last executing test programs: 6m52.976564138s ago: executing program 1 (id=699): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) setrlimit(0x40000000000008, &(0x7f0000000000)) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf094, 0x0, 0x2, 0x40057}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) 6m51.017077621s ago: executing program 1 (id=703): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0003"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 6m49.585677084s ago: executing program 1 (id=709): ioctl$mixer_OSS_ALSAEMULVER(0xffffffffffffffff, 0x80044df9, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000240)={0x23}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x41, 0x2, 0x70bd27, 0x25dfdbfe, {0x6, 0x7c}, [@typed={0x14, 0x3a, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x42800}, 0xc000) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_dir/acpi/wakeup\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/filecache\x00', 0x2, 0x80) r3 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) 6m49.412028842s ago: executing program 5 (id=713): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000700)=0x9, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, &(0x7f0000000040)) 6m48.683190939s ago: executing program 1 (id=715): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = open_tree(0xffffffffffffffff, 0x0, 0x8c01) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f0000000080)}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0xc8402) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007c, 0x0) dup3(r5, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x20) write(r7, &(0x7f0000000800)='10000', 0x5) bind$xdp(0xffffffffffffffff, &(0x7f0000000080)={0x2d, 0x9, 0x0, 0xc}, 0x10) 6m48.556726629s ago: executing program 5 (id=717): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x6, 0x80}], 0x1, 0x0) 6m48.169902215s ago: executing program 5 (id=719): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x3, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a2131677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m47.46079709s ago: executing program 5 (id=723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000280)='net/protocols\x00') pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) 6m46.288818593s ago: executing program 5 (id=725): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x0, 0x0) unshare(0x22020400) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="928e", 0x2}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r0, 0x0, 0xd) fchdir(r6) unshare(0xc000000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) 6m44.124593897s ago: executing program 5 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x40, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x4, 0x141, 0x0, 0x0, 0x1000, 0x8, 0xffffffffffffffff, 0x0, 0x14}}}, &(0x7f0000000540)) ioctl$UBLK_U_CMD_GET_DEV_INFO(r4, 0x80207502, &(0x7f00000005c0)={0x0, 0xffff, 0x40, &(0x7f0000000580)=@ublk_ctrl_dev_info_existing}) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x29}}, './bus\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6m40.664729479s ago: executing program 1 (id=735): sigaltstack(0x0, 0x0) membarrier(0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x3, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "72f01afe02000000366a6a849a739045"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="4400028040000100240001"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x0) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 6m38.224298755s ago: executing program 1 (id=736): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x44, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x69, 0x75, 0x88, 0x10, 0xabf, 0x3370, 0x13d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x1, 0x0, 0x0, 0xfa, "", [{{0x9, 0x4, 0x8b, 0x0, 0x2, 0x92, 0x77, 0x99, 0x0, [], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xc, 0x3, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x48, 0x9e}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x9, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}]}}]}}]}}]}}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) 6m27.858648382s ago: executing program 32 (id=727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000", @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=r0], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140fa"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x28100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x2e, 0x40, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000240)=@any_dev={0x4, 0x141, 0x0, 0x0, 0x1000, 0x8, 0xffffffffffffffff, 0x0, 0x14}}}, &(0x7f0000000540)) ioctl$UBLK_U_CMD_GET_DEV_INFO(r4, 0x80207502, &(0x7f00000005c0)={0x0, 0xffff, 0x40, &(0x7f0000000580)=@ublk_ctrl_dev_info_existing}) prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x29}}, './bus\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6m23.082890202s ago: executing program 33 (id=736): sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x44, &(0x7f0000000780)={{0x12, 0x1, 0x200, 0x69, 0x75, 0x88, 0x10, 0xabf, 0x3370, 0x13d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x32, 0x1, 0x1, 0x0, 0x0, 0xfa, "", [{{0x9, 0x4, 0x8b, 0x0, 0x2, 0x92, 0x77, 0x99, 0x0, [], [{{0x9, 0x5, 0xf, 0x10, 0x3ff, 0xc, 0x3, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x48, 0x9e}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x9, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}]}}]}}]}}]}}, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpgrp(0x0) 3m53.737302024s ago: executing program 6 (id=1186): r0 = syz_open_dev$usbmon(&(0x7f0000000280), 0x80000001, 0x28100) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0xd0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r1, 0x890b, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) 3m52.865209426s ago: executing program 6 (id=1189): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) r0 = socket$inet(0x2, 0x1, 0x0) r1 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10, 0x80000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x130, 0x1c8, 0x260, 0x2f8, 0x98, 0x130, 0x1c8, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000180)=0x5, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x0, 0x2f9e, 0x200, 0x2, 0x159}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9273, 0x4, 0x1, 0x336, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf424, 0x8000, 0x2, 0x335}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc670, 0x40000, 0x3, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb49c, 0x20, 0x2, 0x23e}, 0xffffffffffffffff, 0x0, 0x0}], 0x4, &(0x7f0000001dc0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x0, 0x97f, 0x0, &(0x7f0000000dc0)=@buf_512="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"}}, &(0x7f0000001e40)) r6 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x1) r7 = syz_io_uring_setup(0x66b4, &(0x7f0000000140)={0x0, 0xe967, 0x10000, 0x0, 0x397, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000100), &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, r8, &(0x7f0000002300)=@IORING_OP_SENDMSG_ZC={0x30, 0x4b, 0x4, r1, 0x0, &(0x7f00000022c0)={&(0x7f0000001e80)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000002180), 0x0, &(0x7f00000021c0)=[{0xb8, 0x84, 0xf, "54c9b3819b20d121f9ad853c4e55f0255af68e262c3b80947670c1766a51511e9eaede76cc69c93f465c7e071997c75f812baf3923ad5c8a3bbbcd9f18d864bbaf75b81f8808c877bcdff8618b192a60675aae02db79c7f663294b2a9d39974f1be21ceeecf38cb11b21e0b086b0f8813e6de05ccce201a8dce649df6b2086f9ec432fe10a72eb257276d896f87e9f149cd04ac2069d2723e1b36ed17d3c360ebd64eb"}], 0xb8}, 0x8, 0x4000, 0x0, {0x0, r9}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x70bd27, 0x25dfdbfc, {0x1}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000100)) syz_ublk_setup_io_uring(0x2d69, &(0x7f00000001c0)={0x0, 0xbf64, 0x609, 0x2, 0x2de}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000006c0)) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]}) close_range(r11, 0xffffffffffffffff, 0x0) 3m51.046160965s ago: executing program 6 (id=1198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) 3m47.74998898s ago: executing program 6 (id=1204): setresuid(0xee01, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000200"/42) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000480)={r0, &(0x7f0000000140)='devtmpfs\x00', 0xc00, &(0x7f00000001c0)={@align=0x7, {0x6, 0xb4f9, 0xffffffff, 0x6}}, 0x9, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0xfffffffe}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB], 0x18}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010700000000fedbdf2d001000"], 0x14}}, 0x24000040) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000016c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001680)={&(0x7f0000001700)={0x128, r9, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0xf2a8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x200}, {0x6, 0x11, 0x7f}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xffff}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x5}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x3}}]}, 0x128}, 0x1, 0x0, 0x0, 0x8805}, 0x400c086) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r10) r11 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x80, 0x3, 0x2aa}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000200)=@IORING_OP_SEND_ZC={0x2f, 0xa, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x7b, 0x11}) io_uring_enter(r11, 0x6516, 0x6d93, 0x8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_dev$evdev(&(0x7f0000000040), 0x8001, 0x200000) read$qrtrtun(r1, &(0x7f0000000540)=""/4096, 0x1000) mlockall(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 3m47.07372649s ago: executing program 6 (id=1212): sigaltstack(0x0, 0x0) membarrier(0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x3, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "72f01afe02000000366a6a849a739045"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="4400028040000100240001"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x0) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 3m44.533246247s ago: executing program 6 (id=1213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@remote, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x1, 0x40, 0x8, 0x100, 0x6, 0x808082}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0xaa6ed000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, 0x0, 0x0) syz_io_uring_setup(0x235, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffd55, 0x104, 0x0, 0x0, @pid=r1}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@loopback={0x1000000000000}}, @typed={0x0, 0x9d, 0x0, 0x0, @uid}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3m29.311592525s ago: executing program 34 (id=1213): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={@remote, @ipv4={'\x00', '\xff\xff', @remote}, @empty, 0x1, 0x40, 0x8, 0x100, 0x6, 0x808082}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0xaa6ed000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = dup(0xffffffffffffffff) write$6lowpan_enable(r3, 0x0, 0x0) syz_io_uring_setup(0x235, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x44, 0x3f, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x2fc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0xfffffffffffffd55, 0x104, 0x0, 0x0, @pid=r1}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x5, 0x23, 0x0, 0x0, @str='\x00'}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@loopback={0x1000000000000}}, @typed={0x0, 0x9d, 0x0, 0x0, @uid}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 59.489230186s ago: executing program 7 (id=1571): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffff9c, &(0x7f0000000300), 0x4441, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000340), 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/4057, 0xfd9, 0x1, 0x0}, &(0x7f0000000180)=0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000004000070100000000fddbdf25047c00000c00c580080008"], 0x20}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) 56.756112807s ago: executing program 7 (id=1577): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) gettid() ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) shmdt(0x0) 55.401712499s ago: executing program 7 (id=1579): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo\x00') getdents(r1, &(0x7f0000000000)=""/43, 0x2b) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000a80), 0x440, 0x0) 52.619270684s ago: executing program 7 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init1(0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) fallocate(0xffffffffffffffff, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, 0xffffffffffffffff, 0x2000) 49.359802952s ago: executing program 7 (id=1591): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) close(r3) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0xff32, 0x8fc, &(0x7f0000000480)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000680), 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.133498319s ago: executing program 7 (id=1597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) 34.229870638s ago: executing program 3 (id=1624): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) write(r2, &(0x7f0000000380)="69672505bde5d1853a384e3deec6fcb4391f745de504000000feffffff7090ba2b6d59c8958d6f1500000000c4677b000900ffffffffffffff200000f8bf54da331979", 0x43) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) 31.68904399s ago: executing program 35 (id=1597): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x7f7) socket$inet6(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r3}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) 31.649665778s ago: executing program 3 (id=1627): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x6, 0x0, 0xfffffff8, 0x0, 0x12, "62d405bb5c6823f497419a4b5aa33d30904169"}) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x22020600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0xfe8ee28a1d8eb870, 0x8, 0x6, 0x2, 0x40, 0x65f, 0x0, 0x6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x141000, 0xd, 0x0, 0x107, 0x9, 0x5, 0x0, 0x2, 0x1}) close(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x20000006, 0x97, 0x5}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r5, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 28.930933342s ago: executing program 3 (id=1634): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) unshare(0x22020400) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="928e", 0x2}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0xd) fchdir(r5) unshare(0xc000000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) 23.429725204s ago: executing program 3 (id=1643): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x47, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(r3) r4 = socket$kcm(0x2, 0x2, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x50800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000000100)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) sendmsg$NFNL_MSG_ACCT_GET(r3, 0x0, 0x20008814) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, 0x0, &(0x7f0000000080)=r3}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x541b, 0x0) 20.123522791s ago: executing program 8 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x1000000}}], 0x14, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioprio_set$uid(0x3, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE'], 0x8c) close(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1c8, 0x178, 0x178, 0x1c8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0xc8, 0x128, 0x0, {0x0, 0x7a010000}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@addrtype={{0x30}, {0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0xe7b34dc4353f5976, 0x4, 0x6, 0x1, 0x6], 0x6, 0x4}, {0xffffffffffffffff, [0x2, 0x7, 0x7, 0x0, 0x4, 0x1], 0x3, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x6}, {0x4, 0x1, 0x4}, 0x8, 0x1cc32a6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x5, 0x7, 0x0, &(0x7f0000000080)="00000000000400", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7c, &(0x7f0000000540)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r8], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc6, &(0x7f0000000640)=""/198, 0x0, 0xe4, '\x00', r8, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r5, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) 18.89904351s ago: executing program 8 (id=1650): mkdir(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000100)={0x5, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r5, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000780)={0x5, [[0x4, 0x10001, 0x7, 0x4, 0x1ff, 0xffff, 0x402, 0x8000], [0x7f, 0x800, 0x3, 0x75, 0x0, 0x4, 0x62e2, 0x80], [0x401, 0x8, 0x400, 0x1, 0x0, 0x10000, 0x6c2, 0x5]], '\x00', [{0x4, 0x7fffffff, 0x1, 0x1}, {0xbbade33f, 0x7, 0x0, 0x1, 0x1, 0x1}, {0x101, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x4, 0xffff, 0x1, 0x1}, {0xfffffffa, 0x1, 0x1, 0x1}, {0x0, 0x3}, {0x1, 0x5, 0x1, 0x0, 0x1}, {0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}, {0xc1, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x9e98, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x10001, 0x7, 0x1, 0x1}, {0x3, 0x7, 0x1, 0x1, 0x0, 0x1}], '\x00', 0x3e800000}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = accept4(r6, 0x0, 0x0, 0x4d9ada1316f0d3c6) recvfrom$x25(r7, 0x0, 0x14, 0x2000, 0x0, 0x0) 17.322161205s ago: executing program 0 (id=1651): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[], 0x2b0}}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x29, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x1000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000004, 0x42031, 0xffffffffffffffff, 0x0) 15.624890599s ago: executing program 4 (id=1653): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x10) bind$inet(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000400), &(0x7f0000000200), 0x400) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2c2ac07439eb58e2", "deb7c8f18af3c7cac406b08e0f3610ae", "00800002", "17e153029f1c00dd"}, 0x28) close_range(r3, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getegid() r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) 14.391570914s ago: executing program 8 (id=1654): r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) unshare(0x22020400) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="928e", 0x2}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0xd) fchdir(r5) unshare(0xc000000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = open(&(0x7f0000000040)='.\x00', 0x8c00, 0x0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) 14.248080941s ago: executing program 4 (id=1655): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) r1 = dup(r0) write$FUSE_STATX(r1, &(0x7f0000003ac0)={0x130, 0x0, 0x0, {0x2, 0x100, 0x0, '\x00', {0x1000, 0x6, 0x8, 0xffff, 0x0, 0x0, 0xa000, '\x00', 0xffffffff00000000, 0x2, 0x80000000, 0x1, {0x4, 0x8}, {0x4, 0xffffffff}, {0x5, 0x4}, {0xdc, 0xffffffff}, 0x9, 0x7fff, 0xc68}}}, 0x130) 14.076390979s ago: executing program 4 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x6, 0x4000, 0x8b, 0x2, 0xfffffffc}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x4000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='wg2\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13f00, 0xffffffff}, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000080)=0x8, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1003, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0xa, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0x10, 0x10001006, 0x2, 0x6, 0x1bf7, 0xb, 0x40, 0xa0d1ae, 0x8, 0x8000100, 0x3, 0x2, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x40001, 0x7f, 0x4, 0xa, 0x9, 0x8001, 0x101, 0xa, 0x1fa0860a, 0x3, 0x100aa, 0x7f, 0x2, 0x0, 0x4005, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x5, 0x7, 0x1, 0x0, 0x4, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x3, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x9, 0xc50, 0x1, 0xe, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x100, 0x4, 0x2, 0x40, 0x8, 0x4, 0x5, 0x401, 0x466cd, 0x8, 0x8, 0x799e, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) 14.055132896s ago: executing program 2 (id=1657): setresuid(0xee01, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d79") ioctl(r0, 0xc138fd06, &(0x7f0000000000)="040000000000000000000000380100000000000000000000000000000200"/42) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000480)={r0, &(0x7f0000000140)='devtmpfs\x00', 0xc00, &(0x7f00000001c0)={@align=0x7, {0x6, 0xb4f9, 0xffffffff, 0x6}}, 0x9, &(0x7f0000000400)={@_ha_fsid}, &(0x7f0000000440)=0xfffffffe}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c}]}}}]}, 0x78}}, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB], 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="010700000000fedbdf2d001000"], 0x14}}, 0x24000040) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r9) r10 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x80, 0x3, 0x2aa}, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r11, r12, r13, &(0x7f0000000200)=@IORING_OP_SEND_ZC={0x2f, 0xa, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x7b, 0x11}) io_uring_enter(r10, 0x6516, 0x6d93, 0x8, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r14 = syz_open_dev$evdev(&(0x7f0000000040), 0x8001, 0x200000) ioctl$EVIOCGABS2F(r14, 0x8018456f, &(0x7f0000000280)=""/224) read$qrtrtun(r1, &(0x7f0000000540)=""/4096, 0x1000) mlockall(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 12.520991542s ago: executing program 2 (id=1658): r0 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r0, &(0x7f0000001040)={&(0x7f0000000080)={0x2, 0xffff, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000000000002000000070000007e0b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x4c004) 11.472704322s ago: executing program 4 (id=1659): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r3 = openat$nvram(0xffffff9c, &(0x7f0000000300), 0x4441, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000340), 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/4057, 0xfd9, 0x1, 0x0}, &(0x7f0000000180)=0x40) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000004000070100000000fddbdf25047c00000c00c580080008"], 0x20}, 0x1, 0x0, 0x0, 0x2000c880}, 0x0) syz_genetlink_get_family_id$mptcp(0x0, r4) 9.635812394s ago: executing program 0 (id=1660): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x6, 0x0, 0xfffffff8, 0x0, 0x12, "62d405bb5c6823f497419a4b5aa33d30904169"}) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x0, 0xfe8ee28a1d8eb870, 0x8, 0x6, 0x2, 0x40, 0x65f, 0x0, 0x6, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r5, 0xc0a85320, &(0x7f00000007c0)={{0x80}, 'port0\x00', 0x3c, 0x141000, 0xd, 0x0, 0x107, 0x9, 0x5, 0x0, 0x2, 0x1}) close(r5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x81, &(0x7f0000001180)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x486}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x740, 0x1800, 0x20000006, 0x97, 0x5}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r6, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x8, @local}}}, 0x118) 9.508691974s ago: executing program 2 (id=1661): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r6 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) gettid() ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r2, 0x541c, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000001c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8001}) ioctl(r1, 0x3b92, &(0x7f0000000000)="10") 9.398310279s ago: executing program 4 (id=1662): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) shmdt(0x0) 9.00325924s ago: executing program 3 (id=1663): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x47, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(r3) r4 = socket$kcm(0x2, 0x2, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x50800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000000100)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) sendmsg$NFNL_MSG_ACCT_GET(r3, 0x0, 0x20008814) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, 0x0, &(0x7f0000000080)=r3}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x541b, 0x0) 7.456865955s ago: executing program 4 (id=1664): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) write$P9_RSTATFS(r7, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(0x0, 0xb) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r10, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r11, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x4e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 7.455676361s ago: executing program 2 (id=1665): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x47, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(r4) r5 = socket$kcm(0x2, 0x2, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x50800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000100)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) sendmsg$NFNL_MSG_ACCT_GET(r4, 0x0, 0x20008814) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, 0x0, &(0x7f0000000080)=r4}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x541b, 0x0) 7.303019714s ago: executing program 0 (id=1666): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r2, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad7", 0x3}], 0x1, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) 6.883480952s ago: executing program 0 (id=1667): sigaltstack(0x0, 0x0) membarrier(0x2, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x206, 0x10b481) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x148, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x3, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "72f01afe02000000366a6a849a739045"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ptrace$getregset(0x4204, 0x0, 0x202, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000080)=0x3, 0x4) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB, @ANYRES32, @ANYBLOB="4400028040000100240001"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x0) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 6.22228237s ago: executing program 2 (id=1668): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r1, 0x10) bind$inet(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000400), &(0x7f0000000200), 0x400) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000040)=@ccm_128={{0x304}, "2c2ac07439eb58e2", "deb7c8f18af3c7cac406b08e0f3610ae", "00800002", "17e153029f1c00dd"}, 0x28) close_range(r3, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) getegid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000037000701f2ffffffffdbd72504"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x40008090) 6.221008205s ago: executing program 3 (id=1669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x50440, 0x29) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x28, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) fallocate(r1, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000c, 0x13, r1, 0x2000) 5.055316946s ago: executing program 0 (id=1670): socket$unix(0x1, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.977405801s ago: executing program 2 (id=1671): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x88}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @local}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)='veth1_to_hsr\x00', 0x6, 0x5f13, 0x8b}) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={0x0, 0x0, 0x4}, 0x14) socket$unix(0x1, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0) 2.617665678s ago: executing program 0 (id=1672): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000006c0)=ANY=[], 0x2b0}}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x29, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x1000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000004, 0x42031, 0xffffffffffffffff, 0x0) 2.489400062s ago: executing program 8 (id=1673): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.440073752s ago: executing program 8 (id=1674): socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x47, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close(r3) r4 = socket$kcm(0x2, 0x2, 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x50800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r5, 0xc0bc5310, &(0x7f0000000100)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x1100000000000000, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108) sendmsg$NFNL_MSG_ACCT_GET(r3, 0x0, 0x20008814) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, 0x0, &(0x7f0000000080)=r3}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x541b, 0x0) 0s ago: executing program 8 (id=1675): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xf8f, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) shmdt(0x0) kernel console output (not intermixed with test programs): $AttrDef (-2) [ 157.425902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 160.451482][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 160.460534][ T6195] netlink: 348 bytes leftover after parsing attributes in process `syz.4.79'. [ 160.469622][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 160.478880][ T6195] netlink: 348 bytes leftover after parsing attributes in process `syz.4.79'. [ 160.488698][ T6195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 160.891152][ T6196] loop4: detected capacity change from 0 to 4096 [ 161.203572][ T6196] ntfs3(loop4): Failed to load $AttrDef (-2) [ 161.705108][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.82'. [ 161.713966][ T6199] netlink: 348 bytes leftover after parsing attributes in process `syz.5.82'. [ 161.723107][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.82'. [ 161.732871][ T6199] netlink: 348 bytes leftover after parsing attributes in process `syz.5.82'. [ 161.743079][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.82'. [ 162.141462][ T6200] loop5: detected capacity change from 0 to 4096 [ 162.416763][ T6200] ntfs3(loop5): Failed to load $AttrDef (-2) [ 163.625018][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 163.634692][ T6215] netlink: 348 bytes leftover after parsing attributes in process `syz.2.85'. [ 163.643747][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 163.652564][ T6215] netlink: 348 bytes leftover after parsing attributes in process `syz.2.85'. [ 163.662332][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 164.078129][ T6217] loop2: detected capacity change from 0 to 4096 [ 164.301427][ T6217] ntfs3(loop2): Failed to load $AttrDef (-2) [ 168.075758][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 171.690421][ T6267] loop0: detected capacity change from 0 to 128 [ 172.342314][ T6267] EXT4-fs: Ignoring removed i_version option [ 172.349938][ T6267] EXT4-fs: Ignoring removed oldalloc option [ 172.564523][ T6267] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.708307][ T6267] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.330786][ T6286] EXT4-fs error (device loop0): dx_make_map:1295: inode #2: block 33: comm syz.0.97: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 174.011858][ T6286] EXT4-fs error (device loop0) in do_split:2029: Corrupt filesystem [ 175.827746][ T5619] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.086126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 181.289544][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 181.298714][ T6330] netlink: 348 bytes leftover after parsing attributes in process `syz.3.112'. [ 181.307908][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 181.316840][ T6330] netlink: 348 bytes leftover after parsing attributes in process `syz.3.112'. [ 181.326452][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.112'. [ 181.731783][ T6331] loop3: detected capacity change from 0 to 4096 [ 182.148195][ T6331] ntfs3(loop3): Failed to load $AttrDef (-2) [ 193.698061][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.704598][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.319469][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 208.328573][ T6504] netlink: 348 bytes leftover after parsing attributes in process `syz.4.153'. [ 208.337766][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 208.346919][ T6504] netlink: 348 bytes leftover after parsing attributes in process `syz.4.153'. [ 208.356638][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 208.438099][ T6505] loop4: detected capacity change from 0 to 4096 [ 209.222053][ T6505] ntfs3(loop4): Failed to load $AttrDef (-2) [ 212.764603][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 212.773520][ T6527] netlink: 348 bytes leftover after parsing attributes in process `syz.3.158'. [ 212.782693][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 212.791600][ T6527] netlink: 348 bytes leftover after parsing attributes in process `syz.3.158'. [ 212.801319][ T6527] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 213.215066][ T6528] loop3: detected capacity change from 0 to 4096 [ 213.719212][ T6528] ntfs3(loop3): Failed to load $AttrDef (-2) [ 214.586557][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 214.595584][ T6536] netlink: 348 bytes leftover after parsing attributes in process `syz.2.159'. [ 214.604738][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 214.613864][ T6536] netlink: 348 bytes leftover after parsing attributes in process `syz.2.159'. [ 214.623695][ T6536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'. [ 215.028609][ T6537] loop2: detected capacity change from 0 to 4096 [ 215.161335][ T6537] ntfs3(loop2): Failed to load $AttrDef (-2) [ 215.678633][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.161'. [ 215.687643][ T6544] netlink: 348 bytes leftover after parsing attributes in process `syz.5.161'. [ 215.697747][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.161'. [ 215.707315][ T6544] netlink: 348 bytes leftover after parsing attributes in process `syz.5.161'. [ 215.716907][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.5.161'. [ 216.093477][ T6545] loop5: detected capacity change from 0 to 4096 [ 216.752211][ T6545] ntfs3(loop5): Failed to load $AttrDef (-2) [ 226.578838][ T4921] Bluetooth: hci1: command 0x0406 tx timeout [ 226.580227][ T5633] Bluetooth: hci0: command 0x0406 tx timeout [ 226.584958][ T5634] Bluetooth: hci4: command 0x0406 tx timeout [ 226.597219][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 226.604071][ T4921] Bluetooth: hci2: command 0x0406 tx timeout [ 226.610320][ T5627] Bluetooth: hci5: command 0x0406 tx timeout [ 231.369962][ T5633] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 233.878165][ T51] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 234.271488][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.189'. [ 234.280422][ T6659] netlink: 348 bytes leftover after parsing attributes in process `syz.5.189'. [ 234.289699][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.189'. [ 234.298796][ T6659] netlink: 348 bytes leftover after parsing attributes in process `syz.5.189'. [ 234.308719][ T6659] netlink: 4 bytes leftover after parsing attributes in process `syz.5.189'. [ 235.160778][ T6660] loop5: detected capacity change from 0 to 4096 [ 236.041318][ T6660] ntfs3(loop5): Failed to load $AttrDef (-2) [ 237.834045][ T51] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 238.221890][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 238.230832][ T6684] netlink: 348 bytes leftover after parsing attributes in process `syz.3.195'. [ 238.240049][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 238.249075][ T6684] netlink: 348 bytes leftover after parsing attributes in process `syz.3.195'. [ 238.258827][ T6684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 238.670639][ T6685] loop3: detected capacity change from 0 to 4096 [ 238.860863][ T6685] ntfs3(loop3): Failed to load $AttrDef (-2) [ 242.541873][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 245.552453][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 249.247840][ T6744] loop4: detected capacity change from 0 to 32768 [ 249.315135][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 249.973282][ T6744] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 250.592908][ T6744] XFS (loop4): Ending clean mount [ 250.645290][ T6744] XFS (loop4): Quotacheck needed: Please wait. [ 251.415902][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 251.546751][ T6744] XFS (loop4): Quotacheck: Done. [ 252.393289][ T5613] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 252.599864][ T51] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 253.018909][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 253.027956][ T6769] netlink: 348 bytes leftover after parsing attributes in process `syz.1.214'. [ 253.037243][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 253.046266][ T6769] netlink: 348 bytes leftover after parsing attributes in process `syz.1.214'. [ 253.055603][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 253.490388][ T6770] loop1: detected capacity change from 0 to 4096 [ 253.840799][ T6770] ntfs3(loop1): Failed to load $AttrDef (-2) [ 254.705875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 255.137670][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.317364][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.157268][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 262.072149][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 263.661097][ T6824] loop2: detected capacity change from 0 to 512 [ 263.676333][ T6824] EXT4-fs (loop2): Test dummy encryption mode enabled [ 263.684209][ T6824] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 263.699997][ T6824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 263.740515][ T6824] EXT4-fs (loop2): 1 truncate cleaned up [ 263.755134][ T6824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.684275][ T6838] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 267.095668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 267.466125][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.823269][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 273.831775][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 274.271723][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 277.342165][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 277.653167][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 277.664408][ T6910] loop0: detected capacity change from 0 to 512 [ 277.779035][ T6910] EXT4-fs (loop0): Test dummy encryption mode enabled [ 277.815935][ T6910] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 277.944586][ T6910] EXT4-fs (loop0): 1 truncate cleaned up [ 280.810110][ T6910] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 281.084130][ T5619] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.541699][ T51] Bluetooth: hci5: unexpected event for opcode 0x4ad0 [ 283.930487][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 283.939577][ T6943] netlink: 348 bytes leftover after parsing attributes in process `syz.0.256'. [ 283.948882][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 283.957873][ T6943] netlink: 348 bytes leftover after parsing attributes in process `syz.0.256'. [ 283.967790][ T6943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 284.403332][ T6944] loop0: detected capacity change from 0 to 4096 [ 284.668955][ T6944] ntfs3(loop0): Failed to load $AttrDef (-2) [ 284.730347][ T51] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 285.135360][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 285.144551][ T6952] netlink: 348 bytes leftover after parsing attributes in process `syz.4.259'. [ 285.153901][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 285.162892][ T6952] netlink: 348 bytes leftover after parsing attributes in process `syz.4.259'. [ 285.172809][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.259'. [ 285.604914][ T6953] loop4: detected capacity change from 0 to 4096 [ 286.966980][ T6953] ntfs3(loop4): Failed to load $AttrDef (-2) [ 287.187604][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 289.600872][ T51] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 291.785758][ T6977] loop1: detected capacity change from 0 to 512 [ 291.803365][ T6977] EXT4-fs (loop1): Test dummy encryption mode enabled [ 291.812895][ T6977] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 291.841737][ T6977] EXT4-fs (loop1): 1 truncate cleaned up [ 293.728336][ T51] Bluetooth: hci2: unexpected event for opcode 0x4ad0 [ 293.730233][ T6977] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.115662][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 294.124683][ T6991] netlink: 348 bytes leftover after parsing attributes in process `syz.4.269'. [ 294.135083][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 294.145086][ T6991] netlink: 348 bytes leftover after parsing attributes in process `syz.4.269'. [ 294.154777][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.269'. [ 294.579127][ T6992] loop4: detected capacity change from 0 to 4096 [ 294.707404][ T6992] ntfs3(loop4): Failed to load $AttrDef (-2) [ 297.980539][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.393157][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 299.412374][ T51] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 299.798371][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 299.807442][ T7020] netlink: 348 bytes leftover after parsing attributes in process `syz.1.275'. [ 299.816648][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 299.825650][ T7020] netlink: 348 bytes leftover after parsing attributes in process `syz.1.275'. [ 299.835394][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.275'. [ 300.213082][ T7021] loop1: detected capacity change from 0 to 4096 [ 300.635933][ T7021] ntfs3(loop1): Failed to load $AttrDef (-2) [ 301.094033][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 301.285421][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 302.699790][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 304.909095][ T7048] loop4: detected capacity change from 0 to 32768 [ 305.134433][ T7048] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 305.204841][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 305.532018][ T7048] XFS (loop4): Ending clean mount [ 305.556351][ T7048] XFS (loop4): Quotacheck needed: Please wait. [ 306.076326][ T7048] XFS (loop4): Quotacheck: Done. [ 307.130127][ T5613] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 310.798632][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 311.788830][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 316.567810][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.575410][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.340687][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 329.713062][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 331.786954][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 333.679347][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 340.437024][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 340.776854][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 342.489829][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 342.906996][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 345.646084][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 345.658274][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 345.709319][ T7271] loop2: detected capacity change from 0 to 512 [ 345.716066][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 345.744993][ T7271] EXT4-fs (loop2): Test dummy encryption mode enabled [ 345.753326][ T7271] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 345.790071][ T7271] EXT4-fs (loop2): 1 truncate cleaned up [ 346.144317][ T7271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.616773][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 349.888094][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.256961][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 355.753294][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 357.012699][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 358.650460][ T7345] loop1: detected capacity change from 0 to 512 [ 359.077694][ T7345] EXT4-fs (loop1): Test dummy encryption mode enabled [ 359.180416][ T7345] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 360.022695][ T7345] EXT4-fs (loop1): 1 truncate cleaned up [ 361.209245][ T7345] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.521235][ T5614] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.575813][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 365.199160][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 366.834632][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 366.918147][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 367.329830][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 368.521168][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 369.610369][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 371.609043][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 371.672780][ T7429] loop5: detected capacity change from 0 to 512 [ 371.710578][ T7429] EXT4-fs (loop5): Test dummy encryption mode enabled [ 371.741619][ T7429] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 371.823292][ T7429] EXT4-fs (loop5): 1 truncate cleaned up [ 371.900351][ T7429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.438978][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 375.476625][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 376.855176][ T5615] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.560168][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 378.046873][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.083336][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.320815][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 382.932559][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 383.570071][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 384.643151][ T7510] loop2: detected capacity change from 0 to 512 [ 384.835028][ T7510] EXT4-fs (loop2): Test dummy encryption mode enabled [ 384.935028][ T7510] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 385.079499][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 385.427917][ T7510] EXT4-fs (loop2): 1 truncate cleaned up [ 385.549124][ T7510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 385.682771][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 386.265354][ T51] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 386.556648][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 386.714639][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'. [ 386.723584][ T7530] netlink: 348 bytes leftover after parsing attributes in process `syz.5.395'. [ 386.732924][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'. [ 386.741836][ T7530] netlink: 348 bytes leftover after parsing attributes in process `syz.5.395'. [ 386.751499][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'. [ 387.392261][ T7531] loop5: detected capacity change from 0 to 4096 [ 387.421284][ T5612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.667085][ T7531] ntfs3(loop5): Failed to load $AttrDef (-2) [ 388.829740][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 389.854537][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 391.040114][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 392.616659][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 394.372789][ T51] Bluetooth: hci5: unexpected event for opcode 0x4ad0 [ 394.933212][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 394.942125][ T7580] netlink: 348 bytes leftover after parsing attributes in process `syz.0.404'. [ 394.951191][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 394.960039][ T7580] netlink: 348 bytes leftover after parsing attributes in process `syz.0.404'. [ 394.969142][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.404'. [ 395.044129][ T7581] loop0: detected capacity change from 0 to 4096 [ 395.769196][ T7581] ntfs3(loop0): Failed to load $AttrDef (-2) [ 396.147942][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 439.448364][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.454715][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.870121][ T51] Bluetooth: hci5: unexpected event for opcode 0x4ad0 [ 459.627123][ T7631] loop0: detected capacity change from 0 to 4096 [ 459.856877][ T7631] ntfs3(loop0): Failed to load $AttrDef (-2) [ 462.222942][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 463.621724][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 464.850813][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 465.586363][ T51] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 466.070902][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 466.079929][ T7682] netlink: 348 bytes leftover after parsing attributes in process `syz.1.427'. [ 466.089109][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 466.098178][ T7682] netlink: 348 bytes leftover after parsing attributes in process `syz.1.427'. [ 466.107265][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 466.502170][ T7683] loop1: detected capacity change from 0 to 4096 [ 467.614309][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 467.639861][ T7683] ntfs3(loop1): Failed to load $AttrDef (-2) [ 471.120115][ T51] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 471.906356][ T7720] loop5: detected capacity change from 0 to 4096 [ 472.284532][ T7720] ntfs3(loop5): Failed to load $AttrDef (-2) [ 474.504121][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 474.905940][ T51] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 475.532831][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 475.541836][ T7742] netlink: 348 bytes leftover after parsing attributes in process `syz.1.440'. [ 475.551052][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 475.559947][ T7742] netlink: 348 bytes leftover after parsing attributes in process `syz.1.440'. [ 475.569701][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.440'. [ 475.999092][ T7743] loop1: detected capacity change from 0 to 4096 [ 476.018761][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 476.129294][ T7743] ntfs3(loop1): Failed to load $AttrDef (-2) [ 480.843066][ T51] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 481.181584][ T7763] loop5: detected capacity change from 0 to 4096 [ 481.217721][ T7763] ntfs3(loop5): Failed to load $AttrDef (-2) [ 481.748683][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 483.992151][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 484.995056][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 486.852014][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 486.909491][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 486.927415][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 487.291729][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c5a [ 487.454007][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 488.102110][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 490.272858][ T51] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 490.971197][ T7843] loop1: detected capacity change from 0 to 4096 [ 491.651337][ T7843] ntfs3(loop1): Failed to load $AttrDef (-2) [ 492.522657][ T51] Bluetooth: hci5: unexpected event for opcode 0x0c5a [ 493.633780][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 493.889442][ T51] Bluetooth: hci3: unexpected event for opcode 0x4ad0 [ 493.949571][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 494.459967][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 494.469214][ T7869] netlink: 348 bytes leftover after parsing attributes in process `syz.3.471'. [ 494.478380][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 494.487417][ T7869] netlink: 348 bytes leftover after parsing attributes in process `syz.3.471'. [ 494.497209][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.471'. [ 494.873909][ T7870] loop3: detected capacity change from 0 to 4096 [ 495.115253][ T7870] ntfs3(loop3): Failed to load $AttrDef (-2) [ 500.936542][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.653353][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.134513][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 504.166279][ T51] Bluetooth: hci0: unexpected event for opcode 0x4ad0 [ 504.680281][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 504.689174][ T7930] netlink: 348 bytes leftover after parsing attributes in process `syz.1.487'. [ 504.698274][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 504.707124][ T7930] netlink: 348 bytes leftover after parsing attributes in process `syz.1.487'. [ 504.716251][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 504.776425][ T7931] loop1: detected capacity change from 0 to 4096 [ 505.700371][ T7931] ntfs3(loop1): Failed to load $AttrDef (-2) [ 506.594830][ T7947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.708439][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 509.002201][ T5735] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 509.106223][ T3294] IPVS: starting estimator thread 0... [ 509.132936][ T7972] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 509.216425][ T5735] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 509.226826][ T7974] IPVS: using max 22 ests per chain, 52800 per kthread [ 510.009185][ T5735] usb 2-1: config 0 has no interfaces? [ 510.024449][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.033710][ T5735] usb 2-1: Product: syz [ 510.038221][ T5735] usb 2-1: Manufacturer: syz [ 510.044324][ T5735] usb 2-1: SerialNumber: syz [ 510.127368][ T5735] usb 2-1: config 0 descriptor?? [ 510.461684][ T7978] Bluetooth: MGMT ver 1.23 [ 510.488345][ T7980] warning: `syz.0.503' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 511.007374][ T9] usb 2-1: USB disconnect, device number 2 [ 511.100277][ T7991] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 511.488226][ T7997] loop0: detected capacity change from 0 to 2049 [ 511.843965][ T8000] netlink: 67 bytes leftover after parsing attributes in process `syz.5.508'. [ 512.170989][ T8002] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 512.200088][ T8002] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 512.208662][ T8002] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 512.274639][ T8002] loop0: [ 512.395696][ T5735] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 512.408768][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.512'. [ 512.622111][ T8007] Cannot find add_set index 0 as target [ 512.744149][ T5735] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 512.810884][ T5735] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.911455][ T5735] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.042486][ T5735] usb 5-1: config 0 interface 0 has no altsetting 0 [ 513.096683][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.288222][ T6046] wlan0: Trigger new scan to find an IBSS to join [ 513.559234][ T5735] usb 5-1: config 0 descriptor?? [ 513.638078][ T8011] input: syz0 as /devices/virtual/input/input5 [ 517.428624][ T5735] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 517.728729][ T5735] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 517.772246][ T5735] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 517.796220][ T5735] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 517.818910][ T5735] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 517.832175][ T5735] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 517.845012][ T5735] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 517.899977][ T5735] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 517.920114][ T5735] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 517.936105][ T8026] Bluetooth: MGMT ver 1.23 [ 517.941900][ T5735] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 517.973543][ T5735] sony 0003:054C:0268.0001: unbalanced collection at end of report description [ 518.024769][ T5735] sony 0003:054C:0268.0001: parse failed [ 518.050147][ T5735] sony 0003:054C:0268.0001: probe with driver sony failed with error -22 [ 518.150768][ T5735] usb 5-1: USB disconnect, device number 2 [ 518.377904][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.523'. [ 520.126250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 520.327673][ T1139] wlan0: Trigger new scan to find an IBSS to join [ 520.559154][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 521.893672][ T13] wlan0: Creating new IBSS network, BSSID 32:f1:6b:41:48:8c [ 523.254101][ T30] audit: type=1800 audit(1787319335.574:2): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.530" name="addr_adrfam" dev="configfs" ino=15525 res=0 errno=0 [ 523.412170][ T30] audit: type=1800 audit(1787319335.604:3): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.530" name="addr_traddr" dev="configfs" ino=15526 res=0 errno=0 [ 523.661714][ T30] audit: type=1800 audit(1787319335.614:4): pid=8063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.530" name="addr_trsvcid" dev="configfs" ino=15527 res=0 errno=0 [ 527.243908][ T8076] 9pnet_fd: p9_fd_create_unix (8076): problem connecting socket: ./file0: -5 [ 528.525998][ T3097] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 528.746147][ T3097] usb 4-1: Using ep0 maxpacket: 16 [ 528.864658][ T3097] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 529.050729][ T3097] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 529.175481][ T3097] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.234142][ T3097] usb 4-1: config 0 has no interface number 0 [ 529.277782][ T3097] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.298810][ T3097] usb 4-1: Product: syz [ 529.313826][ T3097] usb 4-1: Manufacturer: syz [ 529.319207][ T3097] usb 4-1: SerialNumber: syz [ 529.352214][ T3097] usb 4-1: config 0 descriptor?? [ 529.394091][ T3097] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 529.419414][ T3097] uvcvideo 4-1:0.105: No valid video chain found. [ 531.240625][ T5735] usb 4-1: USB disconnect, device number 2 [ 534.894581][ T8129] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 535.381098][ T8127] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 535.480221][ T8127] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 535.728996][ T8127] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 535.923002][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 537.086094][ T3097] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 537.281931][ T3097] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 537.344726][ T3097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.445812][ T8127] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 537.582218][ T8127] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 537.747637][ T3097] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 537.890397][ T8156] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 537.901398][ T3097] usb 1-1: USB disconnect, device number 2 [ 537.953319][ T8156] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 538.245386][ T8160] ubi0: attaching mtd0 [ 538.887921][ T8160] ubi0: scanning is finished [ 538.893228][ T8160] ubi0: empty MTD device detected [ 539.349037][ T8160] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 540.116249][ T186] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 540.266938][ T5759] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 540.437257][ T5759] usb 3-1: New USB device found, idVendor=046d, idProduct=c29b, bcdDevice= 0.00 [ 540.454968][ T5759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.470497][ T5759] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 540.501668][ T5759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.543330][ T5759] usb 3-1: config 0 descriptor?? [ 541.913686][ T5759] hid_parser_main: 4 callbacks suppressed [ 541.935727][ T5759] logitech 0003:046D:C29B.0002: unknown main item tag 0x0 [ 541.956319][ T5759] logitech 0003:046D:C29B.0002: unknown main item tag 0x0 [ 541.993935][ T5759] logitech 0003:046D:C29B.0002: unknown main item tag 0x0 [ 542.924084][ T5759] logitech 0003:046D:C29B.0002: unknown main item tag 0x0 [ 542.932513][ T5759] logitech 0003:046D:C29B.0002: unknown main item tag 0x0 [ 542.940022][ T5759] logitech 0003:046D:C29B.0002: unknown main item tag 0x0 [ 542.951332][ T5759] logitech 0003:046D:C29B.0002: unknown main item tag 0x0 [ 542.992507][ T5759] logitech 0003:046D:C29B.0002: unknown main item tag 0x0 [ 543.115732][ T5759] logitech 0003:046D:C29B.0002: unknown main item tag 0x0 [ 543.148120][ T5759] logitech 0003:046D:C29B.0002: unknown main item tag 0x0 [ 544.886571][ T5623] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 545.004299][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 545.202847][ T5623] usb 6-1: device descriptor read/64, error -32 [ 545.238151][ T5759] logitech 0003:046D:C29B.0002: hidraw0: USB HID v0.00 Device [HID 046d:c29b] on usb-dummy_hcd.2-1/input0 [ 545.254871][ T5759] logitech 0003:046D:C29B.0002: no inputs found [ 545.295048][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.570'. [ 545.332284][ T5759] usb 3-1: USB disconnect, device number 2 [ 546.261009][ T8229] fido_id[8229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 546.317011][ T5623] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 546.480658][ T8244] syz_tun: entered allmulticast mode [ 546.489560][ T5623] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 546.540985][ T5623] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 546.585674][ T5623] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 546.640155][ T8244] lo: entered allmulticast mode [ 546.652881][ T5623] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.691583][ T5623] usb 6-1: Product: syz [ 546.722228][ T5623] usb 6-1: Manufacturer: syz [ 546.805704][ T5623] usb 6-1: SerialNumber: syz [ 546.819270][ T8241] syz_tun: left allmulticast mode [ 546.935487][ T8241] lo: left allmulticast mode [ 546.961712][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 547.089316][ T5623] usb 6-1: Limiting number of CPorts to U8_MAX [ 547.160898][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.577'. [ 550.436744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 550.495986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 551.326043][ T5623] usb 6-1: USB disconnect, device number 3 [ 551.335441][ C0] usb 6-1: failed to resubmit arpc in-urb: -19 [ 551.341671][ C0] usb 6-1: failed to resubmit arpc in-urb: -19 [ 551.347887][ C0] usb 6-1: failed to resubmit in-urb: -19 [ 551.351248][ T8281] input: syz0 as /devices/virtual/input/input6 [ 551.353833][ C0] usb 6-1: failed to resubmit in-urb: -19 [ 551.365841][ C0] usb 6-1: failed to resubmit in-urb: -19 [ 551.371630][ C0] usb 6-1: failed to resubmit in-urb: -19 [ 551.410048][ T5623] usb 6-1: failed to send ARPC request 4: -19 [ 551.417418][ T5623] usb 6-1: failed to execute ARPC: -19 [ 551.424826][ T5623] usb 6-1: failed to flush cport 0: -19 [ 551.430944][ T5623] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 551.442618][ T5623] usb 6-1: failed to send ARPC request 2: -19 [ 551.464014][ T5623] usb 6-1: failed to execute ARPC: -19 [ 551.473330][ T5623] usb 6-1: failed to quiesce cport 0: -19 (0) [ 551.481635][ T5623] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 551.489800][ T5623] usb 6-1: failed to send ARPC request 3: -19 [ 551.696681][ T5623] usb 6-1: failed to execute ARPC: -19 [ 551.711192][ T5623] usb 6-1: failed to clear cport 0: -19 [ 551.719817][ T5623] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 552.604246][ T80] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 555.402838][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 556.495704][ T30] audit: type=1800 audit(1787319368.784:5): pid=8328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.598" name="file0" dev="overlay" ino=569 res=0 errno=0 [ 556.845721][ T30] audit: type=1800 audit(1787319369.164:6): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.603" name="file0" dev="overlay" ino=583 res=0 errno=0 [ 559.755719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 560.124269][ T8370] MTD: Couldn't look up './dev/mtdblock0': -2 [ 560.976096][ T8374] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 562.379334][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.389935][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.092585][ T8377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 563.181249][ T30] audit: type=1800 audit(1787319375.504:7): pid=8379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.616" name="file0" dev="overlay" ino=651 res=0 errno=0 [ 564.335309][ T8395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.622'. [ 564.881850][ T30] audit: type=1800 audit(1787319377.144:8): pid=8395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.622" name="file0" dev="overlay" ino=592 res=0 errno=0 [ 565.372928][ T8407] syz_tun: entered allmulticast mode [ 565.586854][ T8410] lo: entered allmulticast mode [ 565.940977][ T8405] syz_tun: left allmulticast mode [ 566.033501][ T8405] lo: left allmulticast mode [ 566.638074][ T8413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.698765][ T8422] netlink: 277 bytes leftover after parsing attributes in process `syz.4.630'. [ 566.747391][ T8413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.868803][ T8419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.879587][ T8453] syz_tun: entered allmulticast mode [ 570.922573][ T8453] lo: entered allmulticast mode [ 570.948526][ T8452] syz_tun: left allmulticast mode [ 570.965900][ T8452] lo: left allmulticast mode [ 572.410897][ T30] audit: type=1326 audit(1787319384.734:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.3.647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a39e0d9 code=0x7ffc0000 [ 572.487120][ T30] audit: type=1326 audit(1787319384.784:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.3.647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a39e0d9 code=0x7ffc0000 [ 573.287530][ T30] audit: type=1326 audit(1787319384.794:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.3.647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a39e0d9 code=0x7ffc0000 [ 573.472523][ T30] audit: type=1326 audit(1787319384.794:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.3.647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a39e0d9 code=0x7ffc0000 [ 573.575028][ T30] audit: type=1326 audit(1787319384.794:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.3.647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f096a39e0d9 code=0x7ffc0000 [ 573.661481][ T30] audit: type=1326 audit(1787319384.794:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.3.647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a39e0d9 code=0x7ffc0000 [ 573.908665][ T30] audit: type=1326 audit(1787319384.794:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.3.647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a39e0d9 code=0x7ffc0000 [ 573.966769][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.653'. [ 574.414707][ T30] audit: type=1326 audit(1787319384.804:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.3.647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a39e0d9 code=0x7ffc0000 [ 574.508496][ T30] audit: type=1326 audit(1787319384.804:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.3.647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f096a39e0d9 code=0x7ffc0000 [ 574.626409][ T30] audit: type=1326 audit(1787319384.804:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.3.647" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f096a39e0d9 code=0x7ffc0000 [ 575.656004][ T9] libceph: connect (1)[c::]:6789 error -101 [ 575.667169][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 575.687419][ T9] libceph: connect (1)[c::]:6789 error -101 [ 575.695972][ T8501] ceph: No mds server is up or the cluster is laggy [ 575.703964][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 575.937187][ T8504] ucma_write: process 433 (syz.4.658) changed security contexts after opening file descriptor, this is not allowed. [ 576.069569][ T8517] syz_tun: entered allmulticast mode [ 576.149600][ T8518] lo: entered allmulticast mode [ 576.186833][ T8516] syz_tun: left allmulticast mode [ 576.234239][ T8516] lo: left allmulticast mode [ 576.266936][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.664'. [ 576.359960][ T5934] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 576.446812][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 577.484805][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 577.490890][ T5934] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 577.506397][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 577.552710][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 577.589054][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.654808][ T9] usb 2-1: config 0 descriptor?? [ 577.702962][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 577.925922][ T8541] futex_wake_op: syz.0.670 tries to shift op by 144; fix this program [ 577.969024][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.001260][ T5934] usb 3-1: Product: syz [ 578.024863][ T5934] usb 3-1: Manufacturer: syz [ 578.045576][ T5934] usb 3-1: SerialNumber: syz [ 578.118031][ T5934] usb 3-1: config 0 descriptor?? [ 578.424384][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 579.012950][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 579.023301][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 579.030357][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 579.037471][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 579.044456][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 579.052137][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 579.065224][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 579.072936][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 579.080136][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 579.087158][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 579.094034][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 579.101791][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 579.109949][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 579.118139][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 579.125205][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 579.143091][ T9] pwc: Registered as video103. [ 579.162618][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 579.207720][ T9] usb 2-1: USB disconnect, device number 4 [ 579.855785][ T5934] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 580.084362][ T5934] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 580.178200][ T5934] usb 3-1: USB disconnect, device number 3 [ 580.584189][ T8553] capability: warning: `syz.1.675' uses 32-bit capabilities (legacy support in use) [ 581.641706][ T8560] netlink: 'syz.3.676': attribute type 4 has an invalid length. [ 581.729581][ T8560] netlink: 224 bytes leftover after parsing attributes in process `syz.3.676'. [ 581.831437][ T8564] syz_tun: entered allmulticast mode [ 581.913814][ T8564] lo: entered allmulticast mode [ 581.954152][ T8563] syz_tun: left allmulticast mode [ 581.982737][ T8563] lo: left allmulticast mode [ 583.508121][ T8581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 583.731912][ T8584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.684'. [ 584.738405][ T6047] nvmet: connect request for invalid subsystem testsubsys! [ 585.613694][ T8580] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 586.294994][ T8611] ip_tables: iptables: counters copy to user failed while replacing table [ 586.533180][ T8620] syz_tun: entered allmulticast mode [ 586.540518][ T8620] lo: entered allmulticast mode [ 586.546949][ T8619] syz_tun: left allmulticast mode [ 586.552393][ T8619] lo: left allmulticast mode [ 587.652496][ T8629] capability: warning: `syz.1.699' uses deprecated v2 capabilities in a way that may be insecure [ 590.037694][ T8649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.964359][ T8657] syz_tun: entered allmulticast mode [ 590.997762][ T8657] lo: entered allmulticast mode [ 591.024063][ T8656] syz_tun: left allmulticast mode [ 591.039129][ T8656] lo: left allmulticast mode [ 591.196071][ T5749] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 591.734904][ T5749] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 591.880162][ T5749] usb 3-1: config 0 has no interfaces? [ 591.918142][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.941175][ T5749] usb 3-1: Product: syz [ 591.952131][ T5749] usb 3-1: Manufacturer: syz [ 591.967292][ T5749] usb 3-1: SerialNumber: syz [ 592.004829][ T5749] usb 3-1: config 0 descriptor?? [ 592.252959][ T5749] usb 3-1: USB disconnect, device number 4 [ 593.335575][ T8694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.469439][ T8732] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 603.025941][ T5623] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 603.345360][ T8156] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 603.357215][ T5623] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 603.392728][ T5623] usb 3-1: config 0 has no interfaces? [ 606.441656][ T5623] usb 3-1: string descriptor 0 read error: -71 [ 606.466559][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.511401][ T5623] usb 3-1: config 0 descriptor?? [ 606.534739][ T5623] usb 3-1: can't set config #0, error -71 [ 606.572945][ T5623] usb 3-1: USB disconnect, device number 5 [ 608.427362][ T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 608.809619][ T8771] syz_tun: entered allmulticast mode [ 608.856939][ T8770] syz_tun: left allmulticast mode [ 610.014755][ T8777] netlink: 8 bytes leftover after parsing attributes in process `syz.5.727'. [ 610.099189][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.749'. [ 610.243033][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 610.243072][ T30] audit: type=1800 audit(2000000009.130:47): pid=8780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.727" name="file0" dev="overlay" ino=722 res=0 errno=0 [ 610.947382][ T8783] Cannot find add_set index 0 as target [ 613.009908][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x4255 instead [ 614.889564][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0x0001 instead [ 614.901931][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000018: 0xb00d instead [ 614.912824][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000003c: 0x2135 instead [ 614.923606][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000040: 0x4255 instead [ 614.934130][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000044: 0x0101 instead [ 614.944595][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000048: 0xff7f instead [ 614.955964][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000007c: 0xb365 instead [ 614.967030][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000128: 0x16f1 instead [ 614.977909][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000001d4: 0x16f1 instead [ 614.988400][ T8793] jffs2: Further such events for this erase block will not be printed [ 615.003010][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0x4255 instead [ 615.013461][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0x0001 instead [ 615.023933][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001018: 0xb00d instead [ 615.034347][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000103c: 0x2135 instead [ 615.044839][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001040: 0x4255 instead [ 615.056023][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001044: 0x0101 instead [ 615.066905][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001048: 0xff7f instead [ 615.077423][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000107c: 0xef7b instead [ 615.088060][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001128: 0x16f1 instead [ 615.098630][ T8793] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x000011d4: 0x16f1 instead [ 615.109374][ T8793] jffs2: Further such events for this erase block will not be printed [ 615.122078][ T8793] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 615.131511][ T8793] jffs2: empty_blocks 30, bad_blocks 0, c->nr_blocks 32 [ 616.524053][ T8800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 616.539886][ T8800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 616.550506][ T8800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 616.559085][ T8800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 616.568520][ T8800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 617.459922][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.140659][ T8800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 618.151371][ T8800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 618.164863][ T8800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 618.175009][ T8800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 618.230759][ T8800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 618.406784][ T8800] Bluetooth: hci2: command 0x0406 tx timeout [ 618.542060][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.651312][ T8800] Bluetooth: hci6: command tx timeout [ 619.662884][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.911386][ T8845] netlink: 224 bytes leftover after parsing attributes in process `syz.3.764'. [ 619.916280][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.934650][ T8845] netlink: 16 bytes leftover after parsing attributes in process `syz.3.764'. [ 621.724911][ T51] Bluetooth: hci6: command tx timeout [ 621.733876][ T51] Bluetooth: hci4: command tx timeout [ 621.832567][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.765'. [ 622.105798][ T8850] Cannot find add_set index 0 as target [ 622.545704][ T8186] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 622.726667][ T8186] usb 4-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 622.769593][ T8186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.797885][ T8186] usb 4-1: Product: syz [ 622.815158][ T8186] usb 4-1: Manufacturer: syz [ 622.825999][ T8186] usb 4-1: SerialNumber: syz [ 622.860857][ T8186] usb 4-1: config 0 descriptor?? [ 622.998592][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 623.213091][ T8863] Cannot find add_set index 0 as target [ 623.562617][ T8186] mos7840 4-1:0.0: required endpoints missing [ 623.745119][ T8186] usb 4-1: USB disconnect, device number 3 [ 623.768304][ T51] Bluetooth: hci6: command tx timeout [ 623.775206][ T5624] Bluetooth: hci4: command tx timeout [ 623.781319][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.787737][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.749288][ T49] bridge_slave_1: left allmulticast mode [ 624.765097][ T49] bridge_slave_1: left promiscuous mode [ 624.777671][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.911993][ T49] bridge_slave_0: left allmulticast mode [ 624.932277][ T49] bridge_slave_0: left promiscuous mode [ 624.962205][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.976740][ T5624] Bluetooth: hci2: ISO packet for unknown connection handle 2198 [ 625.845950][ T5624] Bluetooth: hci4: command tx timeout [ 625.860044][ T51] Bluetooth: hci6: command tx timeout [ 627.283399][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.349601][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.415023][ T49] bond0 (unregistering): Released all slaves [ 627.928561][ T5624] Bluetooth: hci4: command tx timeout [ 627.995192][ T5267] 8021q: adding VLAN 0 to HW filter on device eth1 [ 628.086612][ T8931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 628.327395][ T8932] Cannot find add_set index 0 as target [ 629.683086][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.782'. [ 629.819819][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.847690][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.865320][ T8801] bridge_slave_0: entered allmulticast mode [ 629.887328][ T8801] bridge_slave_0: entered promiscuous mode [ 630.025924][ T8949] Cannot find add_set index 0 as target [ 631.158769][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.200989][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.233572][ T8801] bridge_slave_1: entered allmulticast mode [ 631.265191][ T8801] bridge_slave_1: entered promiscuous mode [ 631.714571][ T8801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.769444][ T8801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.750438][ T49] hsr_slave_0: left promiscuous mode [ 633.197737][ T49] hsr_slave_1: left promiscuous mode [ 633.224221][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.264108][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.299220][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.326870][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.368904][ T49] veth1_macvtap: left promiscuous mode [ 633.388972][ T49] veth0_macvtap: left promiscuous mode [ 633.394668][ T49] veth1_vlan: left promiscuous mode [ 633.404719][ T49] veth0_vlan: left promiscuous mode [ 633.455927][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 633.657086][ T9004] Cannot find add_set index 0 as target [ 634.458176][ T49] team0 (unregistering): Port device team_slave_1 removed [ 634.480662][ T49] team0 (unregistering): Port device team_slave_0 removed [ 634.702247][ T5267] 8021q: adding VLAN 0 to HW filter on device eth2 [ 634.823992][ T8801] team0: Port device team_slave_0 added [ 634.860737][ T8801] team0: Port device team_slave_1 added [ 635.090564][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 635.109012][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.156200][ T8801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 635.170028][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 635.178067][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 635.206272][ T8801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 635.431079][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 635.513784][ T49] IPVS: stop unused estimator thread 0... [ 635.520479][ T8801] hsr_slave_0: entered promiscuous mode [ 635.637360][ T9029] Cannot find add_set index 0 as target [ 636.057936][ T8801] hsr_slave_1: entered promiscuous mode [ 636.184434][ T8801] debugfs: 'hsr0' already exists in 'hsr' [ 636.251389][ T8801] Cannot create hsr debugfs directory [ 638.786145][ T5748] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 638.986418][ T5748] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 638.997665][ T5748] usb 3-1: config 0 has no interfaces? [ 639.020456][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.032345][ T5748] usb 3-1: Product: syz [ 639.048105][ T5748] usb 3-1: Manufacturer: syz [ 639.054329][ T5748] usb 3-1: SerialNumber: syz [ 639.086137][ T5748] usb 3-1: config 0 descriptor?? [ 639.303364][ T8833] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.342984][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.354636][ T9064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.807'. [ 639.381139][ T8833] bridge_slave_0: entered allmulticast mode [ 639.413980][ T8833] bridge_slave_0: entered promiscuous mode [ 640.641286][ T9073] Cannot find add_set index 0 as target [ 640.873199][ T8833] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.874969][ T5748] usb 3-1: USB disconnect, device number 6 [ 640.885667][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.905876][ T8833] bridge_slave_1: entered allmulticast mode [ 640.935217][ T8833] bridge_slave_1: entered promiscuous mode [ 640.966587][ T5735] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 641.157925][ T5735] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 641.160081][ T8833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.186268][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.236684][ T8833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.447456][ T5735] cxacru 5-1:1.0: send of cm 0x90 failed (-71) [ 641.493606][ T9080] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 641.532684][ T9080] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 641.584543][ T5735] usb 5-1: USB disconnect, device number 3 [ 641.737007][ T8833] team0: Port device team_slave_0 added [ 641.748591][ T5267] 8021q: adding VLAN 0 to HW filter on device eth3 [ 641.884801][ T8833] team0: Port device team_slave_1 added [ 642.235753][ T5748] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 642.242338][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.259539][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.319825][ T8833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.373674][ T8833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.396382][ T8833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 642.406461][ T5748] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 642.440263][ T8833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.470535][ T5748] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.485745][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.512711][ T5748] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 642.522101][ T5748] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 642.529929][ T5748] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 642.543439][ T5748] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 642.553782][ T5748] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 642.587668][ T9098] syz_tun: entered allmulticast mode [ 642.602242][ T8801] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 642.622406][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 642.642861][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 642.749301][ T5748] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 642.751927][ T9095] lo: entered allmulticast mode [ 642.770354][ T5748] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 643.564265][ T9103] Cannot find add_set index 0 as target [ 643.610947][ T80] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 643.707495][ T5748] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 643.750511][ T9102] syz_tun: left allmulticast mode [ 643.763558][ T9102] lo: left allmulticast mode [ 643.819501][ T5748] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 643.852748][ T8801] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 643.882732][ T5934] usb 3-1: USB disconnect, device number 7 [ 643.933568][ T5934] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 644.021424][ T5934] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 644.071760][ T5934] keyspan 3-1:1.0: device disconnected [ 644.102323][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.321552][ T8833] hsr_slave_0: entered promiscuous mode [ 644.351423][ T8833] hsr_slave_1: entered promiscuous mode [ 644.381289][ T8833] debugfs: 'hsr0' already exists in 'hsr' [ 644.405608][ T8833] Cannot create hsr debugfs directory [ 644.417533][ T8801] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 644.453126][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.518167][ T8801] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 644.564241][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 644.856804][ T8801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 645.126358][ T9123] Cannot find add_set index 0 as target [ 648.906139][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 649.139410][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.257650][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.828'. [ 649.258643][ T24] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 649.308602][ T8833] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 649.319570][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.565220][ T24] cxacru 1-1:1.0: send of cm 0x90 failed (-71) [ 650.611307][ T8833] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 650.628220][ T24] usb 1-1: USB disconnect, device number 3 [ 650.992194][ T8801] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.055234][ T8833] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 651.114515][ T8833] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.171444][ T8833] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 651.257269][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.832'. [ 651.269090][ T8833] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.311556][ T8833] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 651.437123][ T9184] Cannot find add_set index 0 as target [ 651.665705][ T8833] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.767219][ T7425] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.774480][ T7425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.841020][ T5748] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 653.956620][ T5748] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 653.961504][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.973430][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.024663][ T5748] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.049933][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.084649][ T5748] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 654.093376][ T5748] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 654.121391][ T5748] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 654.144416][ T5748] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 654.154459][ T5748] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 654.214169][ T5267] 8021q: adding VLAN 0 to HW filter on device eth4 [ 654.222171][ T5748] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 654.291757][ T5748] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 654.340748][ T5748] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 654.384119][ T5748] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 654.444910][ T5748] usb 4-1: USB disconnect, device number 4 [ 654.532406][ T5748] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 654.623243][ T5748] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 654.662198][ T8833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.672242][ T5748] keyspan 4-1:1.0: device disconnected [ 654.760929][ T8833] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.817214][ T6047] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.824460][ T6047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.932243][ T6047] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.939481][ T6047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.030767][ T9216] syz_tun: entered allmulticast mode [ 655.123035][ T9216] lo: entered allmulticast mode [ 655.183321][ T9214] syz_tun: left allmulticast mode [ 655.210823][ T9214] lo: left allmulticast mode [ 657.035687][ T8186] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 657.209222][ T8186] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 657.247587][ T8186] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.475170][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.507996][ T8186] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 657.625177][ T8186] usb 4-1: USB disconnect, device number 5 [ 659.230578][ T8801] veth0_vlan: entered promiscuous mode [ 659.267460][ T8801] veth1_vlan: entered promiscuous mode [ 659.318584][ T8801] veth0_macvtap: entered promiscuous mode [ 659.331015][ T8801] veth1_macvtap: entered promiscuous mode [ 659.371048][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.402112][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.776502][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.933090][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.049508][ T6290] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.118524][ T6352] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.196102][ T6352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.247633][ T6352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.363091][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.387593][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.601372][ T8833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.286949][ T9298] syz_tun: entered allmulticast mode [ 663.307251][ T9298] lo: entered allmulticast mode [ 663.577961][ T9294] syz_tun: left allmulticast mode [ 663.585102][ T9294] lo: left allmulticast mode [ 666.658554][ T8833] veth0_vlan: entered promiscuous mode [ 666.742268][ T8833] veth1_vlan: entered promiscuous mode [ 666.934539][ T8833] veth0_macvtap: entered promiscuous mode [ 666.977105][ T8833] veth1_macvtap: entered promiscuous mode [ 667.119264][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.189847][ T8833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.266349][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.297284][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.729703][ T6352] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.018213][ T6046] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.439461][ T7609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.480833][ T7609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.633954][ T9365] syz_tun: entered allmulticast mode [ 669.915379][ T9372] lo: entered allmulticast mode [ 670.059700][ T9364] syz_tun: left allmulticast mode [ 670.064935][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 670.101853][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 670.129156][ T9364] lo: left allmulticast mode [ 671.913657][ T9397] netlink: 20 bytes leftover after parsing attributes in process `syz.6.881'. [ 674.056314][ T9427] syz_tun: entered allmulticast mode [ 674.430777][ T9429] lo: entered allmulticast mode [ 674.973724][ T9424] syz_tun: left allmulticast mode [ 675.012156][ T9424] lo: left allmulticast mode [ 676.030164][ T6290] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 676.638514][ T9460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.898'. [ 681.329378][ T9524] netlink: 67 bytes leftover after parsing attributes in process `syz.4.917'. [ 682.118293][ T5934] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 682.527290][ T5934] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 682.547069][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.328230][ T5934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.397858][ T5934] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 683.410775][ T5934] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 684.265716][ T5934] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 684.278730][ T5934] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 684.286780][ T5934] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 684.305777][ T5934] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 684.338195][ T5934] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 684.360547][ T5934] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 684.370585][ T5934] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 684.392177][ T5934] usb 3-1: USB disconnect, device number 8 [ 684.410368][ T5934] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 684.446452][ T5934] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 684.480740][ T5934] keyspan 3-1:1.0: device disconnected [ 685.209233][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.215679][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.989273][ T6046] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.971895][ T9654] netlink: 277 bytes leftover after parsing attributes in process `syz.2.966'. [ 693.247106][ T6046] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.186303][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 696.248998][ T6046] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.423876][ T6046] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.681314][ T9693] netlink: 277 bytes leftover after parsing attributes in process `syz.0.981'. [ 699.823700][ T6046] bridge_slave_1: left allmulticast mode [ 699.858237][ T6046] bridge_slave_1: left promiscuous mode [ 699.897112][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.457050][ T6046] bridge_slave_0: left allmulticast mode [ 700.590916][ T6046] bridge_slave_0: left promiscuous mode [ 700.703641][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.737714][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'. [ 702.046466][ T9721] netlink: 67 bytes leftover after parsing attributes in process `syz.7.989'. [ 702.663832][ T6046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.698641][ T6046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.749354][ T6046] bond0 (unregistering): Released all slaves [ 704.796856][ T33] IPVS: starting estimator thread 0... [ 704.847788][ T9756] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 704.925665][ T9757] IPVS: using max 22 ests per chain, 52800 per kthread [ 705.752933][ T9242] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 705.768074][ T9175] cxacru 1-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 705.934884][ T9761] netlink: 277 bytes leftover after parsing attributes in process `syz.4.999'. [ 706.103168][ T9080] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 706.491752][ T9770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1002'. [ 708.891167][ T6315] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 709.344864][ T9803] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1014'. [ 709.356430][ T9196] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 709.381825][ T6046] hsr_slave_0: left promiscuous mode [ 709.409693][ T6046] hsr_slave_1: left promiscuous mode [ 709.625392][ T9196] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 709.668414][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 709.813356][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.860857][ T9196] usb 3-1: config 0 has no interfaces? [ 710.140701][ T9196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.178112][ T9196] usb 3-1: Product: syz [ 710.202626][ T9196] usb 3-1: Manufacturer: syz [ 710.237342][ T9196] usb 3-1: SerialNumber: syz [ 710.271368][ T6046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 710.309303][ T9196] usb 3-1: config 0 descriptor?? [ 710.315633][ T9744] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 710.348332][ T6046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 710.419713][ T9813] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1016'. [ 710.458489][ T6046] veth1_macvtap: left promiscuous mode [ 710.472097][ T6046] veth0_macvtap: left promiscuous mode [ 710.492760][ T9744] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 710.503538][ T6046] veth1_vlan: left promiscuous mode [ 710.523019][ T6046] veth0_vlan: left promiscuous mode [ 710.553386][ T9744] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.579114][ T9744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.857825][ T9744] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 710.866048][ T9744] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 710.876094][ T9744] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 710.885266][ T9744] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 710.905468][ T9744] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 711.709919][ T9744] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 711.808709][ T9744] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 711.831212][ T9744] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 712.002607][ T9834] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1021'. [ 712.068467][ T9744] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 712.154556][ T9744] usb 5-1: USB disconnect, device number 4 [ 712.207195][ T9744] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 712.554118][ T9744] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 712.568601][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1024'. [ 712.590984][ T9744] keyspan 5-1:1.0: device disconnected [ 713.698666][ T9849] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 713.717900][ T9848] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 713.886736][ T6046] team0 (unregistering): Port device team_slave_1 removed [ 713.984317][ T6046] team0 (unregistering): Port device team_slave_0 removed [ 716.169789][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 716.924586][ T9847] syz_tun: entered allmulticast mode [ 717.004361][ T9851] lo: entered allmulticast mode [ 717.079581][ T5735] usb 3-1: USB disconnect, device number 9 [ 719.140525][ T6046] IPVS: stop unused estimator thread 0... [ 719.353754][ T9894] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 719.382145][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 722.659709][ T9744] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 722.886482][ T9744] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 722.920761][ T9744] usb 1-1: config 0 has no interfaces? [ 722.950306][ T9744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.967536][ T9744] usb 1-1: Product: syz [ 722.976313][ T9744] usb 1-1: Manufacturer: syz [ 722.997889][ T9744] usb 1-1: SerialNumber: syz [ 723.031058][ T9744] usb 1-1: config 0 descriptor?? [ 723.290482][ T8186] usb 1-1: USB disconnect, device number 4 [ 724.747773][ T9947] loop0: detected capacity change from 0 to 6 [ 724.760626][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 724.847992][ T9947] ldm_validate_privheads(): Disk read failed. [ 724.872900][ T9947] loop0: [ 724.883149][ T9947] loop0: partition table partially beyond EOD, truncated [ 724.896953][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1060'. [ 728.321533][T10003] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1049'. [ 728.819716][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1079'. [ 728.838072][ T30] audit: type=1804 audit(2000000007.830:48): pid=10012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1077" name="file1" dev="ramfs" ino=23049 res=1 errno=0 [ 729.145628][ T9744] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 729.152796][T10023] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 729.199338][ T6315] IPVS: starting estimator thread 0... [ 730.537228][T10025] IPVS: using max 21 ests per chain, 50400 per kthread [ 730.887058][ T9744] usb 3-1: Using ep0 maxpacket: 8 [ 730.910523][ T9744] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 730.970079][ T9744] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.019325][ T9744] usb 3-1: Product: syz [ 731.042020][ T9744] usb 3-1: Manufacturer: syz [ 731.055443][ T9744] usb 3-1: SerialNumber: syz [ 731.116997][ T9744] usb 3-1: config 0 descriptor?? [ 731.273851][ T30] audit: type=1800 audit(2000000010.270:49): pid=10012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1077" name="file1" dev="ramfs" ino=23049 res=0 errno=0 [ 731.355376][ T9744] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 731.893071][ T9744] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 732.277527][ T9744] usb 3-1: USB disconnect, device number 10 [ 732.410230][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 732.717458][T10058] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1089'. [ 734.426058][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 735.470187][T10100] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 737.121496][T10120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1103'. [ 738.334612][T10134] process 'syz.4.1105' launched './file0' with NULL argv: empty string added [ 739.249480][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1108'. [ 740.124872][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 740.474989][ T9196] libceph: connect (1)[c::]:6789 error -101 [ 740.509934][ T9196] libceph: mon0 (1)[c::]:6789 connect error [ 740.553210][T10157] ceph: No mds server is up or the cluster is laggy [ 741.574787][ T646] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 741.598732][ T9196] libceph: connect (1)[c::]:6789 error -101 [ 741.632603][T10170] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 741.664426][ T9196] libceph: mon0 (1)[c::]:6789 connect error [ 742.290435][T10183] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1118'. [ 744.137237][ T5624] Bluetooth: hci6: command 0x0406 tx timeout [ 744.147119][ T5624] Bluetooth: hci4: command 0x0406 tx timeout [ 745.138470][T10201] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1124'. [ 745.391483][T10204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1126'. [ 746.662558][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.674216][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.647867][ T1139] IPVS: starting estimator thread 0... [ 748.676062][T10240] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 748.757117][T10241] IPVS: using max 22 ests per chain, 52800 per kthread [ 753.553043][T10265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1138'. [ 753.620408][ T9744] libceph: connect (1)[c::]:6789 error -101 [ 753.636009][ T9744] libceph: mon0 (1)[c::]:6789 connect error [ 753.719437][T10264] ceph: No mds server is up or the cluster is laggy [ 754.117568][ T9744] libceph: connect (1)[c::]:6789 error -101 [ 754.139626][ T9744] libceph: mon0 (1)[c::]:6789 connect error [ 757.291655][T10318] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1150'. [ 758.192247][T10329] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1152'. [ 758.380282][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1154'. [ 761.440267][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1163'. [ 762.195710][ T9196] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 762.442643][ T9196] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 762.900904][ T9196] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.938930][ T9196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.031538][ T9196] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 763.061260][ T9196] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 763.100760][ T9196] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 763.162214][T10403] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1168'. [ 763.172359][ T9196] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 763.198090][ T9196] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 763.260449][ T9196] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 763.313531][ T9196] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 763.375694][ T9196] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 763.406481][T10405] ip_tables: iptables: counters copy to user failed while replacing table [ 763.422918][ T9196] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 763.436005][T10408] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1169'. [ 763.522088][ T9196] usb 5-1: USB disconnect, device number 5 [ 763.611051][ T9196] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 763.684444][T10413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1172'. [ 763.704349][ T9196] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 763.773677][ T9196] keyspan 5-1:1.0: device disconnected [ 767.906961][T10467] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1187'. [ 767.993069][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1188'. [ 768.144452][T10472] ip_tables: iptables: counters copy to user failed while replacing table [ 768.374980][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 768.600924][T10486] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1192'. [ 773.022683][T10514] ceph: No mds server is up or the cluster is laggy [ 773.057589][ T5623] libceph: connect (1)[c::]:6789 error -101 [ 773.101919][ T5623] libceph: mon0 (1)[c::]:6789 connect error [ 773.247827][T10531] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1205'. [ 774.108829][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1207'. [ 776.095606][ T7424] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 777.408225][T10562] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1215'. [ 779.594554][ T24] libceph: connect (1)[c::]:6789 error -101 [ 779.626025][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 779.670229][T10584] ceph: No mds server is up or the cluster is laggy [ 779.936224][ T8186] libceph: connect (1)[c::]:6789 error -101 [ 780.142555][ T8186] libceph: mon0 (1)[c::]:6789 connect error [ 780.955051][ T8186] libceph: connect (1)[c::]:6789 error -101 [ 781.032574][ T8186] libceph: mon0 (1)[c::]:6789 connect error [ 781.435855][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1227'. [ 783.740855][T10638] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1235'. [ 790.399127][T10660] ceph: No mds server is up or the cluster is laggy [ 790.406733][ T24] libceph: connect (1)[c::]:6789 error -101 [ 790.490036][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 795.167776][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1254'. [ 795.648253][ T8800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 795.660389][ T8800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 795.670181][ T8800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 795.678456][ T8800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 795.687982][ T8800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 798.141102][ T51] Bluetooth: hci0: command tx timeout [ 800.064444][ T5915] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.272994][ T8800] Bluetooth: hci0: command tx timeout [ 802.325721][ T8800] Bluetooth: hci0: command tx timeout [ 802.494791][ T5915] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.961384][ T5915] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.405658][ T8800] Bluetooth: hci0: command tx timeout [ 805.142796][ T5915] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.299440][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.309888][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.417089][T10775] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 809.747470][ T6049] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 810.412096][T10792] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1273'. [ 810.631969][ T5915] bridge_slave_1: left allmulticast mode [ 810.672017][ T5915] bridge_slave_1: left promiscuous mode [ 810.742710][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.842839][ T5915] bridge_slave_0: left allmulticast mode [ 810.874179][ T5915] bridge_slave_0: left promiscuous mode [ 810.913886][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.320505][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1277'. [ 811.676849][ T9196] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 811.714770][T10819] 9p: Bad value for 'wfdno' [ 811.794206][ T5915] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.865638][ T9196] usb 3-1: Using ep0 maxpacket: 8 [ 811.871378][ T5915] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.897295][ T9196] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 811.929666][ T5915] bond0 (unregistering): Released all slaves [ 811.939153][ T9196] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.950693][ T9196] usb 3-1: Product: syz [ 811.970815][ T9196] usb 3-1: Manufacturer: syz [ 811.993297][ T9196] usb 3-1: SerialNumber: syz [ 812.019582][ T9196] usb 3-1: config 0 descriptor?? [ 812.282469][ T9196] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 814.021572][ T9196] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 814.824488][ T8186] usb 3-1: USB disconnect, device number 11 [ 816.435374][T10858] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1287'. [ 816.516605][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 816.592446][T10705] bridge0: port 1(bridge_slave_0) entered blocking state [ 816.633875][T10705] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.656753][T10705] bridge_slave_0: entered allmulticast mode [ 816.692207][T10705] bridge_slave_0: entered promiscuous mode [ 816.759781][T10705] bridge0: port 2(bridge_slave_1) entered blocking state [ 816.785456][T10705] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.820297][T10705] bridge_slave_1: entered allmulticast mode [ 816.853872][T10705] bridge_slave_1: entered promiscuous mode [ 816.940957][ T5915] hsr_slave_0: left promiscuous mode [ 817.068935][ T5915] hsr_slave_1: left promiscuous mode [ 817.522528][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 817.594145][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.743307][ T5915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 817.767470][ T5915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.785776][ T5623] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 817.816487][ T5915] veth1_macvtap: left promiscuous mode [ 817.853032][ T5915] veth0_macvtap: left promiscuous mode [ 817.876058][ T5915] veth1_vlan: left promiscuous mode [ 817.891794][ T5915] veth0_vlan: left promiscuous mode [ 817.956396][ T5623] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 817.988038][ T5623] usb 1-1: config 0 has no interfaces? [ 818.015030][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.043531][ T5623] usb 1-1: Product: syz [ 818.055770][ T5623] usb 1-1: Manufacturer: syz [ 818.067879][ T5623] usb 1-1: SerialNumber: syz [ 818.104901][ T5623] usb 1-1: config 0 descriptor?? [ 818.615504][ T5915] team0 (unregistering): Port device team_slave_1 removed [ 818.617726][T10879] ip_tables: iptables: counters copy to user failed while replacing table [ 819.532272][ T5915] team0 (unregistering): Port device team_slave_0 removed [ 822.051782][ T5623] usb 1-1: USB disconnect, device number 5 [ 822.184296][T10705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.270712][T10705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.533648][T10705] team0: Port device team_slave_0 added [ 822.790623][T10705] team0: Port device team_slave_1 added [ 823.116683][T10705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 823.172710][T10705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.682804][T10705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.716777][T10705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 823.727709][T10705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 823.755423][T10705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.331221][T10705] hsr_slave_0: entered promiscuous mode [ 825.398653][T10705] hsr_slave_1: entered promiscuous mode [ 825.427183][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'. [ 825.458473][T10705] debugfs: 'hsr0' already exists in 'hsr' [ 826.647927][T10705] Cannot create hsr debugfs directory [ 827.643087][T10936] dummy0: entered promiscuous mode [ 827.648765][T10936] dummy0: entered allmulticast mode [ 828.486227][ T5623] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 828.679295][ T5623] usb 3-1: Using ep0 maxpacket: 8 [ 828.708751][ T5623] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 828.753598][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.781289][ T5623] usb 3-1: Product: syz [ 828.800965][ T5623] usb 3-1: Manufacturer: syz [ 828.809754][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 828.821921][ T5623] usb 3-1: SerialNumber: syz [ 828.854299][ T5623] usb 3-1: config 0 descriptor?? [ 829.957831][ T5623] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 830.364821][T10705] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 830.570132][T10705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 830.594734][T10705] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 830.626986][T10705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.649286][T10705] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 830.683557][T10705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.708874][T10705] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 830.773794][T10705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 830.796996][ T9196] libceph: connect (1)[c::]:6789 error -101 [ 830.815820][ T9196] libceph: mon0 (1)[c::]:6789 connect error [ 830.854384][T10960] ceph: No mds server is up or the cluster is laggy [ 831.284509][T10705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 831.405486][T10705] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.438237][ T6049] bridge0: port 1(bridge_slave_0) entered blocking state [ 831.445410][ T6049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 831.480253][ T646] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.487467][ T646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.509607][ T5623] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 834.181054][ T24] usb 3-1: USB disconnect, device number 12 [ 835.165670][ T5623] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 835.245715][T11017] netlink: 277 bytes leftover after parsing attributes in process `syz.7.1325'. [ 835.269160][ T9196] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 835.356471][ T5623] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 835.400546][ T5623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.446546][ T9196] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 835.501401][ T9196] usb 1-1: config 0 has no interfaces? [ 835.553951][ T9196] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.601803][ T9196] usb 1-1: Product: syz [ 835.641760][ T9196] usb 1-1: Manufacturer: syz [ 835.668839][ T9196] usb 1-1: SerialNumber: syz [ 835.691032][T11010] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 835.703433][ T9196] usb 1-1: config 0 descriptor?? [ 835.762320][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 836.533958][ T5735] usb 1-1: USB disconnect, device number 6 [ 837.579909][ T5623] cxacru 5-1:1.0: send of cm 0x90 failed (-104) [ 837.930040][T11038] cxacru 5-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 837.949827][T10705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.008363][ T5623] usb 5-1: USB disconnect, device number 6 [ 838.015845][T11038] cxacru 5-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 838.292547][ T5773] libceph: connect (1)[c::]:6789 error -101 [ 838.340635][ T5773] libceph: mon0 (1)[c::]:6789 connect error [ 838.353055][T11041] ceph: No mds server is up or the cluster is laggy [ 838.522794][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 838.886420][ T24] libceph: connect (1)[c::]:6789 error -101 [ 838.905868][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 842.695428][ T6049] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 842.719338][T10705] veth0_vlan: entered promiscuous mode [ 842.865798][T10705] veth1_vlan: entered promiscuous mode [ 844.063385][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 844.177480][ T8186] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 844.186605][ T5773] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 844.268477][T10705] veth0_macvtap: entered promiscuous mode [ 844.304612][T10705] veth1_macvtap: entered promiscuous mode [ 846.079161][ T8186] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 846.168933][ T5773] usb 8-1: device descriptor read/all, error -71 [ 846.243932][T10705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 846.340682][T10705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 846.348459][ T8186] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 846.382182][ T8186] usb 4-1: can't read configurations, error -71 [ 846.438034][ T33] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.486349][ T33] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.539344][ T5915] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.623775][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1348'. [ 846.908756][ T5808] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.721140][ T6049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 847.770975][ T6049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 848.024254][ T6049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.071396][ T6049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 850.705899][ T5748] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 850.963559][ T5748] usb 8-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 851.257363][ T5748] usb 8-1: config 0 has no interfaces? [ 851.433399][ T5748] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.628003][ T5748] usb 8-1: Product: syz [ 851.690632][ T5748] usb 8-1: Manufacturer: syz [ 851.735367][ T5748] usb 8-1: SerialNumber: syz [ 851.802059][ T5748] usb 8-1: config 0 descriptor?? [ 853.535713][ T5735] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 853.888364][ T5748] usb 8-1: USB disconnect, device number 4 [ 855.353240][T11172] syz_tun: entered allmulticast mode [ 855.482157][T11171] syz_tun: left allmulticast mode [ 855.535901][T11176] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1365'. [ 855.853388][T11177] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1364'. [ 856.703559][T11182] ip_tables: iptables: counters copy to user failed while replacing table [ 856.885855][T11187] netlink: 'syz.0.1369': attribute type 4 has an invalid length. [ 856.927518][T11187] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1369'. [ 862.279017][T11234] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1381'. [ 862.679734][T11240] ip_tables: iptables: counters copy to user failed while replacing table [ 862.680566][T11241] netlink: 'syz.7.1385': attribute type 4 has an invalid length. [ 863.586823][T11241] netlink: 240 bytes leftover after parsing attributes in process `syz.7.1385'. [ 867.775633][ T5773] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 869.528436][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.534841][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.985628][ T9744] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 872.419141][ T9744] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 872.450872][ T9744] usb 4-1: config 0 has no interfaces? [ 872.470926][ T9744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.490653][ T9744] usb 4-1: Product: syz [ 872.514635][ T9744] usb 4-1: Manufacturer: syz [ 872.570952][T11313] netlink: 'syz.4.1402': attribute type 4 has an invalid length. [ 872.605693][ T9744] usb 4-1: SerialNumber: syz [ 872.731088][T11313] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1402'. [ 873.138564][ T9744] usb 4-1: config 0 descriptor?? [ 873.375745][ T9744] usb 4-1: can't set config #0, error -71 [ 873.420383][ T9744] usb 4-1: USB disconnect, device number 9 [ 876.605094][ T5915] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 880.395685][ T24] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 880.580239][ T24] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 880.624552][ T24] usb 9-1: config 0 has no interfaces? [ 880.662793][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.690925][ T24] usb 9-1: Product: syz [ 880.705447][ T24] usb 9-1: Manufacturer: syz [ 880.735904][ T24] usb 9-1: SerialNumber: syz [ 880.761553][ T24] usb 9-1: config 0 descriptor?? [ 880.848091][T11386] ip_tables: iptables: counters copy to user failed while replacing table [ 881.052138][ T8186] usb 9-1: USB disconnect, device number 3 [ 885.489682][T11423] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1408'. [ 886.716133][ T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 887.699618][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1435'. [ 887.726673][ T24] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 887.829509][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.939543][T11442] Cannot find add_set index 0 as target [ 888.609095][ T24] cxacru 4-1:1.0: send of cm 0x90 failed (-71) [ 889.058764][ T5748] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 889.613864][ T24] usb 4-1: USB disconnect, device number 10 [ 889.658403][ T5748] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 889.966687][ T5748] usb 1-1: config 0 has no interfaces? [ 890.319246][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.340259][ T5748] usb 1-1: Product: syz [ 890.354930][ T5748] usb 1-1: Manufacturer: syz [ 890.360188][ T5748] usb 1-1: SerialNumber: syz [ 890.388518][ T5748] usb 1-1: config 0 descriptor?? [ 890.627021][ T5735] usb 1-1: USB disconnect, device number 7 [ 891.539089][T11479] netlink: 67 bytes leftover after parsing attributes in process `syz.8.1446'. [ 897.971612][T11506] syz_tun: entered allmulticast mode [ 898.007303][T11506] lo: entered allmulticast mode [ 898.020388][T11505] syz_tun: left allmulticast mode [ 898.044752][T11505] lo: left allmulticast mode [ 898.155704][ T8186] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 898.344256][ T8186] usb 9-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 898.428761][ T8186] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.087379][ T8186] usb 9-1: can't set config #1, error -71 [ 899.104772][ T8186] usb 9-1: USB disconnect, device number 4 [ 899.348623][T11521] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1461'. [ 900.328107][T11038] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 900.435735][T11459] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 900.858064][T11533] netlink: 67 bytes leftover after parsing attributes in process `syz.8.1464'. [ 901.868736][T11541] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1465'. [ 902.259667][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 902.426235][ T24] usb 3-1: device descriptor read/64, error -71 [ 902.773887][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 902.804914][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1452'. [ 903.621718][ T24] usb 3-1: device descriptor read/64, error -71 [ 903.757571][ T24] usb usb3-port1: attempt power cycle [ 903.847934][T11557] Cannot find add_set index 0 as target [ 904.175755][ T24] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 905.603877][ T24] usb 3-1: device descriptor read/8, error -71 [ 905.894088][T11579] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1479'. [ 906.239158][ T5773] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 907.720826][ T5773] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 907.770874][ T5773] usb 5-1: config 0 has no interfaces? [ 907.815406][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.858279][ T5773] usb 5-1: Product: syz [ 907.884633][ T5773] usb 5-1: Manufacturer: syz [ 907.920802][ T5773] usb 5-1: SerialNumber: syz [ 907.946515][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1482'. [ 907.964812][ T5773] usb 5-1: config 0 descriptor?? [ 908.135733][T11596] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1483'. [ 908.753961][ T5773] usb 5-1: USB disconnect, device number 7 [ 909.849287][ T7609] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 909.980834][T11602] netlink: 'syz.8.1486': attribute type 4 has an invalid length. [ 910.044957][T11604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 910.092874][T11602] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1486'. [ 911.405658][ T5773] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 911.464727][T11612] Cannot find add_set index 0 as target [ 911.985665][ T5773] usb 5-1: device descriptor read/64, error -71 [ 912.225798][ T5773] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 912.504595][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1497'. [ 912.517496][ T5773] usb 5-1: device descriptor read/64, error -71 [ 913.313496][ T5773] usb usb5-port1: attempt power cycle [ 914.827635][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1500'. [ 915.066337][ T5773] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 915.180095][T11655] netlink: 277 bytes leftover after parsing attributes in process `syz.8.1504'. [ 915.315997][ T5773] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 915.549263][ T5773] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 915.561875][ T5773] usb 5-1: config 0 has no interfaces? [ 915.572934][ T5773] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.588953][ T5773] usb 5-1: Product: syz [ 915.607240][ T5773] usb 5-1: Manufacturer: syz [ 915.638351][ T5773] usb 5-1: SerialNumber: syz [ 915.679641][ T5773] usb 5-1: config 0 descriptor?? [ 915.722673][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1507'. [ 916.245572][T11663] Cannot find add_set index 0 as target [ 916.635379][ T24] usb 5-1: USB disconnect, device number 11 [ 916.761139][T11672] netlink: 'syz.0.1509': attribute type 4 has an invalid length. [ 916.800579][T11672] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1509'. [ 916.916543][T11678] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1511'. [ 919.135769][ T9196] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 919.445638][ T9196] usb 3-1: device descriptor read/64, error -71 [ 920.525862][ T9196] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 920.853625][ T9196] usb 3-1: device descriptor read/64, error -71 [ 921.012900][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1519'. [ 921.043990][ T9196] usb usb3-port1: attempt power cycle [ 922.977102][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 922.990228][ T9196] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 922.990515][T11709] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1521'. [ 923.065779][ T9196] usb 3-1: device descriptor read/8, error -71 [ 923.323658][T11714] ip_tables: iptables: counters copy to user failed while replacing table [ 924.082044][T11732] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1531'. [ 924.105133][ T5735] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 924.648193][ T5735] usb 9-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 924.675189][ T5735] usb 9-1: config 0 has no interfaces? [ 924.720392][ T5735] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.758628][ T5735] usb 9-1: Product: syz [ 924.774704][ T5735] usb 9-1: Manufacturer: syz [ 924.829384][ T5735] usb 9-1: SerialNumber: syz [ 925.184009][ T5735] usb 9-1: config 0 descriptor?? [ 925.522926][ T5735] usb 9-1: USB disconnect, device number 5 [ 925.616551][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1535'. [ 930.035630][ T9196] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 930.981557][ T9196] usb 3-1: device descriptor read/64, error -71 [ 930.983748][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.994293][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.075634][T11760] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1541'. [ 931.245687][ T9196] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 931.359293][T11767] ip_tables: iptables: counters copy to user failed while replacing table [ 931.691518][T11773] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1548'. [ 933.571014][T11790] netlink: 'syz.3.1553': attribute type 4 has an invalid length. [ 933.578994][T11790] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1553'. [ 936.041043][T11802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 937.032006][T11804] Cannot find add_set index 0 as target [ 938.110014][T11821] ip_tables: iptables: counters copy to user failed while replacing table [ 938.315843][ T5934] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 938.950277][T11833] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1566'. [ 939.033711][ T5934] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 939.400632][ T5934] usb 9-1: no configurations [ 939.405687][ T5934] usb 9-1: can't read configurations, error -22 [ 939.768349][ T5934] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 940.602035][ T5934] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 940.992066][ T5934] usb 9-1: no configurations [ 941.027208][ T5934] usb 9-1: can't read configurations, error -22 [ 941.070909][ T5934] usb usb9-port1: attempt power cycle [ 942.566906][ T7425] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 943.200279][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1574'. [ 944.402235][T11861] Cannot find add_set index 0 as target [ 946.108750][T11874] netlink: 'syz.3.1576': attribute type 4 has an invalid length. [ 946.230250][T11874] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1576'. [ 946.647677][T11881] ip_tables: iptables: counters copy to user failed while replacing table [ 948.399903][T11898] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1585'. [ 948.738536][ T24] libceph: connect (1)[c::]:6789 error -101 [ 948.766471][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 948.799598][T11893] ceph: No mds server is up or the cluster is laggy [ 948.908159][T11908] netlink: 67 bytes leftover after parsing attributes in process `syz.7.1586'. [ 949.497970][ T8186] libceph: connect (1)[c::]:6789 error -101 [ 950.471649][ T8186] libceph: mon0 (1)[c::]:6789 connect error [ 950.558666][T11912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1588'. [ 951.059509][ T8186] libceph: connect (1)[c::]:6789 error -101 [ 951.192161][ T8186] libceph: mon0 (1)[c::]:6789 connect error [ 952.080664][T11919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1592'. [ 952.842638][T11919] Cannot find add_set index 0 as target [ 956.751544][T11951] ip_tables: iptables: counters copy to user failed while replacing table [ 958.623744][T11967] netlink: 67 bytes leftover after parsing attributes in process `syz.8.1604'. [ 959.182980][ T5735] libceph: connect (1)[c::]:6789 error -101 [ 959.195465][ T5735] libceph: mon0 (1)[c::]:6789 connect error [ 959.241639][T11966] ceph: No mds server is up or the cluster is laggy [ 959.353785][T11974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 959.503777][ T5735] libceph: connect (1)[c::]:6789 error -101 [ 959.557872][ T5735] libceph: mon0 (1)[c::]:6789 connect error [ 960.161941][ T5748] libceph: connect (1)[c::]:6789 error -101 [ 960.232189][T11976] IPVS: lc: SCTP 172.20.20.187:0 - no destination available [ 960.255263][ T5748] libceph: mon0 (1)[c::]:6789 connect error [ 960.393467][T11979] netlink: 67 bytes leftover after parsing attributes in process `syz.2.1607'. [ 961.699147][T11996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 963.399055][T11993] Cannot find add_set index 0 as target [ 964.998692][T12014] ip_tables: iptables: counters copy to user failed while replacing table [ 966.882469][T12030] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1625'. [ 969.319342][ T9196] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 969.509965][ T9196] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 969.543632][ T9196] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.671187][ T9196] usb 1-1: config 0 has no interfaces? [ 969.713886][ T9196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.197302][T12039] ceph: No mds server is up or the cluster is laggy [ 970.205173][ T5735] libceph: connect (1)[c::]:6789 error -101 [ 970.214998][ T5735] libceph: mon0 (1)[c::]:6789 connect error [ 970.224126][ T9196] usb 1-1: config 0 descriptor?? [ 970.460471][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 970.491424][ T9196] usb 1-1: USB disconnect, device number 8 [ 970.666440][T12056] Cannot find add_set index 0 as target [ 972.026528][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 972.049929][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 972.062996][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 972.076540][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 972.092005][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 973.864334][T12069] loop0: detected capacity change from 0 to 2049 [ 974.222028][T12073] loop0: [ 974.365993][ T8800] Bluetooth: hci6: command tx timeout [ 976.405965][ T8800] Bluetooth: hci6: command tx timeout [ 976.440795][ T5789] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 977.041816][T11941] syz_tun (unregistering): left allmulticast mode [ 978.485842][ T8800] Bluetooth: hci6: command tx timeout [ 980.566044][ T8800] Bluetooth: hci6: command tx timeout [ 980.630435][ T6050] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.745297][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1647'. [ 980.794514][ T9744] libceph: connect (1)[c::]:6789 error -101 [ 980.825644][ T9744] libceph: mon0 (1)[c::]:6789 connect error [ 980.832646][T12114] ceph: No mds server is up or the cluster is laggy [ 980.911184][ T6050] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.973217][T12120] Cannot find add_set index 0 as target [ 982.991063][ T6050] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.810441][T12135] ip_tables: iptables: counters copy to user failed while replacing table [ 986.615207][ T6050] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 989.767686][T12058] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.885223][T12058] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.003785][T12058] bridge_slave_0: entered allmulticast mode [ 990.243255][T12058] bridge_slave_0: entered promiscuous mode [ 990.662615][T12058] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.773841][T12058] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.859267][T12058] bridge_slave_1: entered allmulticast mode [ 990.916165][T12058] bridge_slave_1: entered promiscuous mode [ 991.052389][ T8186] libceph: connect (1)[c::]:6789 error -101 [ 991.093864][ T8186] libceph: mon0 (1)[c::]:6789 connect error [ 991.156622][T12171] ceph: No mds server is up or the cluster is laggy [ 991.303576][T12058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.376461][ T24] libceph: connect (1)[c::]:6789 error -101 [ 991.393956][T12058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.404641][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 992.470014][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.476601][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.149999][T12058] team0: Port device team_slave_0 added [ 993.191045][T12058] team0: Port device team_slave_1 added [ 995.544234][ T6050] bridge_slave_1: left allmulticast mode [ 996.072985][ T6050] bridge_slave_1: left promiscuous mode [ 996.178468][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 997.648530][ T6050] bridge_slave_0: left allmulticast mode [ 997.693816][ T6050] bridge_slave_0: left promiscuous mode [ 997.735064][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 997.878622][ T6050] lo: left allmulticast mode [ 999.361891][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 999.573873][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 999.593053][ T6050] bond0 (unregistering): Released all slaves [ 1000.611370][T12058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.648180][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.711718][T12058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.754891][T12058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.776893][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.847589][T12058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.892477][ T6050] rxrpc: Leaked peer 141 {1} [0000:0000:0000:0000:0000:0000:0000:0001]:7003 [ 1000.954701][ T6050] ================================================================== [ 1000.962795][ T6050] BUG: KASAN: slab-use-after-free in rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 1000.971319][ T6050] Read of size 8 at addr ffff88805377e020 by task kworker/u8:16/6050 [ 1000.979393][ T6050] [ 1000.981711][ T6050] CPU: 1 UID: 0 PID: 6050 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 1000.981745][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1000.981765][ T6050] Workqueue: netns cleanup_net [ 1000.981897][ T6050] Call Trace: [ 1000.981910][ T6050] [ 1000.981933][ T6050] dump_stack_lvl+0x100/0x190 [ 1000.981994][ T6050] print_report+0x13d/0x4b0 [ 1000.982047][ T6050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.982081][ T6050] ? __virt_addr_valid+0x239/0x430 [ 1000.982136][ T6050] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 1000.982171][ T6050] kasan_report+0xdf/0x1c0 [ 1000.982264][ T6050] ? rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 1000.982307][ T6050] rxrpc_destroy_all_peers+0x1ce/0x1d0 [ 1000.982346][ T6050] rxrpc_exit_net+0x83/0xc0 [ 1000.982372][ T6050] ? __pfx_rxrpc_exit_net+0x10/0x10 [ 1000.982398][ T6050] ops_undo_list+0x2ee/0xab0 [ 1000.982436][ T6050] ? __pfx_ops_undo_list+0x10/0x10 [ 1000.982467][ T6050] ? cleanup_net+0x332/0x920 [ 1000.982502][ T6050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.982536][ T6050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.982569][ T6050] ? idr_destroy+0x62/0x2e0 [ 1000.982648][ T6050] cleanup_net+0x499/0x920 [ 1000.982684][ T6050] ? __pfx_cleanup_net+0x10/0x10 [ 1000.982745][ T6050] ? process_one_work+0x906/0x1b10 [ 1000.982783][ T6050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.982820][ T6050] process_one_work+0xac7/0x1b10 [ 1000.982863][ T6050] ? __pfx_process_one_work+0x10/0x10 [ 1000.982898][ T6050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.982954][ T6050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.983005][ T6050] worker_thread+0x5ef/0xe50 [ 1000.983047][ T6050] ? __pfx_worker_thread+0x10/0x10 [ 1000.983082][ T6050] ? kthread+0x13a/0x450 [ 1000.983110][ T6050] ? __pfx_worker_thread+0x10/0x10 [ 1000.983143][ T6050] kthread+0x373/0x450 [ 1000.983172][ T6050] ? __pfx_kthread+0x10/0x10 [ 1000.983203][ T6050] ret_from_fork+0x730/0xd60 [ 1000.983256][ T6050] ? __pfx_ret_from_fork+0x10/0x10 [ 1000.983298][ T6050] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1000.983332][ T6050] ? __switch_to+0x800/0x10f0 [ 1000.983368][ T6050] ? __switch_to_asm+0x39/0x70 [ 1000.983418][ T6050] ? __pfx_kthread+0x10/0x10 [ 1000.983451][ T6050] ret_from_fork_asm+0x1a/0x30 [ 1000.983504][ T6050] [ 1000.983514][ T6050] [ 1001.202406][ T6050] Allocated by task 10937: [ 1001.206805][ T6050] kasan_save_stack+0x30/0x50 [ 1001.211484][ T6050] kasan_save_track+0x14/0x30 [ 1001.216156][ T6050] __kasan_kmalloc+0xaa/0xb0 [ 1001.220760][ T6050] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1001.226234][ T6050] rxrpc_alloc_peer+0xa7/0x400 [ 1001.230995][ T6050] rxrpc_lookup_peer+0x168/0x680 [ 1001.235933][ T6050] rxrpc_kernel_lookup_peer+0xa8/0xe0 [ 1001.241364][ T6050] afs_merge_fs_addr6+0x186/0x460 [ 1001.246438][ T6050] afs_parse_text_addrs+0x3f2/0xa10 [ 1001.251632][ T6050] afs_lookup_cell+0xbb6/0x1940 [ 1001.256487][ T6050] afs_proc_cells_write+0x2a3/0x3a0 [ 1001.261767][ T6050] proc_simple_write+0x10e/0x1a0 [ 1001.266749][ T6050] proc_reg_write+0x240/0x330 [ 1001.271462][ T6050] vfs_write+0x2aa/0x1050 [ 1001.275815][ T6050] ksys_write+0x12a/0x250 [ 1001.280136][ T6050] do_syscall_64+0x123/0x790 [ 1001.284794][ T6050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.290682][ T6050] [ 1001.292990][ T6050] Freed by task 0: [ 1001.296689][ T6050] kasan_save_stack+0x30/0x50 [ 1001.301365][ T6050] kasan_save_track+0x14/0x30 [ 1001.306038][ T6050] kasan_save_free_info+0x3b/0x70 [ 1001.311071][ T6050] __kasan_slab_free+0x5f/0x80 [ 1001.315832][ T6050] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 1001.321296][ T6050] rcu_free_sheaf+0x1a/0xe0 [ 1001.325791][ T6050] rcu_core+0x5a2/0x10e0 [ 1001.330073][ T6050] handle_softirqs+0x1e6/0x9d0 [ 1001.334839][ T6050] __irq_exit_rcu+0x194/0x210 [ 1001.339520][ T6050] irq_exit_rcu+0x9/0x30 [ 1001.343768][ T6050] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1001.349462][ T6050] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1001.355531][ T6050] [ 1001.357853][ T6050] The buggy address belongs to the object at ffff88805377e000 [ 1001.357853][ T6050] which belongs to the cache kmalloc-512 of size 512 [ 1001.371911][ T6050] The buggy address is located 32 bytes inside of [ 1001.371911][ T6050] freed 512-byte region [ffff88805377e000, ffff88805377e200) [ 1001.385628][ T6050] [ 1001.387961][ T6050] The buggy address belongs to the physical page: [ 1001.394350][ T6050] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5377c [ 1001.403101][ T6050] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1001.411612][ T6050] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1001.419174][ T6050] page_type: f5(slab) [ 1001.423172][ T6050] raw: 00fff00000000040 ffff88801c028c80 dead000000000100 dead000000000122 [ 1001.431750][ T6050] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1001.440329][ T6050] head: 00fff00000000040 ffff88801c028c80 dead000000000100 dead000000000122 [ 1001.449013][ T6050] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1001.457678][ T6050] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1001.466341][ T6050] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1001.474994][ T6050] page dumped because: kasan: bad access detected [ 1001.481391][ T6050] page_owner tracks the page as allocated [ 1001.487087][ T6050] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 646, tgid 646 (kworker/u8:6), ts 110829063640 [ 1001.506645][ T6050] post_alloc_hook+0xfd/0x120 [ 1001.511442][ T6050] get_page_from_freelist+0x110d/0x35b0 [ 1001.517003][ T6050] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1001.522908][ T6050] new_slab+0xa5/0x640 [ 1001.527003][ T6050] refill_objects+0xe3/0x410 [ 1001.531606][ T6050] __pcs_replace_empty_main+0x372/0x680 [ 1001.537161][ T6050] __kmalloc_noprof+0x66b/0x820 [ 1001.542010][ T6050] fib6_info_alloc+0x40/0x160 [ 1001.546817][ T6050] ip6_route_info_create+0x14c/0xad0 [ 1001.552145][ T6050] ip6_route_add+0x4b/0x1d0 [ 1001.556642][ T6050] addrconf_add_mroute+0x1de/0x350 [ 1001.561809][ T6050] addrconf_add_dev+0x14e/0x1a0 [ 1001.566665][ T6050] addrconf_init_auto_addrs+0x10e/0x780 [ 1001.572246][ T6050] addrconf_notify+0xa10/0x1ba0 [ 1001.577119][ T6050] notifier_call_chain+0x99/0x3f0 [ 1001.582141][ T6050] call_netdevice_notifiers_info+0xbe/0x110 [ 1001.588142][ T6050] page last free pid 1 tgid 1 ts 27941168360 stack trace: [ 1001.595258][ T6050] free_pages_prepare+0x586/0xe00 [ 1001.600311][ T6050] __free_contig_range_common+0x14f/0x250 [ 1001.606058][ T6050] destroy_args+0xa8/0x7a0 [ 1001.610590][ T6050] debug_vm_pgtable+0x1d69/0x3490 [ 1001.615634][ T6050] do_one_initcall+0x11c/0x6f0 [ 1001.620408][ T6050] kernel_init_freeable+0x6ea/0x7b0 [ 1001.625690][ T6050] kernel_init+0x21/0x1e0 [ 1001.630025][ T6050] ret_from_fork+0x730/0xd60 [ 1001.634632][ T6050] ret_from_fork_asm+0x1a/0x30 [ 1001.639406][ T6050] [ 1001.641710][ T6050] Memory state around the buggy address: [ 1001.647322][ T6050] ffff88805377df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc [ 1001.655370][ T6050] ffff88805377df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1001.663452][ T6050] >ffff88805377e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1001.671507][ T6050] ^ [ 1001.676603][ T6050] ffff88805377e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1001.684654][ T6050] ffff88805377e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1001.692718][ T6050] ================================================================== [ 1001.984173][T12058] hsr_slave_0: entered promiscuous mode [ 1001.990714][T12058] hsr_slave_1: entered promiscuous mode [ 1001.997053][T12058] debugfs: 'hsr0' already exists in 'hsr' [ 1002.002773][T12058] Cannot create hsr debugfs directory fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1002.404986][ T6050] Disabling lock debugging due to kernel taint [ 1003.370276][ T6050] hsr_slave_0: left promiscuous mode [ 1003.405614][ T6050] hsr_slave_1: left promiscuous mode [ 1003.431823][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.471533][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.496088][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.503870][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.540917][ T6050] veth1_macvtap: left promiscuous mode [ 1003.546517][ T6050] veth0_macvtap: left promiscuous mode [ 1003.559104][ T6050] veth1_vlan: left promiscuous mode [ 1003.577359][ T6050] veth0_vlan: left promiscuous mode [ 1003.716432][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 1003.731251][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 1003.798747][ T5267] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1004.091857][ T6050] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.154709][ T6050] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.222217][ T6050] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.267944][ T5267] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1004.283386][ T6050] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.406674][ T6050] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.466397][ T6050] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.523977][ T6050] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.589582][ T6050] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.678775][ T6050] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.694042][ T5267] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1004.732643][ T6050] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.771956][ T6050] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.821811][ T6050] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.910938][ T6050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.951537][ T6050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.042301][ T6050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.083058][ T5267] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1005.094899][ T6050] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.204701][ T6050] bridge_slave_1: left allmulticast mode [ 1005.213554][ T6050] bridge_slave_1: left promiscuous mode [ 1005.219441][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.229073][ T6050] bridge_slave_0: left allmulticast mode [ 1005.234759][ T6050] bridge_slave_0: left promiscuous mode [ 1005.241612][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.256865][ T6050] bridge_slave_1: left allmulticast mode [ 1005.262565][ T6050] bridge_slave_1: left promiscuous mode [ 1005.269002][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.277711][ T6050] bridge_slave_0: left allmulticast mode [ 1005.283378][ T6050] bridge_slave_0: left promiscuous mode [ 1005.294761][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.308141][ T6050] bridge_slave_1: left allmulticast mode [ 1005.313819][ T6050] bridge_slave_1: left promiscuous mode [ 1005.319867][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.329305][ T6050] bridge_slave_0: left allmulticast mode [ 1005.334984][ T6050] bridge_slave_0: left promiscuous mode [ 1005.342896][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.357222][ T6050] bridge_slave_1: left allmulticast mode [ 1005.362884][ T6050] bridge_slave_1: left promiscuous mode [ 1005.370775][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.379811][ T6050] bridge_slave_0: left allmulticast mode [ 1005.390930][ T6050] bridge_slave_0: left promiscuous mode [ 1005.397410][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.412363][ T6050] bridge_slave_1: left allmulticast mode [ 1005.418756][ T6050] bridge_slave_1: left promiscuous mode [ 1005.424469][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.433317][ T6050] bridge_slave_0: left allmulticast mode [ 1005.444952][ T6050] bridge_slave_0: left promiscuous mode [ 1005.452936][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.631368][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.643577][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.653539][ T6050] bond0 (unregistering): Released all slaves [ 1005.684916][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.697582][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.707864][ T6050] bond0 (unregistering): Released all slaves [ 1005.749607][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.759659][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.769900][ T6050] bond0 (unregistering): Released all slaves [ 1005.821058][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.831182][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.841518][ T6050] bond0 (unregistering): Released all slaves [ 1005.882653][ T6050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1005.893717][ T6050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.904022][ T6050] bond0 (unregistering): Released all slaves [ 1005.923915][ T5267] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1006.315404][ T5267] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1006.722954][ T5267] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1006.826765][ T6050] hsr_slave_0: left promiscuous mode [ 1006.833144][ T6050] hsr_slave_1: left promiscuous mode [ 1006.839152][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.849225][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.858397][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.866752][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.877348][ T6050] hsr_slave_0: left promiscuous mode [ 1006.883152][ T6050] hsr_slave_1: left promiscuous mode [ 1006.889347][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.898419][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.910088][ T6050] hsr_slave_0: left promiscuous mode [ 1006.918187][ T6050] hsr_slave_1: left promiscuous mode [ 1006.924137][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.933426][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.941766][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.949368][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.960446][ T6050] hsr_slave_0: left promiscuous mode [ 1006.968680][ T6050] hsr_slave_1: left promiscuous mode [ 1006.974586][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.982427][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.991780][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.999592][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.011763][ T6050] hsr_slave_0: left promiscuous mode [ 1007.018563][ T6050] hsr_slave_1: left promiscuous mode [ 1007.024485][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1007.033042][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.044610][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1007.053250][ T6050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1007.073581][ T6050] veth1_macvtap: left promiscuous mode [ 1007.079237][ T6050] veth0_macvtap: left promiscuous mode [ 1007.084800][ T6050] veth1_vlan: left promiscuous mode [ 1007.090504][ T6050] veth0_vlan: left promiscuous mode [ 1007.101991][ T6050] veth1_macvtap: left promiscuous mode [ 1007.108180][ T6050] veth0_macvtap: left promiscuous mode [ 1007.113784][ T6050] veth1_vlan: left promiscuous mode [ 1007.120276][ T6050] veth0_vlan: left promiscuous mode [ 1007.127788][ T6050] veth1_macvtap: left promiscuous mode [ 1007.133303][ T6050] veth0_macvtap: left promiscuous mode [ 1007.139058][ T6050] veth1_vlan: left promiscuous mode [ 1007.144671][ T6050] veth0_vlan: left promiscuous mode [ 1007.152446][ T6050] veth1_macvtap: left promiscuous mode [ 1007.158460][ T6050] veth0_macvtap: left promiscuous mode [ 1007.164018][ T6050] veth1_vlan: left promiscuous mode [ 1007.170258][ T6050] veth0_vlan: left promiscuous mode [ 1007.400668][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 1007.413459][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 1007.534042][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 1007.547861][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 1007.669518][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 1007.681619][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 1007.852068][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 1007.865303][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 1008.030956][ T6050] team0 (unregistering): Port device team_slave_1 removed [ 1008.042801][ T6050] team0 (unregistering): Port device team_slave_0 removed [ 1008.116199][ T5267] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1008.488366][ T5267] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1008.922636][ T5267] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1009.046023][ T6050] IPVS: stop unused estimator thread 0... [ 1009.052324][ T6050] IPVS: stop unused estimator thread 0... [ 1009.301536][ T5267] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1009.629487][ T5267] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1009.964511][ T5267] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1010.292361][ T5267] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1010.619282][ T5267] 8021q: adding VLAN 0 to HW filter on device eth27