Bluetooth: hci2: command tx timeout [ 1177.045927][T21568] lo speed is unknown, defaulting to 1000 [ 1177.344252][ T59] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1177.344516][ T59] Bluetooth: hci5: Injecting HCI hardware error event [ 1177.358210][T18515] Bluetooth: hci5: hardware error 0x00 [ 1177.516284][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.516364][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.528556][T18679] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1178.599944][T18679] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1178.621634][T18679] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1178.645255][T18679] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1178.671694][T18679] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1178.956018][T21729] team0: entered allmulticast mode [ 1178.956045][T21729] team_slave_0: entered allmulticast mode [ 1178.956070][T21729] team_slave_1: entered allmulticast mode [ 1178.958602][T21729] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5817'. [ 1178.958699][T21729] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1179.029599][T18679] Bluetooth: hci2: command tx timeout [ 1179.740801][T18515] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1181.020575][T18515] Bluetooth: hci6: command tx timeout [ 1181.188641][T21737] lo speed is unknown, defaulting to 1000 [ 1181.669322][T21820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5844'. [ 1182.350555][T19448] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1182.517569][T19448] usb 9-1: Using ep0 maxpacket: 32 [ 1182.533084][T19448] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1182.533118][T19448] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.582284][T19448] usb 9-1: config 0 descriptor?? [ 1182.715003][T21820] vlan2: entered promiscuous mode [ 1182.715095][T21820] gretap0: entered promiscuous mode [ 1182.831920][T19448] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1183.056640][T19448] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1183.056703][T19448] dib0700: firmware download failed at 7 with -22 [ 1183.100628][T18515] Bluetooth: hci6: command tx timeout [ 1183.116615][T19448] usb 9-1: USB disconnect, device number 5 [ 1183.322864][T15964] bridge_slave_1: left allmulticast mode [ 1183.322903][T15964] bridge_slave_1: left promiscuous mode [ 1183.323200][T15964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.469621][T15964] bridge_slave_0: left allmulticast mode [ 1183.469668][T15964] bridge_slave_0: left promiscuous mode [ 1183.469960][T15964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.221739][T15964] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1184.352522][T15964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1184.443937][T15964] bond0 (unregistering): Released all slaves [ 1184.918681][T21893] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1184.957977][T21568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.958227][T21568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.958510][T21568] bridge_slave_0: entered allmulticast mode [ 1185.077916][T21568] bridge_slave_0: entered promiscuous mode [ 1185.161426][T21568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.161600][T21568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.161876][T21568] bridge_slave_1: entered allmulticast mode [ 1185.180712][T18515] Bluetooth: hci6: command tx timeout [ 1185.189437][T21568] bridge_slave_1: entered promiscuous mode [ 1185.510548][ T9] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1185.604099][T15964] hsr_slave_0: left promiscuous mode [ 1185.640885][T15964] hsr_slave_1: left promiscuous mode [ 1185.642060][T15964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.664834][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1185.667384][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.685930][ T9] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1185.685962][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.685984][ T9] usb 9-1: Product: syz [ 1185.685999][ T9] usb 9-1: Manufacturer: syz [ 1185.686013][ T9] usb 9-1: SerialNumber: syz [ 1185.742787][ T9] usb 9-1: config 0 descriptor?? [ 1185.769324][T15964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.769362][ T9] usb 9-1: No union descriptors [ 1185.793900][ T9] usb 9-1: unsupported MDLM descriptors [ 1185.951740][T21922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.952462][T21922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.958604][ T1251] usb 9-1: USB disconnect, device number 6 [ 1186.040528][T20874] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1186.210513][T20874] usb 4-1: Using ep0 maxpacket: 8 [ 1186.214537][T20874] usb 4-1: config 2 has an invalid interface number: 101 but max is 0 [ 1186.214566][T20874] usb 4-1: config 2 has no interface number 0 [ 1186.214596][T20874] usb 4-1: config 2 interface 101 has no altsetting 0 [ 1186.218024][T20874] usb 4-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=53.2a [ 1186.218055][T20874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.218076][T20874] usb 4-1: Product: syz [ 1186.218091][T20874] usb 4-1: Manufacturer: syz [ 1186.218106][T20874] usb 4-1: SerialNumber: syz [ 1186.554486][T20874] ipw 4-1:2.101: IPWireless converter converter detected [ 1186.666858][T20874] usb 4-1: USB disconnect, device number 4 [ 1186.713935][T20874] ipw 4-1:2.101: device disconnected [ 1187.036336][T15964] team0 (unregistering): Port device team_slave_1 removed [ 1187.243067][T15964] team0 (unregistering): Port device team_slave_0 removed [ 1187.260941][T18515] Bluetooth: hci6: command tx timeout [ 1187.993530][T21568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.097449][T21568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.387909][T21568] team0: Port device team_slave_0 added [ 1188.452248][T21568] team0: Port device team_slave_1 added [ 1188.915157][T21568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.915176][T21568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.915213][T21568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.983749][T21568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.983769][T21568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.983801][T21568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.894004][T21568] hsr_slave_0: entered promiscuous mode [ 1189.901410][T21568] hsr_slave_1: entered promiscuous mode [ 1189.905593][T21568] debugfs: 'hsr0' already exists in 'hsr' [ 1189.905631][T21568] Cannot create hsr debugfs directory [ 1190.490538][T20874] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1190.658928][T20874] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1190.659001][T20874] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 1190.659024][T20874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.680169][T20874] usb 9-1: config 0 descriptor?? [ 1190.740575][T21737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1190.740845][T21737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1190.741096][T21737] bridge_slave_0: entered allmulticast mode [ 1190.755921][T21737] bridge_slave_0: entered promiscuous mode [ 1190.775843][T20874] pwc: Askey VC010 type 2 USB webcam detected. [ 1190.860271][T21737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1190.864655][T21737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.865083][T21737] bridge_slave_1: entered allmulticast mode [ 1190.878090][T21737] bridge_slave_1: entered promiscuous mode [ 1191.002604][T20874] pwc: send_video_command error -71 [ 1191.002626][T20874] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1191.002757][T20874] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1191.070488][T20874] usb 9-1: USB disconnect, device number 7 [ 1191.494681][T21737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.554128][T21737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1191.580616][T20874] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1191.730575][T20874] usb 9-1: Using ep0 maxpacket: 8 [ 1191.772463][T21737] team0: Port device team_slave_0 added [ 1191.794275][T20874] usb 9-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1191.794345][T20874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.794365][T20874] usb 9-1: Product: syz [ 1191.794380][T20874] usb 9-1: Manufacturer: syz [ 1191.794394][T20874] usb 9-1: SerialNumber: syz [ 1191.804069][T21737] team0: Port device team_slave_1 added [ 1191.997296][T20874] usb 9-1: config 0 descriptor?? [ 1192.030047][T20874] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1192.266509][T20874] gspca_vc032x: reg_r err -71 [ 1192.266631][T20874] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 1192.281126][T20874] usb 9-1: USB disconnect, device number 8 [ 1194.045104][T21737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1194.045123][T21737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.045152][T21737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1194.154068][T21737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1194.154088][T21737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1194.154118][T21737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1194.348572][T21737] hsr_slave_0: entered promiscuous mode [ 1194.350139][T21737] hsr_slave_1: entered promiscuous mode [ 1194.363284][T21737] debugfs: 'hsr0' already exists in 'hsr' [ 1194.363314][T21737] Cannot create hsr debugfs directory [ 1195.120779][ T5698] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1195.282275][ T5698] usb 9-1: Using ep0 maxpacket: 16 [ 1195.286451][ T5698] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1195.286483][ T5698] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.286498][ T5698] usb 9-1: Product: syz [ 1195.286506][ T5698] usb 9-1: Manufacturer: syz [ 1195.286515][ T5698] usb 9-1: SerialNumber: syz [ 1195.572588][ T5698] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1195.625509][ T5698] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1195.626000][ T5698] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1195.626061][ T5698] usb 9-1: media controller created [ 1195.731630][ T5698] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1195.898899][ T5698] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1196.004440][ T5698] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1196.020804][ T5698] usb 9-1: USB disconnect, device number 9 [ 1196.520229][T22189] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1198.485379][T22216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5991'. [ 1200.666115][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6005'. [ 1200.994016][T22272] bridge0: port 3(veth0_vlan) entered blocking state [ 1200.994192][T22272] bridge0: port 3(veth0_vlan) entered disabled state [ 1200.994481][T22272] veth0_vlan: entered allmulticast mode [ 1201.022328][T22272] veth0_vlan: left allmulticast mode [ 1202.892661][T20752] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1202.896491][T22322] netlink: 'syz.3.6030': attribute type 10 has an invalid length. [ 1203.052473][T20752] usb 9-1: Using ep0 maxpacket: 16 [ 1203.055098][T20752] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1203.055136][T20752] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1203.055176][T20752] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1203.055200][T20752] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.070137][T20752] usb 9-1: config 0 descriptor?? [ 1203.424517][T22322] syz_tun: entered promiscuous mode [ 1203.478681][T22322] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1203.576170][T20752] HID 045e:07da: Invalid code 65791 type 1 [ 1203.625382][T20752] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.000A/input/input19 [ 1203.868987][ C1] usb 9-1: input irq status -75 received [ 1204.334094][T20752] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1204.559415][T20752] usb 9-1: USB disconnect, device number 10 [ 1205.683687][T21568] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1205.876940][T21568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1205.888463][T21568] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1206.019252][T21568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1206.028928][T21568] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1206.276902][T21568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1206.284428][T21568] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1206.389728][T21568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1208.753994][T21568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.194250][T21737] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1209.284072][T21737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1209.305907][T21737] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1209.366755][T21737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1209.460104][T21737] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1209.549160][T21737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1209.563728][T21737] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1209.609190][T21737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1209.639206][T21568] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.723412][T22484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1209.932582][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.932733][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.072057][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.072283][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.244914][T22530] bpf: Bad value for 'gid' [ 1211.468403][T21737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.505202][T20752] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1211.579897][T21737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.625802][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.627494][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.723150][T20752] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1211.723184][T20752] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1211.723203][T20752] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1211.723255][T20752] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1211.723282][T20752] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1211.725527][T20752] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1211.725555][T20752] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1211.725574][T20752] usb 4-1: Product: syz [ 1211.725588][T20752] usb 4-1: Manufacturer: syz [ 1211.938115][T16631] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.938238][T16631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.975435][T20752] cdc_wdm 4-1:1.0: skipping garbage [ 1211.975459][T20752] cdc_wdm 4-1:1.0: skipping garbage [ 1212.150232][T20752] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1212.150260][T20752] cdc_wdm 4-1:1.0: Unknown control protocol [ 1212.475937][T20752] usb 4-1: USB disconnect, device number 5 [ 1212.826867][T22559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1213.976293][T21568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.304981][T21568] veth0_vlan: entered promiscuous mode [ 1214.344024][T21568] veth1_vlan: entered promiscuous mode [ 1214.732039][T21568] veth0_macvtap: entered promiscuous mode [ 1214.830752][T21568] veth1_macvtap: entered promiscuous mode [ 1215.058246][T21568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1215.245201][T21568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.325102][T16631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.325417][T16631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.326850][T16631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1215.326898][T16631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.933188][T21737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.077758][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.077781][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1217.772648][ T633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1217.772672][ T633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.990806][T21737] veth0_vlan: entered promiscuous mode [ 1220.057449][T21737] veth1_vlan: entered promiscuous mode [ 1220.192764][T21737] veth0_macvtap: entered promiscuous mode [ 1220.228867][T21737] veth1_macvtap: entered promiscuous mode [ 1220.341550][T21737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.367806][T21737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1220.413190][ T633] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.419507][ T633] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.419836][ T633] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.419879][ T633] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.128952][ T36] kauditd_printk_skb: 148 callbacks suppressed [ 1222.128974][ T36] audit: type=1400 audit(1778273981.039:1024): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=22761 comm="syz.0.6179" src=65532 dest=20002 netif=wpan0 [ 1222.883411][ T633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.883432][ T633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.645321][ T108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.645345][ T108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.369093][T22892] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6228'. [ 1229.040648][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1229.190523][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1229.196626][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1229.196660][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.223950][ T9] usb 1-1: config 0 descriptor?? [ 1229.496076][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1229.599701][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1229.605623][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1229.605681][ T9] usb 1-1: media controller created [ 1229.713280][T22833] syz.3.6205 (22833): drop_caches: 2 [ 1230.122879][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1231.076416][ T9] DVB: Unable to find symbol dib7000p_attach() [ 1231.076435][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1231.450766][ T9] rc_core: IR keymap rc-dib0700-rc5 not found [ 1231.450790][ T9] Registered IR keymap rc-empty [ 1231.451501][ T9] dvb-usb: could not initialize remote control. [ 1231.451513][ T9] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1231.489442][T21057] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1231.652127][T21057] usb 4-1: Using ep0 maxpacket: 8 [ 1231.666601][T21057] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1231.686570][T21057] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1231.686605][T21057] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1231.686627][T21057] usb 4-1: Product: syz [ 1231.686641][T21057] usb 4-1: Manufacturer: syz [ 1231.686655][T21057] usb 4-1: SerialNumber: syz [ 1231.989171][T21057] usb 4-1: palm_os_3_probe - error -71 getting connection information [ 1231.989297][T21057] visor 4-1:1.0: probe with driver visor failed with error -71 [ 1232.048169][T21057] usb 4-1: USB disconnect, device number 6 [ 1232.137893][ T9] usb 1-1: USB disconnect, device number 4 [ 1233.006426][ T9] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1236.052503][T23086] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6303'. [ 1236.423237][T21057] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1236.630779][T21057] usb 1-1: Using ep0 maxpacket: 32 [ 1236.647318][T21057] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1236.647355][T21057] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1236.647389][T21057] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1236.647413][T21057] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.780761][T20874] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1236.912152][T21057] usb 1-1: config 0 descriptor?? [ 1236.947937][T20874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1236.947974][T20874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1236.951459][T20874] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1236.951499][T20874] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1236.951520][T20874] usb 4-1: Manufacturer: syz [ 1237.033019][T20874] usb 4-1: config 0 descriptor?? [ 1237.966070][T20874] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000B/input/input21 [ 1238.036208][T20874] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000B/input/input22 [ 1238.311914][T21057] corsair-psu 0003:1B1C:1C09.000C: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 1238.403553][T20874] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000B/input/input23 [ 1238.532123][T20874] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000B/input/input24 [ 1238.820711][T21057] corsair-psu 0003:1B1C:1C09.000C: unable to initialize device (-110) [ 1238.962502][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.962582][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.051091][T21057] corsair-psu 0003:1B1C:1C09.000C: probe with driver corsair-psu failed with error -110 [ 1239.187108][T20874] uclogic 0003:256C:006D.000B: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 1239.254863][T21057] usb 1-1: USB disconnect, device number 5 [ 1239.257811][T20874] usb 4-1: USB disconnect, device number 7 [ 1242.129012][T23204] fido_id[23204]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1242.791719][T23227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6366'. [ 1243.712297][T23251] netlink: 9 bytes leftover after parsing attributes in process `syz.9.6378'. [ 1243.821640][T23251] gretap0: entered promiscuous mode [ 1246.255009][T23307] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.6405'. [ 1246.255183][T23307] netlink: Conntrack attr has 4 unknown bytes [ 1246.612309][T23314] program syz.3.6408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1249.287974][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6429'. [ 1251.360539][ T5698] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1251.521558][ T5698] usb 1-1: Using ep0 maxpacket: 8 [ 1251.525291][ T5698] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1251.525355][ T5698] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1251.525379][ T5698] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1251.525405][ T5698] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1251.525430][ T5698] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1251.525484][ T5698] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1251.525508][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.879055][ T5698] usb 1-1: usb_control_msg returned -32 [ 1251.879108][ T5698] usbtmc 1-1:16.0: can't read capabilities [ 1252.289805][T23433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6461'. [ 1254.172219][ T5729] usb 1-1: USB disconnect, device number 6 [ 1254.741026][T20874] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1254.896446][T20874] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1254.909574][T20874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1254.909635][T20874] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.909665][T20874] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1254.977995][T20874] usb 1-1: string descriptor 0 read error: -22 [ 1254.978171][T20874] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 1254.978197][T20874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.134850][T23516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6498'. [ 1256.104632][T18679] Bluetooth: hci6: command 0x0405 tx timeout [ 1256.836934][T20874] kone 0003:1E7D:2CED.000D: unknown main item tag 0x0 [ 1256.836974][T20874] kone 0003:1E7D:2CED.000D: unknown main item tag 0x0 [ 1256.836999][T20874] kone 0003:1E7D:2CED.000D: unknown main item tag 0x0 [ 1256.837025][T20874] kone 0003:1E7D:2CED.000D: unknown main item tag 0x0 [ 1256.837052][T20874] kone 0003:1E7D:2CED.000D: unknown main item tag 0x0 [ 1256.837079][T20874] kone 0003:1E7D:2CED.000D: unknown main item tag 0x0 [ 1256.837105][T20874] kone 0003:1E7D:2CED.000D: unknown main item tag 0x0 [ 1256.837131][T20874] kone 0003:1E7D:2CED.000D: unknown main item tag 0x0 [ 1256.837157][T20874] kone 0003:1E7D:2CED.000D: unknown main item tag 0x0 [ 1256.837182][T20874] kone 0003:1E7D:2CED.000D: unknown main item tag 0x0 [ 1257.188440][T20874] kone 0003:1E7D:2CED.000D: hidraw0: USB HID v0.05 Device [HID 1e7d:2ced] on usb-dummy_hcd.0-1/input0 [ 1257.195093][T20874] kone 0003:1E7D:2CED.000D: couldn't init struct kone_device [ 1257.195154][T20874] kone 0003:1E7D:2CED.000D: couldn't install mouse [ 1257.357827][T20874] kone 0003:1E7D:2CED.000D: probe with driver kone failed with error -5 [ 1257.573309][T20874] usb 1-1: USB disconnect, device number 7 [ 1257.657953][T23552] fido_id[23552]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1258.481085][T23584] batadv_slave_1: entered promiscuous mode [ 1258.512214][T23582] batadv_slave_1: left promiscuous mode [ 1260.467576][T23653] bridge0: port 3(veth0_vlan) entered blocking state [ 1260.468247][T23653] bridge0: port 3(veth0_vlan) entered disabled state [ 1260.469079][T23653] veth0_vlan: entered allmulticast mode [ 1260.516624][T23653] veth0_vlan: left allmulticast mode [ 1261.073305][T23669] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.520776][T23679] netlink: 'syz.0.6577': attribute type 1 has an invalid length. [ 1261.520802][T23679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6577'. [ 1261.829794][T23679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.088319][T23679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.969237][T18515] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1270.034974][T18515] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1270.039461][T18515] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1270.064957][T18515] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1270.069308][T18515] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1270.780266][T16628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.885122][T23923] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6688'. [ 1272.204409][T16628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.300551][T18679] Bluetooth: hci2: command tx timeout [ 1273.210906][T16628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.380803][T18679] Bluetooth: hci2: command tx timeout [ 1275.387740][T16628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.586123][T24035] binder: binder_mmap: 24033 200000000000-200000003000 bad vm_flags failed -1 [ 1276.039453][T23902] lo speed is unknown, defaulting to 1000 [ 1276.461150][T18679] Bluetooth: hci2: command tx timeout [ 1278.540677][T18679] Bluetooth: hci2: command tx timeout [ 1280.693493][T16628] bridge_slave_1: left allmulticast mode [ 1280.693530][T16628] bridge_slave_1: left promiscuous mode [ 1280.693859][T16628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1280.788748][T16628] bridge_slave_0: left allmulticast mode [ 1280.788786][T16628] bridge_slave_0: left promiscuous mode [ 1280.789103][T16628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.529008][T16628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1283.630213][T16628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1283.703696][T16628] bond0 (unregistering): Released all slaves [ 1284.333028][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1285.452411][T20745] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1285.624908][T20745] usb 4-1: not running at top speed; connect to a high speed hub [ 1285.626668][T20745] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 47367, setting to 1023 [ 1285.629724][T20745] usb 4-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 1.05 [ 1285.629753][T20745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.629774][T20745] usb 4-1: Product: syz [ 1285.629788][T20745] usb 4-1: Manufacturer: syz [ 1285.629804][T20745] usb 4-1: SerialNumber: syz [ 1285.978033][T20745] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1286.592441][T23902] bridge0: port 1(bridge_slave_0) entered blocking state [ 1286.655298][T23902] bridge0: port 1(bridge_slave_0) entered disabled state [ 1286.655640][T23902] bridge_slave_0: entered allmulticast mode [ 1286.730554][T20874] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1286.806800][T23902] bridge_slave_0: entered promiscuous mode [ 1286.843982][T23902] bridge0: port 2(bridge_slave_1) entered blocking state [ 1286.844126][T23902] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.844417][T23902] bridge_slave_1: entered allmulticast mode [ 1286.859004][T23902] bridge_slave_1: entered promiscuous mode [ 1286.889936][T20874] usb 10-1: Using ep0 maxpacket: 32 [ 1286.897389][T20874] usb 10-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1286.897423][T20874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.897463][T20874] usb 10-1: Product: syz [ 1286.897476][T20874] usb 10-1: Manufacturer: syz [ 1286.897490][T20874] usb 10-1: SerialNumber: syz [ 1287.096227][T20874] usb 10-1: config 0 descriptor?? [ 1287.495962][T20874] RobotFuzz Open Source InterFace, OSIF 10-1:0.0: version d4.15 found at bus 010 address 002 [ 1288.355476][ T5698] usb 10-1: USB disconnect, device number 2 [ 1288.723676][T23902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1288.827760][T23902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.204301][T16628] hsr_slave_0: left promiscuous mode [ 1289.262261][T16628] hsr_slave_1: left promiscuous mode [ 1289.263469][T16628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1289.263496][T16628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.314502][T20745] usb 4-1: USB disconnect, device number 8 [ 1289.335481][T16628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1289.335511][T16628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.660701][T20745] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1289.852117][T23225] udevd[23225]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.968050][T16628] veth1_macvtap: left promiscuous mode [ 1289.968172][T16628] veth0_macvtap: left promiscuous mode [ 1290.001954][T20745] usb 4-1: device not accepting address 9, error -71 [ 1290.136666][T16628] veth1_vlan: left promiscuous mode [ 1290.136881][T16628] veth0_vlan: left promiscuous mode [ 1292.300831][ T36] audit: type=1800 audit(1778274051.429:1025): pid=24491 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.6937" name="file0" dev="overlay" ino=401 res=0 errno=0 [ 1293.675377][T16628] team0 (unregistering): Port device team_slave_1 removed [ 1293.791514][T16628] team0 (unregistering): Port device team_slave_0 removed [ 1295.160886][T24550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6953'. [ 1295.353540][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1295.461012][T23902] team0: Port device team_slave_0 added [ 1295.484085][T23902] team0: Port device team_slave_1 added [ 1295.671308][T23902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1295.671329][T23902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.671358][T23902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.682884][T23902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.682901][T23902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1295.682926][T23902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.963877][T23902] hsr_slave_0: entered promiscuous mode [ 1295.964853][T23902] hsr_slave_1: entered promiscuous mode [ 1295.965642][T23902] debugfs: 'hsr0' already exists in 'hsr' [ 1295.965659][T23902] Cannot create hsr debugfs directory [ 1297.438738][T24589] loop5: detected capacity change from 0 to 7 [ 1297.442425][T24589] Dev loop5: unable to read RDB block 7 [ 1297.442467][T24589] loop5: AHDI p1 p2 p3 p4 [ 1297.442502][T24589] loop5: partition table partially beyond EOD, truncated [ 1297.442799][T24589] loop5: p1 start 5913328 is beyond EOD, truncated [ 1297.442823][T24589] loop5: p2 start 600744595 is beyond EOD, truncated [ 1297.442841][T24589] loop5: p3 start 2529214231 is beyond EOD, truncated [ 1300.405009][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.405097][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.646602][T24702] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7022'. [ 1302.898773][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1305.310520][ T5729] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1305.340936][T20874] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1305.471138][ T5729] usb 4-1: Using ep0 maxpacket: 16 [ 1305.473753][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.473807][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1305.473833][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1305.473855][ T5729] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1305.473878][ T5729] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1305.475335][ T5729] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1305.475362][ T5729] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1305.475383][ T5729] usb 4-1: Manufacturer: syz [ 1305.539819][ T5729] usb 4-1: config 0 descriptor?? [ 1305.590450][T20874] usb 10-1: Using ep0 maxpacket: 16 [ 1305.607222][T20874] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1305.607258][T20874] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1305.633541][T20874] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1305.633574][T20874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.633595][T20874] usb 10-1: Product: syz [ 1305.633610][T20874] usb 10-1: Manufacturer: syz [ 1305.633624][T20874] usb 10-1: SerialNumber: syz [ 1305.680540][T20874] usb 10-1: config 0 descriptor?? [ 1305.707994][T20874] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1305.708033][T20874] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1306.190504][ T5729] rc_core: IR keymap rc-hauppauge not found [ 1306.190527][ T5729] Registered IR keymap rc-empty [ 1306.190724][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.210603][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.324599][ T5729] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1306.341965][ T5729] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input25 [ 1306.379911][T20874] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1306.381167][T20874] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1306.463936][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.481261][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.509988][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.520871][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.540897][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.571144][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.590968][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.610998][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.631047][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.652643][ T5729] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1306.884243][ T5729] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1306.884271][ T5729] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1306.941908][ T5729] usb 4-1: USB disconnect, device number 11 [ 1306.991934][T20874] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1307.465715][T20874] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1307.466357][T20874] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1307.466809][T20874] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1307.467289][T20874] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1307.467739][T20874] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1307.558925][T20874] usb 10-1: USB disconnect, device number 3 [ 1307.878703][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7079'. [ 1307.878729][T24830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7079'. [ 1307.992723][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1308.411148][T24841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7083'. [ 1315.059200][T23902] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1327.700397][ C0] sched: DL replenish lagged too much [ 1361.826894][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.826973][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1394.620647][T18515] Bluetooth: hci2: command 0x0406 tx timeout [ 1419.990275][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1419.990296][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P24921/2:b..l [ 1419.990331][ C0] rcu: (detected by 0, t=10502 jiffies, g=90505, q=2248 ncpus=2) [ 1419.990350][ C0] task:syz.1.7113 state:X running task stack:26920 pid:24921 tgid:24920 ppid:0 task_flags:0x40004c flags:0x00080000 [ 1419.990414][ C0] Call Trace: [ 1419.990421][ C0] [ 1419.990436][ C0] __schedule+0x1681/0x54c0 [ 1419.990485][ C0] ? trace_sched_set_need_resched_tp+0x3e/0x150 [ 1419.990520][ C0] ? __pfx___schedule+0x10/0x10 [ 1419.990541][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1419.990559][ C0] preempt_schedule_common+0x82/0xd0 [ 1419.990573][ C0] preempt_schedule_thunk+0x16/0x30 [ 1419.990593][ C0] try_to_wake_up+0x828/0x1380 [ 1419.990614][ C0] signal_wake_up_state+0xb5/0x120 [ 1419.990631][ C0] __send_signal_locked+0xbb2/0xec0 [ 1419.990651][ C0] do_notify_parent+0xc18/0xe60 [ 1419.990667][ C0] ? __pfx_do_notify_parent+0x10/0x10 [ 1419.990677][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1419.990694][ C0] ? rt_spin_unlock+0x14f/0x200 [ 1419.990710][ C0] release_task+0x13be/0x16f0 [ 1419.990731][ C0] ? do_exit+0x1674/0x22c0 [ 1419.990755][ C0] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1419.990765][ C0] ? __pfx_release_task+0x10/0x10 [ 1419.990782][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1419.990795][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1419.990809][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1419.990822][ C0] ? rt_write_unlock+0x190/0x230 [ 1419.990835][ C0] do_exit+0x1674/0x22c0 [ 1419.990855][ C0] ? __pfx_do_exit+0x10/0x10 [ 1419.990869][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1419.990883][ C0] ? __rcu_read_unlock+0x83/0xe0 [ 1419.990899][ C0] ? rt_spin_unlock+0x160/0x200 [ 1419.990913][ C0] do_group_exit+0x21b/0x2d0 [ 1419.990929][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.990942][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1419.990957][ C0] x64_sys_call+0x221a/0x2240 [ 1419.990970][ C0] do_syscall_64+0x15f/0xf80 [ 1419.990983][ C0] ? trace_irq_disable+0x3b/0x140 [ 1419.990998][ C0] ? clear_bhb_loop+0x40/0x90 [ 1419.991012][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.991024][ C0] RIP: 0033:0x7fa6a67ccdd9 [ 1419.991036][ C0] RSP: 002b:00007fa6a4a25f98 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1419.991047][ C0] RAX: ffffffffffffffda RBX: 00007fa6a68364f0 RCX: 00007fa6a67ccdd9 [ 1419.991055][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1419.991062][ C0] RBP: 0000000000000016 R08: 0000000000000000 R09: 00007fa6a6a46038 [ 1419.991069][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.991075][ C0] R13: 00007fa6a6a46038 R14: 00007fff220414c0 R15: 00007fff220415a8 [ 1419.991093][ C0] [ 1423.272622][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.272708][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1476.380915][ T37] INFO: task kworker/u8:15:3414 blocked for more than 143 seconds. [ 1476.380942][ T37] Not tainted syzkaller #0 [ 1476.380953][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1476.380963][ T37] task:kworker/u8:15 state:D stack:19928 pid:3414 tgid:3414 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1476.381025][ T37] Workqueue: ipv6_addrconf addrconf_verify_work [ 1476.381062][ T37] Call Trace: [ 1476.381070][ T37] [ 1476.381085][ T37] __schedule+0x1681/0x54c0 [ 1476.381149][ T37] ? __pfx___schedule+0x10/0x10 [ 1476.381170][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1476.381221][ T37] rt_mutex_schedule+0x76/0xf0 [ 1476.381244][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1476.381291][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1476.381326][ T37] rt_mutex_slowlock+0x2dc/0x780 [ 1476.381350][ T37] ? rt_mutex_slowlock+0x1fd/0x780 [ 1476.381372][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1476.381404][ T37] ? addrconf_verify_work+0x19/0x30 [ 1476.381439][ T37] ? addrconf_verify_work+0x19/0x30 [ 1476.381475][ T37] ? addrconf_verify_work+0x19/0x30 [ 1476.381502][ T37] mutex_lock_nested+0x168/0x1d0 [ 1476.381540][ T37] addrconf_verify_work+0x19/0x30 [ 1476.381568][ T37] ? process_scheduled_works+0xa70/0x1860 [ 1476.381602][ T37] process_scheduled_works+0xb5d/0x1860 [ 1476.381663][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1476.381693][ T37] ? assign_work+0x3d5/0x5e0 [ 1476.381722][ T37] worker_thread+0xa53/0xfc0 [ 1476.381779][ T37] kthread+0x388/0x470 [ 1476.381807][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1476.381828][ T37] ? __pfx_kthread+0x10/0x10 [ 1476.381856][ T37] ret_from_fork+0x514/0xb70 [ 1476.381883][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1476.381906][ T37] ? __switch_to+0xc79/0x1410 [ 1476.381942][ T37] ? __pfx_kthread+0x10/0x10 [ 1476.381971][ T37] ret_from_fork_asm+0x1a/0x30 [ 1476.382018][ T37] [ 1476.382047][ T37] INFO: task kworker/1:5:5729 blocked for more than 143 seconds. [ 1476.382062][ T37] Not tainted syzkaller #0 [ 1476.382071][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1476.382080][ T37] task:kworker/1:5 state:D stack:20648 pid:5729 tgid:5729 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1476.382138][ T37] Workqueue: events xfrm_state_gc_task [ 1476.382162][ T37] Call Trace: [ 1476.382169][ T37] [ 1476.382181][ T37] __schedule+0x1681/0x54c0 [ 1476.382225][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.382261][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1476.382323][ T37] ? __pfx___schedule+0x10/0x10 [ 1476.382359][ T37] ? schedule+0x90/0x360 [ 1476.382387][ T37] schedule+0x164/0x360 [ 1476.382414][ T37] schedule_timeout+0xc3/0x2c0 [ 1476.382442][ T37] ? __pfx_schedule_timeout+0x10/0x10 [ 1476.382467][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1476.382503][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1476.382527][ T37] ? wait_for_completion+0x274/0x5e0 [ 1476.382555][ T37] wait_for_completion+0x2cc/0x5e0 [ 1476.382604][ T37] ? __pfx_wait_for_completion+0x10/0x10 [ 1476.382632][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1476.382659][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1476.382685][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1476.382717][ T37] synchronize_rcu_normal+0x1c7/0x330 [ 1476.382739][ T37] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 1476.382796][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.382851][ T37] synchronize_rcu_expedited+0x15a/0x770 [ 1476.382886][ T37] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1476.382920][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1476.382982][ T37] xfrm_state_gc_task+0xff/0x730 [ 1476.383006][ T37] ? xfrm_state_gc_task+0x7c/0x730 [ 1476.383030][ T37] ? process_scheduled_works+0xa70/0x1860 [ 1476.383054][ T37] ? __pfx_xfrm_state_gc_task+0x10/0x10 [ 1476.383085][ T37] ? process_scheduled_works+0xa70/0x1860 [ 1476.383107][ T37] ? process_scheduled_works+0xa70/0x1860 [ 1476.383132][ T37] process_scheduled_works+0xb5d/0x1860 [ 1476.383193][ T37] ? __pfx_process_scheduled_works+0x10/0x10 [ 1476.383224][ T37] ? assign_work+0x3d5/0x5e0 [ 1476.383252][ T37] worker_thread+0xa53/0xfc0 [ 1476.383308][ T37] kthread+0x388/0x470 [ 1476.383336][ T37] ? __pfx_worker_thread+0x10/0x10 [ 1476.383357][ T37] ? __pfx_kthread+0x10/0x10 [ 1476.383387][ T37] ret_from_fork+0x514/0xb70 [ 1476.383413][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1476.383437][ T37] ? __switch_to+0xc79/0x1410 [ 1476.383472][ T37] ? __pfx_kthread+0x10/0x10 [ 1476.383502][ T37] ret_from_fork_asm+0x1a/0x30 [ 1476.383548][ T37] [ 1476.383615][ T37] INFO: task syz-executor:23902 blocked for more than 143 seconds. [ 1476.383630][ T37] Not tainted syzkaller #0 [ 1476.383640][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1476.383649][ T37] task:syz-executor state:D stack:22232 pid:23902 tgid:23902 ppid:23883 task_flags:0x400140 flags:0x00080000 [ 1476.383707][ T37] Call Trace: [ 1476.383713][ T37] [ 1476.383726][ T37] __schedule+0x1681/0x54c0 [ 1476.383763][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.383795][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.383829][ T37] ? look_up_lock_class+0x57/0x110 [ 1476.383857][ T37] ? __pfx___schedule+0x10/0x10 [ 1476.383892][ T37] ? schedule+0x90/0x360 [ 1476.383919][ T37] schedule+0x164/0x360 [ 1476.383945][ T37] schedule_timeout+0xc3/0x2c0 [ 1476.383972][ T37] ? __pfx_schedule_timeout+0x10/0x10 [ 1476.383997][ T37] ? do_raw_spin_lock+0x12b/0x2f0 [ 1476.384033][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1476.384033][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1476.384055][ T37] ? wait_for_completion+0x274/0x5e0 [ 1476.384083][ T37] wait_for_completion+0x2cc/0x5e0 [ 1476.384123][ T37] ? __pfx_wait_for_completion+0x10/0x10 [ 1476.384151][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1476.384178][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1476.384203][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1476.384235][ T37] synchronize_rcu_normal+0x1c7/0x330 [ 1476.384257][ T37] ? __pfx_synchronize_rcu_normal+0x10/0x10 [ 1476.384307][ T37] ? kfree+0x1c5/0x6c0 [ 1476.384325][ T37] ? device_rename+0x1af/0x210 [ 1476.384349][ T37] ? netif_change_name+0x2a9/0x9a0 [ 1476.384368][ T37] ? do_setlink+0xb75/0x45a0 [ 1476.384391][ T37] ? rtnl_newlink+0x15ad/0x1bb0 [ 1476.384412][ T37] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1476.384433][ T37] ? netlink_rcv_skb+0x232/0x4b0 [ 1476.384457][ T37] ? netlink_unicast+0x780/0x920 [ 1476.384477][ T37] ? netlink_sendmsg+0x813/0xb40 [ 1476.384500][ T37] ? __sys_sendto+0x67f/0x710 [ 1476.384523][ T37] ? __x64_sys_sendto+0xde/0x100 [ 1476.384545][ T37] ? do_syscall_64+0x15f/0xf80 [ 1476.384569][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.384621][ T37] synchronize_rcu_expedited+0x15a/0x770 [ 1476.384659][ T37] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1476.384702][ T37] ? kasan_quarantine_put+0xbb/0x1f0 [ 1476.384723][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1476.384772][ T37] netif_change_name+0x44d/0x9a0 [ 1476.384801][ T37] ? do_setlink+0xb75/0x45a0 [ 1476.384823][ T37] ? netif_change_name+0x148/0x9a0 [ 1476.384849][ T37] ? __pfx_netif_change_name+0x10/0x10 [ 1476.384868][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1476.384895][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1476.384920][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1476.384947][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 1476.384976][ T37] ? do_setlink+0x3d2/0x45a0 [ 1476.385005][ T37] do_setlink+0xb75/0x45a0 [ 1476.385036][ T37] ? unwind_get_return_address+0x4d/0x90 [ 1476.385063][ T37] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1476.385098][ T37] ? __pfx_do_setlink+0x10/0x10 [ 1476.385128][ T37] ? stack_trace_save+0xa9/0x100 [ 1476.385152][ T37] ? __pfx_stack_trace_save+0x10/0x10 [ 1476.385179][ T37] ? stack_depot_save_flags+0x33/0x810 [ 1476.385199][ T37] ? __kernel_text_address+0xd/0x30 [ 1476.385229][ T37] ? unwind_get_return_address+0x4d/0x90 [ 1476.385273][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.385318][ T37] ? __pfx___nla_validate_parse+0x10/0x10 [ 1476.385371][ T37] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1476.385398][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1476.385422][ T37] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1476.385449][ T37] ? mutex_lock_nested+0x152/0x1d0 [ 1476.385479][ T37] ? rtnl_newlink+0x883/0x1bb0 [ 1476.385507][ T37] rtnl_newlink+0x15ad/0x1bb0 [ 1476.385528][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 1476.385570][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1476.385600][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.385635][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.385666][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.385705][ T37] ? unwind_next_frame+0xa6/0x2550 [ 1476.385740][ T37] ? unwind_next_frame+0xa6/0x2550 [ 1476.385770][ T37] ? is_bpf_text_address+0x26/0x2b0 [ 1476.385816][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.385858][ T37] ? kernel_text_address+0xa5/0xe0 [ 1476.385889][ T37] ? __kernel_text_address+0xd/0x30 [ 1476.385919][ T37] ? unwind_get_return_address+0x4d/0x90 [ 1476.385945][ T37] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1476.385970][ T37] ? arch_stack_walk+0xfb/0x150 [ 1476.386006][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1476.386047][ T37] ? __pfx_rtnl_newlink+0x10/0x10 [ 1476.386070][ T37] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1476.386091][ T37] ? kasan_save_track+0x3e/0x80 [ 1476.386112][ T37] ? kmem_cache_alloc_node_noprof+0x22a/0x6e0 [ 1476.386137][ T37] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1476.386160][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1476.386185][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1476.386229][ T37] netlink_rcv_skb+0x232/0x4b0 [ 1476.386256][ T37] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1476.386281][ T37] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1476.386323][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1476.386348][ T37] ? netlink_deliver_tap+0x2e/0x1b0 [ 1476.386380][ T37] netlink_unicast+0x780/0x920 [ 1476.386416][ T37] netlink_sendmsg+0x813/0xb40 [ 1476.386453][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1476.386489][ T37] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1476.386511][ T37] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1476.386539][ T37] __sys_sendto+0x67f/0x710 [ 1476.386571][ T37] ? __pfx___sys_sendto+0x10/0x10 [ 1476.386633][ T37] ? exc_page_fault+0x6a/0xc0 [ 1476.386663][ T37] ? do_user_addr_fault+0xc6f/0x1340 [ 1476.386693][ T37] __x64_sys_sendto+0xde/0x100 [ 1476.386718][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.386742][ T37] do_syscall_64+0x15f/0xf80 [ 1476.386766][ T37] ? trace_irq_disable+0x3b/0x140 [ 1476.386791][ T37] ? clear_bhb_loop+0x40/0x90 [ 1476.386817][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.386839][ T37] RIP: 0033:0x7fa01dd5d60e [ 1476.386858][ T37] RSP: 002b:00007ffeefd57208 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1476.386878][ T37] RAX: ffffffffffffffda RBX: 0000555573895500 RCX: 00007fa01dd5d60e [ 1476.386894][ T37] RDX: 0000000000000030 RSI: 00007fa01eb43610 RDI: 0000000000000006 [ 1476.386908][ T37] RBP: 0000000000000001 R08: 00007ffeefd57284 R09: 000000000000000c [ 1476.386921][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 1476.386934][ T37] R13: 0000000000000000 R14: 00007fa01eb43610 R15: 0000000000000000 [ 1476.386970][ T37] [ 1476.386986][ T37] [ 1476.386986][ T37] Showing all locks held in the system: [ 1476.386997][ T37] 1 lock held by kworker/u8:1/13: [ 1476.387009][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.387067][ T37] 1 lock held by khungtaskd/37: [ 1476.387079][ T37] #0: ffffffff8dfc8140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1476.387136][ T37] 1 lock held by kworker/u8:2/42: [ 1476.387147][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.387201][ T37] 1 lock held by kworker/u8:3/55: [ 1476.387213][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.387268][ T37] 3 locks held by kworker/u8:5/108: [ 1476.387279][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1476.387329][ T37] #1: ffffc90002fa7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1476.387379][ T37] #2: ffff88805fa908b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 1476.387433][ T37] 3 locks held by kworker/u8:6/131: [ 1476.387444][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1476.387495][ T37] #1: ffffc90003847c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1476.387545][ T37] #2: ffff888031b708b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 1476.387604][ T37] 1 lock held by kworker/u8:9/635: [ 1476.387616][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.387676][ T37] 3 locks held by kworker/u8:12/1418: [ 1476.387688][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1476.387738][ T37] #1: ffffc90006acfc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1476.387788][ T37] #2: ffff888062dc08b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 1476.387850][ T37] 3 locks held by kworker/u8:15/3414: [ 1476.387861][ T37] #0: ffff88803246f938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1476.387908][ T37] #1: ffffc9000ecdfc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1476.387960][ T37] #2: ffffffff8f357278 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1476.388018][ T37] 2 locks held by getty/5353: [ 1476.388029][ T37] #0: ffff88803689e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1476.388080][ T37] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 1476.388136][ T37] 1 lock held by syz-executor/5584: [ 1476.388147][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 1476.388202][ T37] 1 lock held by syz-executor/5607: [ 1476.388213][ T37] #0: ffff88801d7b8058 (&sighand->siglock){+.+.}-{3:3}, at: get_signal+0x244/0x1310 [ 1476.388264][ T37] 2 locks held by kworker/1:5/5729: [ 1476.388276][ T37] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1476.388326][ T37] #1: ffffc900059c7c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1476.388375][ T37] 1 lock held by kworker/u8:16/5877: [ 1476.388386][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.388439][ T37] 1 lock held by kworker/u8:18/7279: [ 1476.388451][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.388506][ T37] 1 lock held by kworker/u8:11/16622: [ 1476.388518][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.388572][ T37] 1 lock held by kworker/u8:23/16629: [ 1476.388590][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.388646][ T37] 6 locks held by kworker/u9:4/18679: [ 1476.388657][ T37] #0: ffff88805e170138 ((wq_completion)hci2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1476.388704][ T37] #1: ffffc9000675fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1476.388755][ T37] #2: ffff888025980f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1476.388807][ T37] #3: ffff8880259800b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1476.388864][ T37] #4: ffffffff8f4d76f8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x340 [ 1476.388922][ T37] #5: ffff888062adcb70 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x92/0x570 [ 1476.388975][ T37] 1 lock held by syz-executor/20248: [ 1476.388986][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 1476.389042][ T37] 1 lock held by syz-executor/20527: [ 1476.389053][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 1476.389109][ T37] 1 lock held by udevd/20744: [ 1476.389120][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.389174][ T37] 1 lock held by udevd/20770: [ 1476.389185][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.389238][ T37] 1 lock held by udevd/20856: [ 1476.389249][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.389304][ T37] 1 lock held by udevd/20879: [ 1476.389315][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.389368][ T37] 1 lock held by kworker/u8:17/20950: [ 1476.389380][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.389433][ T37] 3 locks held by kworker/u8:19/20951: [ 1476.389444][ T37] #0: ffff88801a074138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1476.389494][ T37] #1: ffffc90000a6fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1476.389543][ T37] #2: ffff88805f6708b8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x460 [ 1476.389601][ T37] 3 locks held by kworker/1:6/21057: [ 1476.389612][ T37] #0: ffff88801a037938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1476.389661][ T37] #1: ffffc90004c07c40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1476.389711][ T37] #2: ffffffff8f357278 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1476.389766][ T37] 1 lock held by udevd/21184: [ 1476.389777][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.389830][ T37] 2 locks held by syz.7.5654/21319: [ 1476.389841][ T37] #0: ffffffff8f3c7220 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1476.389896][ T37] #1: ffffffff8e2e7ff8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x13e/0x1630 [ 1476.389951][ T37] 1 lock held by udevd/23131: [ 1476.389961][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.390016][ T37] 1 lock held by udevd/23180: [ 1476.390027][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.390080][ T37] 1 lock held by udevd/23181: [ 1476.390091][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.390144][ T37] 1 lock held by udevd/23182: [ 1476.390155][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1476.390208][ T37] 1 lock held by udevd/23187: [ 1477.118558][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1477.118630][ T37] 1 lock held by udevd/23225: [ 1477.118643][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1477.118697][ T37] 1 lock held by udevd/23226: [ 1477.118708][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1477.118763][ T37] 1 lock held by syz-executor/23883: [ 1477.118773][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: __do_wait+0xe1/0x740 [ 1477.118937][ T37] 2 locks held by syz-executor/23902: [ 1477.118950][ T37] #0: ffffffff8f357278 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 1477.119002][ T37] #1: ffff88801a174f78 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: do_setlink+0x3d2/0x45a0 [ 1477.119064][ T37] 1 lock held by dhcpcd-run-hook/24834: [ 1477.119076][ T37] #0: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: do_exit+0x79d/0x22c0 [ 1477.119131][ T37] 2 locks held by syz.3.7111/24917: [ 1477.119143][ T37] #0: ffffffff8e008130 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x2a49/0x4450 [ 1477.119193][ T37] #1: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: copy_process+0x2b54/0x4450 [ 1477.119243][ T37] 2 locks held by syz.8.7112/24918: [ 1477.119255][ T37] #0: ffffffff8e008130 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x2a49/0x4450 [ 1477.119313][ T37] #1: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: copy_process+0x2b54/0x4450 [ 1477.119363][ T37] 2 locks held by syz.9.7114/24922: [ 1477.119375][ T37] #0: ffffffff8e008130 (cgroup_threadgroup_rwsem){++++}-{0:0}, at: copy_process+0x2a49/0x4450 [ 1477.119424][ T37] #1: ffffffff8dc0a0a8 (tasklist_lock){++++}-{3:3}, at: copy_process+0x2b54/0x4450 [ 1477.119479][ T37] [ 1477.119484][ T37] ============================================= [ 1477.119484][ T37] [ 1477.119494][ T37] NMI backtrace for cpu 1 [ 1477.119509][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1477.119532][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1477.119541][ T37] Call Trace: [ 1477.119551][ T37] [ 1477.119560][ T37] dump_stack_lvl+0xe8/0x150 [ 1477.119638][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1477.119676][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1477.119702][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1477.119737][ T37] sys_info+0x135/0x170 [ 1477.119764][ T37] watchdog+0xfd3/0x1030 [ 1477.119811][ T37] ? watchdog+0x1c9/0x1030 [ 1477.119841][ T37] kthread+0x388/0x470 [ 1477.119869][ T37] ? __pfx_watchdog+0x10/0x10 [ 1477.119891][ T37] ? __pfx_kthread+0x10/0x10 [ 1477.119920][ T37] ret_from_fork+0x514/0xb70 [ 1477.119947][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1477.119971][ T37] ? __switch_to+0xc79/0x1410 [ 1477.120011][ T37] ? __pfx_kthread+0x10/0x10 [ 1477.120040][ T37] ret_from_fork_asm+0x1a/0x30 [ 1477.120084][ T37] [ 1477.120129][ T37] Sending NMI from CPU 1 to CPUs 0: [ 1477.120159][ C0] NMI backtrace for cpu 0 [ 1477.120175][ C0] CPU: 0 UID: 0 PID: 24923 Comm: syz.9.7114 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1477.120197][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1477.120206][ C0] RIP: 0033:0x7ff266d97306 [ 1477.120230][ C0] Code: fe ff ff e8 dc 5a 14 00 48 85 c0 75 27 69 3d b5 e3 ee 00 b8 0b 00 00 e8 f8 65 14 00 31 f6 bf 3c 00 00 00 31 c0 e8 ba 5a 14 00 fe 0f 1f 84 00 00 00 00 00 64 c7 04 25 a4 ff ff ff 00 00 00 00 [ 1477.120246][ C0] RSP: 002b:00007ff26512dfe0 EFLAGS: 00000217 [ 1477.120264][ C0] RAX: 0000000000000000 RBX: 00007ff267155fa0 RCX: 00007ff266edcdd9 [ 1477.120277][ C0] RDX: 00007ff26512e9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1477.120288][ C0] RBP: 00007ff266f72d69 R08: 0000000000000000 R09: 0000000000000000 [ 1477.120299][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1477.120310][ C0] R13: 00007ff267156038 R14: 00007ff267155fa0 R15: 00007ffc6c33e028 [ 1477.120321][ C0] FS: 00007ff26512e6c0 GS: 0000000000000000 [ 1477.305479][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1477.305503][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1477.305526][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1477.305538][ T37] Call Trace: [ 1477.305547][ T37] [ 1477.305557][ T37] vpanic+0x56c/0xa60 [ 1477.305595][ T37] ? __pfx___schedule+0x10/0x10 [ 1477.305621][ T37] ? __pfx_vpanic+0x10/0x10 [ 1477.305657][ T37] panic+0xc5/0xd0 [ 1477.305682][ T37] ? __pfx_panic+0x10/0x10 [ 1477.305708][ T37] ? preempt_schedule_thunk+0x16/0x30 [ 1477.305746][ T37] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1477.305780][ T37] watchdog+0x102c/0x1030 [ 1477.305812][ T37] ? watchdog+0x1c9/0x1030 [ 1477.305840][ T37] kthread+0x388/0x470 [ 1477.305868][ T37] ? __pfx_watchdog+0x10/0x10 [ 1477.305889][ T37] ? __pfx_kthread+0x10/0x10 [ 1477.305918][ T37] ret_from_fork+0x514/0xb70 [ 1477.305945][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1477.305968][ T37] ? __switch_to+0xc79/0x1410 [ 1477.306002][ T37] ? __pfx_kthread+0x10/0x10 [ 1477.306031][ T37] ret_from_fork_asm+0x1a/0x30 [ 1477.306074][ T37] [ 1477.306610][ T37] Kernel Offset: disabled