last executing test programs: 8m40.303853648s ago: executing program 32 (id=1313): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r2, 0x0}]) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) eventfd2(0x8, 0x801) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000140)={[{@test_dummy_encryption_v1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0x1, 0x241, &(0x7f0000000540)="$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") 8m32.623744254s ago: executing program 2 (id=1329): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r2, 0x0) 8m31.426666963s ago: executing program 2 (id=1331): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x1ffd, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 8m29.797292629s ago: executing program 2 (id=1334): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0xfffff800, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x0, r2}) 8m28.81254565s ago: executing program 2 (id=1336): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 8m27.743051469s ago: executing program 2 (id=1338): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 8m26.864188381s ago: executing program 2 (id=1339): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x9, 0x4) 8m23.640078166s ago: executing program 33 (id=1339): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000140)=0x9, 0x4) 7m26.041823312s ago: executing program 5 (id=1424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000440)={0x42, 0x3, 0x3}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000280)=0x0) r11 = socket$inet6(0xa, 0x3, 0xff) r12 = dup2(r11, r11) syz_ublk_setup_queues(r5, r10, &(0x7f0000000540)={0x0, 0x1460, 0x10, 0x3, 0xba, 0x0, r12}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca33, 0x0, 0x6, 0x273, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1e3c, 0xb155c4dedb2408a4, 0x9, 0x102}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf39, 0x1000, 0x3, 0x102c4, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e84, 0x1000, 0x2, 0x21b, 0x0, r5}}], 0x4, &(0x7f0000001540)={0x2e, 0x40, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r9, '\x00', {0x1, 0x48a, 0x0, 0x0}}, 0x0) 7m15.291777137s ago: executing program 5 (id=1446): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x40) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x862}) r3 = socket$inet6(0x2d, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) sendto$inet6(r3, 0x0, 0x0, 0x8080, &(0x7f0000000100)={0x2d, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)}, 0x7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x8000}, {r2, 0x1029}, {r3}, {0xffffffffffffffff, 0x40}, {r5, 0x6}, {r6, 0x100}], 0x6, &(0x7f0000000140)={r7, r8+10000000}, &(0x7f0000000180)={[0x80000000, 0x10]}, 0x8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$PTRACE_GETSIGMASK(0x420a, r9, 0x0, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 7m12.304147128s ago: executing program 5 (id=1454): ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x82, &(0x7f0000000340)=ANY=[@ANYBLOB='test_dummy_encryption=v1,checkpoint=disable,noacl,fsync_mode=strict,jqfmt=vfsold,noquota,fsync_mode=posix,usrjquota=ext4\x00,resuid=', @ANYRES64, @ANYRES16], 0x1, 0x105ac, &(0x7f00000066c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x3, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 7m8.246648199s ago: executing program 5 (id=1459): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) listxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/100, 0x64) 7m6.341263965s ago: executing program 5 (id=1462): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 7m2.704805087s ago: executing program 5 (id=1468): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x400, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x6, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0x98, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x44, 0x6, 0x580, 0x12c, 0x98, 0x12c, 0x3d0, 0x3d0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0xd, 0x1}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00', {0xff}, {}, 0x6, 0x0, 0x2}, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xfffff38f, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0x1d8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x2, 0x4, 0x4, 0x1]}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x11c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv6=@local, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5dc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000004c0)="1a0487cfa60ba42dc27e927e4cf385e1e386f5112c6a6ff242f24761165513cca06f78574f874bc12f8cae180a1b8f6aa4d110a396a444941cbe5b81eeaacd56262e29bb8414f15ba468b1d330109032644e77feb22b8308889da7ade1763eeac3bc0701393f08ebcb79b2768b280ca31ca50dd425d05d7c6c0a3c37eb4548f6a0467bbc2bfed7e41d0cdb28986a355abdcfa6ae581efc79a4b769ca724ac2bd56d29767676057cf803cbe8c84d6ffd38dbe7be376cb2a5332ae7b18d0ff0b128f8dfb95", 0xc4}, {&(0x7f0000000300)="2f0a3724757487902f6093eb4bc4dda8956450021378d9e6bda044d1a78cc3035291799f433212e2946b2c5915f05fe62ca6069ba4e19ba4eb327c49828b56a9a6", 0x41}, {&(0x7f00000003c0)="eb5dbd811b61cc87acc427181374d686d7a5c1ee150154790042d41c70acea27ca930580a75b8ff6e3fd4f50cb52d752ff83d03f8339136e08058cac5a093f5eaea77a4f0ac37020d06db86114c6b6239d80bbd1afb519b46571066c1f3cceda86e63dfd2286064e020d94c5bba4335d3d97451689630c5833191f7c3f93b5e2625f46c3474d", 0x86}, {&(0x7f0000000c00)="25f6106818676975862f6a10a6b41a0f81ec24ebfacbb649446a2ca733b3c2fd7f7dd9931e21c9bf6a6e8c195e828655f7c56cc3f51f74cfe89e31cf06197dfd7e551a797680f16401106cac3f0095e85b1ca854a94823df43f99c0a15f8665d9e8abfd8a4f3684c6203de52d46f89fc7cd10f7b6b33bc4137551855f1b573f7e4da6f116f3e8c62eedc6e2caa5b9374fbfe6e3b4cd79c8d816301178eebcfeedee57fac", 0xa4}, {&(0x7f0000000cc0)="9f498cf1cc526f6b1ed470b0cb62e119672c642431f028c56c8134c8b33c0d4ac2550447d4cda770ac10b4236d232d7fb165073ef0dabbffbf1e994b8b0c3eed4840b99269e2e562df4b20d2d7d32b205b7d8ea4cac2ec748ac1f02d99277b04f78e77d079bf39f5c2edf7957cb4ed9c40680762c5", 0x75}, {&(0x7f00000021c0)="c6c0cd10eece21787da22826459cbc791e4b386171d55642113892115b77b1b086e9e9966371a5054128f642c4955ec6ccb65b19aa00", 0x36}, {&(0x7f00000005c0)="cb032dc0a5541226a4f97030e0f3a7", 0xf}], 0x7, &(0x7f0000000e00)=[{0xf8, 0x110, 0xfff, "564f7d5ebeb5f81aa6309908006006f2818decdf85cd83fbc30791c7fa71feed501f2dca0705223d8b1ef296325a320d1fdfc045cf598784a159abecde522c08bf80c09a8973e479db498d95106451844484669f8270664162670a382d98d8474e3455cb79d88db01d7caa6e42e6282312e25c1cdf2d0f02d9191123dc9141163d4eaee3de17bfe5e392670dfdf2d6e86958c7e3548c8b0c98cf80ab751ad40bb9acd30de305ddb30626d1166edf4e81a42721dd766598164558c09cc5305a9522d7bdd6f73a15c9bf8f743b70642fe63aad03baf812cea56247797e0e98b64bd2beb191cb2b193f0d"}, {0xfe4, 0x109, 0x9, "9fa708fa88beccc295861d1b345324a4872017d3defcbe06b7391ca84aa7c56d169bb8dd7010d25462a7540ceaf2b5ecebccfd492e3ab22a5d69f01f0c4cf70b328f9fa6e67e9f314d5f72abd798785f5c596b0b789db815fd6d09db42054e5bc1ac6de0313629576fa4c21d111430044edb94f91dc6726fca394d59f1a8067057726d5b3a7ba5d8ff7e9d85e790d5f8e3940409210874d413dbbb5c4cf1c49f0aab91f1e465f8c231faec9dd07b234479d65f3557aa5a3b8d1543822cb9e4d745ffa699ded7215cd4e262f2ac8867e4fd08aaaa28ababc488dc4076bb54e8c65e014cb3d64732b75895cb50e436cf3d6f8bc44b00d365a08a873df9fe40db0e14f8ffc73fcbe9a809b21cb9408a85fa94c8ce4d974437eb0ecde78ef18a9536dc1932724a8fad44efa0d07f19efad07950cdd7c73cfd79e0bbec1ff0c6b8794c73b5cfdd1e3aac2f56097b0c4615f1daf2cffcf87da254768eae7299e8b3172797608d1a461f307925c2bbfd45dac7ef5caaccde724b8b6444f2a90a10dd8379616d505f80b16929c9441527b2f342563eea5c88e479b8598454ef70d6b312fa3d07256352ac8f495ae642e40c6cd0e2d9fbbf54268a97c28d17d5c0312dd8a4eb104f80e9ff98f91588f1c10ddd76181b3428dc102e903b8f1c19002ae6180f520e43cec3ee9fa726cba5735a1387b2d6cfe3e8abeb18b7e3bea57dcf1cf9fbe1a01de1f0c8d1274986a42d6b24602e02a67de15c06f10cae628815157cfddba308dfea72d670fa8e4c522a4ba4925aa188a97a131ca5a47aa98e34ebe52f580131b7632bea295509d89ec194b787e607ff918a7b32b90cdc0d3ffbd4152ffc5b826878e549dbacd85061c7dc22fb893904ae6ce6367ab41ae04766799cac219ada71ddeb9781b5d985b148256f9c403935f043fab3574fc8db34e9f723a67b402948c462e78e8e40bf1268f85cb8e890edbeaf4ed3fc5629f8aa7348e228eba9a80ed2c6cbf1821eaee8f7133162c66e3ab21be800ec3c9deb180c4174e2fd4ee0f7c0967dae9825676a820d7a74515f92a05446113fdd52dc80749f9414226bf5ee3a48280e2856ad9bad2003648761d4f59897a481a27b81b97fcbb898c0287c445b6371d44f22dd9d509b93bcde565dbb6aa53f1f0ebe95b81768d81a826f7cb60dfd4e823f013fb7d1a1dfcc181445f1c4a975f2d1c8d96872cf45a8c77604639e3915c3442ea79138a423be6c89305beccc53fac88b514f7a612f80cd2c60294767ba7574b122e1d6615a060cef7291bedb55884d91e98687f09eac1ff5f9130e7ea6d2bd5933d78afff90e993b3d21c676b75e1d3cc348fb1c1f8440591e0804ce8f5d1218e5e5e04e00d175967686811e42204684b7a8f9d4a6aac433be8a32cd512ab570b312daff93cb11d7ab69dc4a4ec722fd14d841452064a1588505f300d56a8ac3a5c08cd16086ee2e2b5a14b4dffa8b403c7dcccb08b84f97a155df88209d973b6d42c75d41d0a4044148547a03ad635b4bddb846b3a31eecaa1c8f5944d645ca5409122ae08af152536551f905f675eda6ad76fe9bcbadb82237f28d7aad3c687cf6d3a73f73bb7de3f5bfa53a1261b6b6bca6a5920f6165692adeb34d4e7914dd7b8b2f038a3245d5da4c640d5ef01e4f67cdcb80a2174ea6d5bda8f4ba821630bb1b4f8874b40f97839e4137a3beba893fbba01fe55a1ba3b607004254366d9e8b152e1798cd44f78aee3b39337802504c6f8cfa227c4018446218aff809dc360fce6970e6e40a240284e61490e380b59d0a0ea60f0b3b206fccc3c8dd07d20f7dd09dfe18f58f172444d6fd2b84736e19197efa5c20963d0e20d0b662093a2933910e3ddf167a49bd4de0646d2b825379943c303f2f94fc11ded228abd2cac5cdeb22bb04f2a18d0e6290891239224ad8a8b63f12f6e7408dbd8a073e5d137953dd8a53133d82bdcacf971f1d18ce21fcc28c300f9c27b24f59317979353f4407584a626065bf20c3c00dc24c0d0ecce4d4534995e9bf0bd3c78af63c603fc62109ad8798b66d406b8f339bd6735b7eb38a60f85feac87325cca4148bd2564bc1d3df6e7c7e8a7780726afb0adf87bd18fc44aed4c52d7e4ee298b0adf4aae436bdb9930711fee1c71fc790fd99f352cdf06d1580eced2d32812bb8c1ea2768408cf30d3f3a386ce6d67411e609db2b0a99e0223e6213872be2d4341f446a695e671a507ff2a71cbe2c6300fce6c0e3230837a90202d5048c8a9f0b29ddde952e7927f74206cb0ed85c1d994b98e79307131b975c5d77b7700f37fb03d5dee2d7ba193d2d31224155428d84927e8991461ee632a2badee89d42f024a6588600e94a046ce403ed6016c95cdedcc4711cfc4e0bed714d0fdba01d14e408066117df1fc4ee3af83d146ddcdd716c2a06dd4d2f95792550e89532e8f9d0d83ef052525ab9d4a3cddebe22daf6c686328902f26775eecfe1d7a54633bfb9641fbcf33837ffdee12a9b07bab2fff7b0bc4402b1f23e6baa45b8d4af7014722303caae6e0d88e1d9907460bb83c8df778c735713e09ce8575aedfe63e728d8485398564028a188ef83699e75572c07bc21a4b6c8db614cccc00aeb8ed6cc6b0ac92cd0b18c892e9d1c36d78962af3ffeaa936baf3d1f36f28d272adb9c24faa12da86573a511248ceb74ac0c570c638f8743f7fc56a4755db36e206225f8ff9dcc97bd22445cb5592d048c267db75d5038ac0f95157a338c88ffff3ee8e1f8b1a79a4f082f0900d022ca1e4e40a6272d2a5139b0954ed7d51238cac1f7d40bce8fa35abad772b8a6b81ea364c9f806f99650ed14de8ab970cb802e0764446ffbb586805b3cd9d6448f12ab755405fbb672eca1d79b7195b890367edf45a92c57e082750c6f79d72217862453e30beaf57e827e28cef5d8dc9203aa2d6f9844a1cdc8352ae34f1966e1d26e60dee223b7d000a14294d7864e1cf1a8710e17ca0c5715db74827e686ebba1d20b5667ca04fe1bead11ea20a0b7a397958b52b712a1602d3e8a23a5e613aea0e015fbe0af47c58a2ff53d75f969072909ed09b2ba7f9e0925f16a7246804d02c4cd526f5e65eafcac569fd5ec82e219106c588d13b2eddda88cd1cbc3a5787d84b5c823d91a93aa16213b6556e57da4a1d763baa0cfc1d28e3d9c27c1907539e0d5f7c667a5820e979911a15737590bbf654feae6f8fa73a27194b6ecd6e3ba6e7643321347cd272de671a4b23545ab2c88a481e02178acbb1ac79bc8df5b4a45bacb715566ecdcf9491e8af381aacb91d4dc3e419e5d0d4c8e2a399a6ab40367514262e872ad0baac90d20f0b3e8718a22088464374c338e94263b8a0e914ac6b6105c8864059d7dda2fe28ae278051422fc88acdcf9c89e859f07baa8fdaf4fd2184a2fd9d7d16b4859a91b94f295df52a38065e9cd2a8cb90dcb6d2f03ee7f7cae8474d4cb0b97db05373e462e05ef3193031bf133f51574e888a6aff05bb03b5f5778bce9a7d07a7f40f49518263746047236b3a0ebe5673483340d303e6a119e9cb3150e4198f984f202f8727c5c3f65f0a331215432dc65663328801b729bdb24ee70b8f4c5fa15cc7e7cd5d7a9fc96cf4c8cecbda91e767fa7dfd62a8f36eb1654853514b50f0845ecec6b0869c2fa88594f9b978a7075a8f5746ce11831554bd8a7ad2e5b343ac246536c9579ac97421e40dbb2bf77677169e1de9fc7cb82c4eb93016aad46ad82c58e767e3e2149d5db918b55637478a1030344bd4345e0ace09503db558ee22cd1dae3a085495662660b5c2980a03aef1738bbd9a2cd75defd65f3e154da3272ad3c4a8aff60f84e49e6328254bec18c22f9644fba56ad3452fdafe007ff95893f4a4786e703f271f9d9e92831f41f6654a236f83b3327b4bafb3ecfe022dd2ded3b363a2b73c4591b521e3433026bca724ffa3749afaec4568d2dcdabd1b252e816419187cb29efd7db4e618096c5d871f7f95a8c72206fe9e03703dfe484cd6525847702f3f18ce61658c4515136c9d562254bde6189622edb5e33319b12cde04f7f2b47681b3b44d21b4fa0efeb2699290edb0cbddeaa8aeb680999311c1aa6af8d0a276c4c63e5643fbc8474e1766120d8bb380a929f3cc76d849f82ff6b22aecfd5922084224b3da2506980c87d9786dd4bf1c8ac3ed5131706f38ec02aa2ffaa45fcaa52da154a9982757a15bd813e8711410fbd81b34f83af5d83a14c6e9bfe7872b7df5a104cc64e66a7074f323df99758ff4d214bd0ab55708b9d3bfb4737154bdeb38c9d8725cb89edee4b5df029b5b6daf8382ee75eb60f3939aa11a155ea69ddb2cab58983424194595901d972f1cce723a1abc0821edb00d7ba6e8a1d31a191e4562389cb1c6b1368b8da9663ef89a090a4a1f558f0bdd54439c148de828a43512c934f30900f970146f5606bf2c7228c0aacfdc6e049b5bc6aa26f00b7d7a28c2a3776a912270fb1c4f97dd91d401383a1e81b78f4cc8cb9ce63cc29427e3393eceed75ff8f5152af5e08e8fe706e76c5ccaf86cfe85a3430ed0031b57f7890aca7fb1c6d67e5bff2a0c809f72107f6e3e6d16b546c823fcdb4bf7bcc6328be598123ea4e724d525a44fb25942be5263bfef14271cdd49d4d82916dd7ee1ae62b32da7fa2bf5ab7ab473b621d9e3c0bdb1f2916979a5bc609b87a77b2816af28411e6069b275d1c55ca376f10f40161105c864698a41d71e99a3495f59f4bf591c7a95e9b412fa672b5ca4825964c8469f516159ab3f484056f311d08f624ef9abf7c0298bf229a0b689bc7f28313907a7b9c01cdc62c2e9ea5c36f2f3bef01264e5fa5e47760f8e2e619cc98d2af812750a6f7a88f7abdc16e97ef5db11319f69b840dfc94603568f30891707a30795c1c84d0a909307e20b4460bad64f2222b02fe5470ced70cadc37dede2714d63494b5e7ba5f089b75a6d9998bc7de5de254a2acd33abba99a5efb24b3f5d0c42a215f80c34469234147531e88ec624275affd9264919ca5c66b5e0761ce478ded38c745aeeebab6d51db41efc1e84359ad2fb8b13def4bb79e1da0fb8bd38d330db91a210c636161d33f8a1ee63c7207021518eb3d031482650d69de0b75941e0a4ed25ea5a3faf36627394bacd371854e326772de3992e939d461cc6866a5a862793557639c42cd3b257dea7e805e403bd313d035e70bc1bebc3cf28bedae191bd25681839484ec9fcb87fcd6b1e0f4e36ffd58be59b5f63b7ac4d6d7e7ba1d6405f10309c9f8a3c18d70f0ba14bf5332811f9dd1a28944dd76baf5381f9dc2ccfadf6c691c2aadb6c4c3896b6caa0006b0b5ff9e26fb95f6f23b2b7cbda61ffcb6f1aa09fc77477fd2a2567322864b119f9be78b85a941822d6e2068fd3ce9e3fa76990ea35e0b4976f7a5e595851576de98d1c2d49b9e0e19e54910d9df37408e9b1d2db02f196c4d996d5eb481d6c431a3689349c5bbb6de652e3acb52bdf603679ab901905215066b31cc166bbf50e4ce751df05ba64aa19956e9e8ef4c947748ff1d29ff9ca1b45c145dd35929ca588fc08eb0b8989772848eee8ff16e9cc229bc745368e55bf3423281d7e33fe0c520e1c2b34af7a26a13ad8313365aea0985981cb2ddcb557c87dddd0cc754ccd00899b23c63f40c5d557383ddb539dede92ed540dd117eaa0e5ea211720b4012c90b3d3ca150d83c0815c5c0aedc160bda85"}, {0x8c, 0x116, 0x4, "5b00bceb754ea2722f8ce60d55a4ed24c8bf60b97b291b6f6b804716b4bdeb8d859d4f92e98d8ca6af733fcbc4dd7af357dda30e8b6f3e45ef2bdaddf29b0a4736df718057c882634e54f3bc53fbd60b95dad719c816b3f2d329c7c5d2886ee68e18daa42afe7f7db0666e2d4898c23f0228bd821817acb50870383a5bd5"}, {0x90, 0x102, 0x2, "5f5ed8eb313c685cdb6a12edbb5c080f498848d517c53d1af9c07afc748f03472b539ddf2376c260509af298a47c403d21df10ce2aed8d46fdf9fd4279371d7cf304c9657ae245868b6a4d90bcd681e4cffd1216e1666a8350f2037d965b980a69d3ba2ac83ceb8371df35dcb892e378006de73772441e77a00d140b0cd513b332"}, {0x78, 0x10a, 0x4, "09240c056c1330f8f26c4f865cdd282f846c32f4f6d16b4bb731555cb202fc9b79b750bfb50a608d388a3c96d48770ff7af192fe12148d6b824683854028ea76e0fab621dab4a6c1dd496f2920c575bc756d592450e64831b176a56371d824ddb43b00e9c79b1ca98963d2cd"}, {0xd8, 0x1, 0xf, "6eb4066684ffafac46df78d6413d546d24d3831b6d163f142c8229fa970413cfbd640997dd14c3dcbfbeb96c39dac7f926dc2b62cdeada111ae192643f540bab3269f232c3d552b83165a2549bb0f1101c74970d79360591efcb9407b5497e9daa706232985f0649ccfa732b657fb6a1bab36460b2c3b1a50a33f0d0becc9d5bd1654885fb891fb72269aee785bf73f18e37012822890173751fe9cdb4492a3bd378534014a9ae711d9dfafaf26f9d235706153cffcf06a522bbe45bf97330daf43dda48561126cd820b"}], 0x1348, 0x804}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@ipv6_newroute={0x20, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12982}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 6m59.97149988s ago: executing program 34 (id=1468): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x400, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x6, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_connect(0x3, 0x98, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x44, 0x6, 0x580, 0x12c, 0x98, 0x12c, 0x3d0, 0x3d0, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x4ec, 0x6, 0x0, {[{{@ip={@remote, @broadcast, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x0, 0x0, 0x18}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x2000000}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0xd, 0x1}}}, {{@ip={@multicast2, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@broadcast, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00', {0xff}, {}, 0x6, 0x0, 0x2}, 0x0, 0xa8, 0xcc, 0x0, {}, [@common=@unspec=@time={{0x38}, {0xfffff38f, 0x8000, 0x8d84, 0xcafc, 0xffffff8e, 0x70, 0x1}}]}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xb0, 0x1d8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x2, 0x2, 0x2, 0x4, 0x4, 0x1]}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x11c, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x0, 0x1, 0x1}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x3, 0x8, @ipv6=@local, 0x5e20}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x5dc) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) sendmsg$qrtr(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000004c0)="1a0487cfa60ba42dc27e927e4cf385e1e386f5112c6a6ff242f24761165513cca06f78574f874bc12f8cae180a1b8f6aa4d110a396a444941cbe5b81eeaacd56262e29bb8414f15ba468b1d330109032644e77feb22b8308889da7ade1763eeac3bc0701393f08ebcb79b2768b280ca31ca50dd425d05d7c6c0a3c37eb4548f6a0467bbc2bfed7e41d0cdb28986a355abdcfa6ae581efc79a4b769ca724ac2bd56d29767676057cf803cbe8c84d6ffd38dbe7be376cb2a5332ae7b18d0ff0b128f8dfb95", 0xc4}, {&(0x7f0000000300)="2f0a3724757487902f6093eb4bc4dda8956450021378d9e6bda044d1a78cc3035291799f433212e2946b2c5915f05fe62ca6069ba4e19ba4eb327c49828b56a9a6", 0x41}, {&(0x7f00000003c0)="eb5dbd811b61cc87acc427181374d686d7a5c1ee150154790042d41c70acea27ca930580a75b8ff6e3fd4f50cb52d752ff83d03f8339136e08058cac5a093f5eaea77a4f0ac37020d06db86114c6b6239d80bbd1afb519b46571066c1f3cceda86e63dfd2286064e020d94c5bba4335d3d97451689630c5833191f7c3f93b5e2625f46c3474d", 0x86}, {&(0x7f0000000c00)="25f6106818676975862f6a10a6b41a0f81ec24ebfacbb649446a2ca733b3c2fd7f7dd9931e21c9bf6a6e8c195e828655f7c56cc3f51f74cfe89e31cf06197dfd7e551a797680f16401106cac3f0095e85b1ca854a94823df43f99c0a15f8665d9e8abfd8a4f3684c6203de52d46f89fc7cd10f7b6b33bc4137551855f1b573f7e4da6f116f3e8c62eedc6e2caa5b9374fbfe6e3b4cd79c8d816301178eebcfeedee57fac", 0xa4}, {&(0x7f0000000cc0)="9f498cf1cc526f6b1ed470b0cb62e119672c642431f028c56c8134c8b33c0d4ac2550447d4cda770ac10b4236d232d7fb165073ef0dabbffbf1e994b8b0c3eed4840b99269e2e562df4b20d2d7d32b205b7d8ea4cac2ec748ac1f02d99277b04f78e77d079bf39f5c2edf7957cb4ed9c40680762c5", 0x75}, {&(0x7f00000021c0)="c6c0cd10eece21787da22826459cbc791e4b386171d55642113892115b77b1b086e9e9966371a5054128f642c4955ec6ccb65b19aa00", 0x36}, {&(0x7f00000005c0)="cb032dc0a5541226a4f97030e0f3a7", 0xf}], 0x7, &(0x7f0000000e00)=[{0xf8, 0x110, 0xfff, "564f7d5ebeb5f81aa6309908006006f2818decdf85cd83fbc30791c7fa71feed501f2dca0705223d8b1ef296325a320d1fdfc045cf598784a159abecde522c08bf80c09a8973e479db498d95106451844484669f8270664162670a382d98d8474e3455cb79d88db01d7caa6e42e6282312e25c1cdf2d0f02d9191123dc9141163d4eaee3de17bfe5e392670dfdf2d6e86958c7e3548c8b0c98cf80ab751ad40bb9acd30de305ddb30626d1166edf4e81a42721dd766598164558c09cc5305a9522d7bdd6f73a15c9bf8f743b70642fe63aad03baf812cea56247797e0e98b64bd2beb191cb2b193f0d"}, {0xfe4, 0x109, 0x9, "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"}, {0x8c, 0x116, 0x4, "5b00bceb754ea2722f8ce60d55a4ed24c8bf60b97b291b6f6b804716b4bdeb8d859d4f92e98d8ca6af733fcbc4dd7af357dda30e8b6f3e45ef2bdaddf29b0a4736df718057c882634e54f3bc53fbd60b95dad719c816b3f2d329c7c5d2886ee68e18daa42afe7f7db0666e2d4898c23f0228bd821817acb50870383a5bd5"}, {0x90, 0x102, 0x2, "5f5ed8eb313c685cdb6a12edbb5c080f498848d517c53d1af9c07afc748f03472b539ddf2376c260509af298a47c403d21df10ce2aed8d46fdf9fd4279371d7cf304c9657ae245868b6a4d90bcd681e4cffd1216e1666a8350f2037d965b980a69d3ba2ac83ceb8371df35dcb892e378006de73772441e77a00d140b0cd513b332"}, {0x78, 0x10a, 0x4, "09240c056c1330f8f26c4f865cdd282f846c32f4f6d16b4bb731555cb202fc9b79b750bfb50a608d388a3c96d48770ff7af192fe12148d6b824683854028ea76e0fab621dab4a6c1dd496f2920c575bc756d592450e64831b176a56371d824ddb43b00e9c79b1ca98963d2cd"}, {0xd8, 0x1, 0xf, "6eb4066684ffafac46df78d6413d546d24d3831b6d163f142c8229fa970413cfbd640997dd14c3dcbfbeb96c39dac7f926dc2b62cdeada111ae192643f540bab3269f232c3d552b83165a2549bb0f1101c74970d79360591efcb9407b5497e9daa706232985f0649ccfa732b657fb6a1bab36460b2c3b1a50a33f0d0becc9d5bd1654885fb891fb72269aee785bf73f18e37012822890173751fe9cdb4492a3bd378534014a9ae711d9dfafaf26f9d235706153cffcf06a522bbe45bf97330daf43dda48561126cd820b"}], 0x1348, 0x804}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=@ipv6_newroute={0x20, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12982}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 6m21.408517196s ago: executing program 4 (id=1531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x220000c, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x5) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6m20.34889529s ago: executing program 4 (id=1532): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/80, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r2, 0x0) 6m19.099171413s ago: executing program 4 (id=1534): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x1000000, 0x0, 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000800)='./file0\x00', &(0x7f0000000840), 0x1010015, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 6m17.775105892s ago: executing program 4 (id=1536): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) 6m15.541796967s ago: executing program 4 (id=1539): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = syz_open_dev$usbmon(&(0x7f0000000180), 0x0, 0x40) ioctl$MON_IOCX_MFETCH(r2, 0xc00c9207, &(0x7f0000000240)={&(0x7f0000000200)=[0x0, 0x0], 0x2, 0x862}) r3 = socket$inet6(0x2d, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) sendto$inet6(r3, 0x0, 0x0, 0x8080, &(0x7f0000000100)={0x2d, 0x4e24, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}, 0x1c) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000400)=0x4000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r5, 0x58, &(0x7f0000000180)}, 0x7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r1, 0x8000}, {r2, 0x1029}, {r3}, {0xffffffffffffffff, 0x40}, {r5, 0x6}, {r6, 0x100}], 0x6, &(0x7f0000000140)={r7, r8+10000000}, &(0x7f0000000180)={[0x80000000, 0x10]}, 0x8) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$PTRACE_GETSIGMASK(0x420a, r9, 0x0, 0x0) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 6m14.191594839s ago: executing program 4 (id=1541): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x1) read$char_usb(r0, 0x0, 0x0) 6m10.559910783s ago: executing program 35 (id=1541): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x1) read$char_usb(r0, 0x0, 0x0) 3m48.356820454s ago: executing program 6 (id=1790): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@test_dummy_encryption_v1}, {@noload}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@usrquota}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80d800, 0x0, 0x0, 0x0, &(0x7f0000000240)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fdatasync(r0) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='\a\x00', 0x2, 0x2) 3m45.66922369s ago: executing program 6 (id=1792): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1c\x00'}]}, 0x1c}}, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000801}, 0x48000) 3m44.329711816s ago: executing program 6 (id=1796): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/80, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x9c28, 0x7fff}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e", 0x19}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x0) 3m43.163691415s ago: executing program 6 (id=1800): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa18c56, &(0x7f0000001180)={[{@fat=@gid}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_lower}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@utf8}, {@utf8no}]}, 0x7f, 0x2c1, &(0x7f0000001640)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) 3m42.339839053s ago: executing program 6 (id=1802): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4040000) 3m41.604196079s ago: executing program 6 (id=1804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x801}, 0x10) 3m25.707848642s ago: executing program 36 (id=1804): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x801}, 0x10) 2m45.374004734s ago: executing program 8 (id=1912): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x2, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x2000006, 0x8, 0x2, 0xd99d}}]}]}}}]}, 0x68}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003075f37407104020695a401020301090224"], 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x14) 2m43.365572376s ago: executing program 8 (id=1913): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000480)='./bus\x00', 0x4c000, 0x14c) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 2m41.067286018s ago: executing program 8 (id=1917): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f00000017c0)=[{{&(0x7f00000018c0)=@l2tp6={0xa, 0x500, 0x4000000, @empty, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000290000000b"], 0x18}}], 0x2, 0x0) 2m39.6843412s ago: executing program 8 (id=1920): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chmod(&(0x7f0000000140)='./bus/file0\x00', 0x110) 2m38.236336462s ago: executing program 8 (id=1925): chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x4) 2m35.426075721s ago: executing program 8 (id=1927): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-.\x00') 2m32.67845694s ago: executing program 37 (id=1927): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)='!,\x00') mremap(&(0x7f0000ff1000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f00000000c0)='-.\x00') 15.422133258s ago: executing program 7 (id=2317): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xffffff3b, 0x9, 0x400000000000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48085}, 0x10) 13.870635634s ago: executing program 1 (id=2320): syz_emit_ethernet(0x22, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xff84, 0x0, 0x84, 0x0, @remote, @broadcast}}}}}, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xe0, 0x128, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x19a}, {0x1}], 0x1, 0xf87c4be628ed8e41}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) getpid() sendmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}], 0x1, 0x40000050) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r4, @ANYRES32, @ANYRESHEX=r2], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) 13.816833238s ago: executing program 7 (id=2321): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x41) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000) 13.803124722s ago: executing program 3 (id=2322): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) 12.872721613s ago: executing program 0 (id=2324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000008000740010000012c0006801400040000000000000000000000000000000001140005000000000000710e"], 0xc0}}, 0x0) 12.265913147s ago: executing program 7 (id=2325): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x38}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 11.890263841s ago: executing program 1 (id=2326): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="3e8bbce90da45d7ed1572ed4e0220406f87b0024292bc6317c6dfe38358847e22efa978944d1bc5cc5d340c8f4156cbaa91845aa78f654ca47efbfdd569b0ce9b642fb44f832c0f80c9cda639db97065d537f2d6a8e996375498bdb199410300000000000000de41b1f74db52f6836b6765ebb7fab2e6f22d27ad6340ffbcd71b70ef5683dfeb022614681c9e3762a3ad5f84751ca94e35039796705cadae08ee170149049bca1061336755d0e4ab0454262699a2e46cd90a2374f0e7201efe43a4d614461f3e841", 0xc8}, {&(0x7f0000000240)="94d7d7a1db0e7c00000000000037da1eb2d3be4c8581ee5ce7b53e010cf8bb6f46912bb58c43579721a5948a1353a77b3066cd0caa0a78b2edee2403377d045db0f55f896ab86783c2af6f861927ef79ad5c573823a36c095b86b69ccb0900c0de4c9ee8da3075f0a855c3a49963522b4a61e6f55a0a3d4bda99db1934677b8b603eb81f0d63d82566a28e5babde509deac559bfc3", 0x95}, {&(0x7f0000000580)="2e883e9a4c8571413e19a030859f01d51d868014e8afa711c9401eb7b10fd9d6dd37162995f0f9ae05bfcfda99366330b11352bc6257d0adac38a47379b287f2cbe6491ccc7d9f026464c908785a536a05c26d2bbabb0ba226f64c770565d7c467747bf22734856574d41302", 0x6c}], 0x3}, 0x547052430a225ce3) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) close(r1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/208, 0xd0}], 0x1}, 0x1) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xfc, 0x0, 0x0, 0xff], 0x0, [0x1, 0xfff3, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) 11.828013339s ago: executing program 9 (id=2327): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x437, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4840c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}]}}}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) 11.309000358s ago: executing program 3 (id=2328): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@link_local, @local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0x10, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0) 11.00374159s ago: executing program 0 (id=2329): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x5}, @window={0x3, 0x0, 0x6}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xd}, @mss={0x2, 0x2}, @mss={0x2, 0x7f}, @window={0x3, 0xfffe, 0x80}, @window={0x3, 0x792, 0xfff}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x9, 0x31, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, 0x0, 0x880) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r1) socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) 10.424215281s ago: executing program 7 (id=2330): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 9.97293337s ago: executing program 1 (id=2331): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x24, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) 9.580511676s ago: executing program 3 (id=2332): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000140)={0x33}, 0x8) sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1e0101", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00('], 0x50, 0x7ffffff7}}], 0x1, 0xc050) 9.270117706s ago: executing program 9 (id=2333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, &(0x7f0000000240)=0xc04, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x16, 0x8, 0x40, 0x56, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'vcan0\x00', 0x200}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) 8.534296314s ago: executing program 0 (id=2334): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000011c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 8.074569293s ago: executing program 1 (id=2335): socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpu.idle\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='memory.min\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000140)=0x1, 0x12) 7.640403325s ago: executing program 3 (id=2336): syz_emit_ethernet(0x22, &(0x7f00000011c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xff84, 0x0, 0x84, 0x0, @remote, @broadcast}}}}}, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r1) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000240), r1) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'wg2\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xe0, 0x128, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@connbytes={{0x38}, {[{0x19a}, {0x1}], 0x1, 0xf87c4be628ed8e41}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff000000], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x84, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffe, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) getpid() sendmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="91", 0x1}], 0x1}}], 0x1, 0x40000050) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0c000000040000000400", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009e492a626a68033b16732db03e94f9f5692794296197ee5ec6be3d2562e271f31fb0ee0d81d0e9dc24df7108a001171c4415dc8f9a11436a9005da29fcd7a09602c78415b5864bf8051b9625d013cafc6935fe3c08e10ba15f9685f02e6f05ae883f15a0a3b02a26149dd50a52ffd6591c966bf7a8ed19c1ae2be066fa553a00a4c7607e12c2e1b8352d44302f346a10cc67cf3316ad8dfd7568130eb02f9d1a1941d13dbf491347112b2fe8275c95a7b6bc75a7deb2f3b23d1305f4f651ea9de1324ce9d84caffd3bbda96062716bbdd595d1", @ANYRESDEC=r4, @ANYRES32, @ANYRESHEX=r2], 0x50) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000841}, 0x1) 7.257169875s ago: executing program 9 (id=2337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003cc0)={{0x14}, [@NFT_MSG_DELTABLE={0x6c, 0x2, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x22, 0x6, "c6c4021fc3a5f53e69ff0a53f2cf8e34eafb8cef5d1663882dff335c09a4"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x98, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x61, 0x7, 0x1, 0x0, "898664df0d93d8f32f888701de0c6d60e655012a6ab1c3f75320f430e99e18e61a2b7232ff3b10d3b20782ca75fb44edff12caa3b5a3b065058d32def32c506f629b6ef53bfbff9f5a0dc5774790f80c549069cd8d17b04e48bea9a80d"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x32, 0x6, "821fb5c6d3379be878002847760bfcd77b2430ad9678ce8c2d21812559c0d8f16f52cc93e2c265aeac903fc696ab"}]}, @NFT_MSG_NEWOBJ={0x6c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_DATA={0x58, 0x4, 0x0, 0x1, [@NFTA_CT_TIMEOUT_L4PROTO={0x5, 0x2, 0x11}, @NFTA_CT_TIMEOUT_DATA={0x14, 0x3, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, @NFTA_CT_TIMEOUT_DATA={0xc, 0x3, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @NFTA_CT_TIMEOUT_DATA={0x2c, 0x3, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0xc8}]}]}}, @NFT_MSG_NEWSETELEM={0x1f88, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1f58, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x18f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x160, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x38, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x3c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x64, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xfa}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xe1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xf0}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}]}, @NFTA_SET_ELEM_KEY={0x190, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7f, 0x1, "5c94eba8922833b18717f147c584cd57e74088405534fb592b0dda7d01ad7c288a1f1a7c392bd1bf3473f6a187ccd33fbd2af8a4bafcbec0d8fc5cbb2e3a8400e57502cfda34598be2cba383084e8a48dfc81e8b50a1e784a0dfb5669dab4e3967b352079e712a6bb9b5e78da4f5186f09e2e5eb564dba25e0f9f5"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x92, 0x1, "dad3635f102dc36a0f313aff9029d1d0399e02357532c59af07d155b904b817ad5532b53b3d3c5aacb46234b0f3d71af2953e090b702371104a42c0f58d830c0f4e3876190d3796cda65876c1df0ebc6e93de4031561b11907be97ffbf6b61ed495722fce264f95f7361b0f56b7240433981c54c448bd40b2127c53539448c017b8f5ce52f27ea54cd2cf62793cd"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_DATA={0x1124, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe, 0x1, "72619bf524d548f5aeb3"}]}, @NFTA_SET_ELEM_KEY={0x4cc, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe1, 0x1, "4b013dd4279634157683df01bd63cd02d4c57be245216a236cb6d3e77fabcc05abeacbea78b1fca03e3aec202d8942c338f90577dadb8332f26a80d9a31d6c6cb57b783c1fd793d6ab83027b1f7c0a075f9d813ba196ec13e69ae5cb9683a76bf7df72cc50d470f6555d9018d3ac4c5cc276514908251f8618276328b4883286c752b0ea3eece9c2e142578eb07bd47612b212257c4ae11dc467a58576af65deedee8e6fb851c21ff520666560ec2fdb0062373e9c58dece5c1b019b9c83481041af312be8fcb07ca1e5ed22034fe57533de13977f58a475b5560071c6"}, @NFTA_DATA_VALUE={0xf8, 0x1, "06fe7b9df93f84b0399bae392f8ba3d5b9567f5ec2b18756a855ef36bb1d7b71cb488d7f526130a1063e429cc2d622c17ef5801d33da08bef7eaf8568ab1eabfb539d4ee7869c4c8034a79bd46e14481f7a817ed53d6c88e186caf1f2439e06c9dbf5f438c3a68fada3d67b89c532ddaa49e295f494c9db53b9264d6ca8a2f8fb29ece6ef963ceeee5e439861909a3208ca3d82460145cf985047d8a4d0df1242d330524a99516f47a81e8056d2b1e834dc0469a03a8285b7fe33e5a6800938c27e7ba857e645ac30c672b73beae803b293f8422be0019529a2f74c7dd2eaa3f3b0081d23179c8c7345d160e39431de0dddee360"}, @NFTA_DATA_VALUE={0xfa, 0x1, "a89ea1dc52a6bc2fd8f35c7c07838e7abe49b8e541049de284cdadf8dd2934feba823bc5e65b6de2ed9dcbb7c766209d434f0ca20105ed62d1f575a0505ea2de91c58f58db88ec1bb1e056a7ad19132292df37b642fd5f46cdcb0b2d71c1776988d22c589c78029057d45952c3dab415c2c8cfa2f5323cc0d98975ced08e02643844049d9101023ad33ed6cd2b9e729e5f67aa8f0512d5d408f2dab036b56d90b13f3204d58e993e9f79639a017d270e4740c2471269fe08b637161316f09898ee55bbe8a45ba224541c4686aaa47bfcee46b90682ce2dbed4cd6c194a26598f0f966a9d214c8cfdb07a781c903226467cd08a5480f3"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd2, 0x1, "81ee1a85e1a86c30a44c7ee54b13c17aca3f2ceba56fd6cc4500fb1a265e0ff682580619de8c22896af5e918954ebb4ca9c2815c9f793900e74df7217685cc37b02bf34f2b281ae9d72d6b7aa3b3af285e4b42727f0df02dff508aa8e8c348f9cc849e68e33be537e0d2b8d0e996346cfc2dce303a082f0a931529a00ebeadf06421118fd5161536a3d0c9dd7c78ae264c85c99d024d567265c3fdc8f40f41c86564ca4d6a215fe90b54332044e0165fdd8b905b12872ef525b19e4cb7e29cf1421163a4dd20f972fee80ac42ddd"}, @NFTA_DATA_VALUE={0x39, 0x1, "c2aeedbf19b21f97ae9bb00bd14a96d60f780c690a9165e34a1428a2e0381ca39e2f36999ecabbc1c00f482b80a991bee7b912a917"}]}]}, {0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xa4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x26}]}}}, {0x3c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_ICMP_CODE={0x5}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY={0x294, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "273ae9c683cd0a5b6b9482ae8396477d47d6fc6b0875ef087f67ef76bfbcd2482d759d57eb90dd84ab90523e247de39310efe577b6dd849bddb3f2e5ef60ba7ee56d4fb1661c81aa51f80e9c5cd8520d3aa2130ed4"}, @NFTA_DATA_VALUE={0x3d, 0x1, "e1bd04bb1c3b6d036e9aa1bc8980340f463feecf735f45202498467f844a11b32aaa4fb689ab8ab6ba7ad3778b5bb7154506342a42bad2c238"}, @NFTA_DATA_VALUE={0xc9, 0x1, "2b2974793c01613471cd37d0246c5f1d2a4432d6ad2b7b79682160fa7819a08aaf4a6defc88514f4143eea379a57115bae6504796503fdc068b790ebcef95a56e5d92048f8c8374ba38f8ae5e07f5d8c78bd164540184a7d14be094ca90a66ee7f36817d2b844820304fbbb02fd3668019da5555615e7c8649e048dcd4233af7b70c1878805f1296914815cbf64ba7f8a1f05d0db3f4bfb342d40716832db0d3aa3c1552e85e36c49f0ed5011ff61beba320e540ea6366a9b5497deabaea8e8ddd467c2e90"}, @NFTA_DATA_VALUE={0xe, 0x1, "0102db31b2d44474d32d"}, @NFTA_DATA_VALUE={0xd7, 0x1, "bcb24c5e964a45e910b7acefd7f347711d101c869768258f6d4c7f7ebacc7f1fdf9ec5f57c17ff515a684a869be92215ba44320268f4204e261788b844d1620f4934c9497f179c431be1725959b18e9af9ecaddb4e776e631f0f5f34b0a5201035cd71668967177096de494e11e90a98c80771978a8d7e78eb03b9884793ce1033779e67179e21d5bf22bd5c75194e7a28067a57adb889aa75d64b6c9821549c7b66fc0e6a92cf385fe5b5542bd17587ac8a82ea3396fc2862a520baa54493628a99a41908e94478188703b2ae3aa0638c9bc9"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x30c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1ff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9c7}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @cmp={{0x8}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x2d8, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc5, 0x1, "b2eed73b49b1250a4353f5bcb36b04ccd2b4fe58c5578b128e40b8797d4ad41a7d37bf8e7821be1aa9bae9ea6b20f487c028287bcf6e4c9ad8991c104918be70b8e837c3b302f7b4ec65eef914cb9e35a0d6bc915cd0f883ea9e37c5977a48f342a70406f7257972faeb4080d70c8b36d27758bcd097489d62e275bde3616056a6e5d9cf0cb745212add6b5d34ce794209f73092c5ff89b930d281c76c44ec0c9701b8c0ec3258143a9716fd5b70c0409029b15202504ee7871198e72fb815ebac"}, @NFTA_DATA_VALUE={0xdd, 0x1, "5d23bd6e8a3c51aaeb44b17ae41186a1b43bdb0e149d591c09def13287eeeac1ac2bd98d3be324ac44ecd4d87399639871ad52dba218ea1d568b187d9b4b96a168c56073c31ab3c0599ce4a1ac7fbd8453666e4d10b18628b718314b499eaf6742bf7d18abc1ef68e43604cf27b4088f0a9a2774b56a8bff924db6a53f7a20c8b4e45f3405325fd303a2bb502be402280e3ca5a9bf5c2314d2fee956d32e9fecd9f543f7e853317335a11df57b755b4588d12e9ce5a1e74158a73901bfd4402d27e7b1f45fc87b2967c73d6f664d84a248dbb225ff2b4502f0"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x34, 0x1, "3851f7ec263d9f9444213bb0339ddc3d6a5cb764a06d96b4b43345b5807ede63b21d9edb43905eb963288a9e29b8ed89"}, @NFTA_DATA_VALUE={0xd6, 0x1, "1fa7e362d79f10a2f8e5434bf4e26f7525fdd46c1f8c2d834ba24bdc2f72637c0b28b8fd285a4c40be54b0a20fadcadbe006c9408005a0ae38369e1636376915f5e31fb8627d0b0b5b526756e5e522d2067d4d7f3a527b3d86f5e0e8062d89820abbbfb252c33158d1f9ddc4892085f27af799dd090c6b6232625c2b60f0e786fc421b2ab9b27a1aadbd7533284bf06d60ab6e9d3375ee42bb190706956e0281cfb4d02d21db06c003c13d7787ebe250ff01236945398fadc9ab39caca7aa2c79d026aa0ac1ea94bae52de145ddbaf9a8bf6"}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x298, 0x2, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "544369044160838b7541109f21dec11b23e46ab6bdd127302a90a165f8cfaa9afc45d0f8a07df642af0f6bf91193a39b679138c799b4fbc12b79246dd0d0a45f9b9922c7ac434feb6d30a91b6ec645f2371589dd2bfb837e2110408e2633c1f2c13ab3fab6aaaff86cbea25eb8b418c719ee2801805e1e5d5534b1ad38cdc3317f06b6490ddfa59d5c047a6954b6068dd2135e3b0f19aefa58f3d27a2390d4fa323a0dcfec36dee203b14312f88366b0938b0f1716c31e029db301b8b80a71d6361a7cc32d4338"}, @NFTA_TABLE_USERDATA={0x23, 0x6, "94419e3b2148d41848e25bd6221a88007073ee6c88395685d0729067681bea"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0xf3, 0x6, "c8d12541d75b2e38fb153b79b255f7175e51c32f55e7b2f9b60b5d6bdf0447332c010cc596a66523698872f279c5d7b61ba17ebdc5a5766600163dc907604aa72e1f649c363c7ff28a36db77f645e802c82256fbed2bd3c6d4c0d227a851814437cd7bc340974d65bad5dc21093ee3f7befc398c9c37f2d7c6440714b2fb1a79a82b63854f3acacf280bd159fd9c8893326501439a538a0063497a407b325ccd8a5591326ae40e1227390affc55b1c37a553d71f379013cdd8b6ff00d58dc35289df3a0a839769835c96894382b073cb8ee04e1dae95ac25d4644ff60acf5e7111205602897da477a2ca2c6da8d6ed"}, @NFTA_TABLE_USERDATA={0x75, 0x6, "7797010564856d8f3563049e64ccfed777db847832e3c14568f2e2c78c59b3698dad6a2ae927c8d724c87585bd07c2afdbaf564af2c9f3ed0beda0f0fac5ff2cd1d422d960aae88be582071364628ec5ee21a581390001e7a5aaf2b3d914171f6cd435f33b1dd77ad15e44d8c178daaf47"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x2418}}, 0x0) 7.103380451s ago: executing program 7 (id=2338): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/61, 0x3d}], 0x1) 6.695054504s ago: executing program 0 (id=2339): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x40000002008d, 0x4) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x20004084) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001100010000ff0f000000000007000000", @ANYRES32=r1, @ANYBLOB="80010000091004000c001a800800058004"], 0x2c}}, 0x0) 5.916760772s ago: executing program 9 (id=2340): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x38}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 5.060967448s ago: executing program 1 (id=2341): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="3e8bbce90da45d7ed1572ed4e0220406f87b0024292bc6317c6dfe38358847e22efa978944d1bc5cc5d340c8f4156cbaa91845aa78f654ca47efbfdd569b0ce9b642fb44f832c0f80c9cda639db97065d537f2d6a8e996375498bdb199410300000000000000de41b1f74db52f6836b6765ebb7fab2e6f22d27ad6340ffbcd71b70ef5683dfeb022614681c9e3762a3ad5f84751ca94e35039796705cadae08ee170149049bca1061336755d0e4ab0454262699a2e46cd90a2374f0e7201efe43a4d614461f3e841", 0xc8}, {&(0x7f0000000240)="94d7d7a1db0e7c00000000000037da1eb2d3be4c8581ee5ce7b53e010cf8bb6f46912bb58c43579721a5948a1353a77b3066cd0caa0a78b2edee2403377d045db0f55f896ab86783c2af6f861927ef79ad5c573823a36c095b86b69ccb0900c0de4c9ee8da3075f0a855c3a49963522b4a61e6f55a0a3d4bda99db1934677b8b603eb81f0d63d82566a28e5babde509deac559bfc3", 0x95}, {&(0x7f0000000580)="2e883e9a4c8571413e19a030859f01d51d868014e8afa711c9401eb7b10fd9d6dd37162995f0f9ae05bfcfda99366330b11352bc6257d0adac38a47379b287f2cbe6491ccc7d9f026464c908785a536a05c26d2bbabb0ba226f64c770565d7c467747bf22734856574d41302", 0x6c}], 0x3}, 0x547052430a225ce3) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) close(r1) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/208, 0xd0}], 0x1}, 0x1) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0xfc, 0x0, 0x0, 0xff], 0x0, [0x1, 0xfff3, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) 4.761613257s ago: executing program 0 (id=2342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x1000002, @empty, 0x19}}, 0x7, 0x8000}, 0x90) writev(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x80020}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000034c0)='\x00', 0x1}, {0x0}], 0x2}}], 0x1, 0x10) 4.281585736s ago: executing program 9 (id=2343): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x437, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4840c}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}]}}}]}, 0x44}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000c80)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x8012, 0x0, 0xfffffffffffffe2d) 3.820958529s ago: executing program 3 (id=2344): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000200)=@in4={0x21, 0x7, 0x2, 0x2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 3.025251748s ago: executing program 3 (id=2345): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x70170b405cc25fb9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x2000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xd73, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xd5f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 3.025081204s ago: executing program 7 (id=2346): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r1) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0xc39}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LBT_ENABLED={0x5}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x40}]}, 0x40}, 0x1, 0x0, 0x0, 0x25000}, 0x40880) 2.996455547s ago: executing program 0 (id=2347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x4a, &(0x7f0000000240)=0xc04, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x16, 0x8, 0x40, 0x56, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'vcan0\x00', 0x200}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) 2.499368765s ago: executing program 1 (id=2348): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 9 (id=2349): socket(0x2a, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, 0x0, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x2c}}, 0x400400c) kernel console output (not intermixed with test programs): syz [ 858.345729][ T5680] usb 7-1: Manufacturer: syz [ 858.367333][ T5680] usb 7-1: SerialNumber: syz [ 858.422037][ T5680] usb 7-1: config 0 descriptor?? [ 858.993198][ T5680] usb 7-1: USB disconnect, device number 11 [ 860.459817][T10826] loop6: detected capacity change from 0 to 256 [ 862.690656][ T5680] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 862.792348][T10846] loop7: detected capacity change from 0 to 256 [ 862.963341][ T5680] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 863.012286][ T5680] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.063622][ T5680] usb 7-1: Product: syz [ 863.105312][ T5680] usb 7-1: Manufacturer: syz [ 863.131908][ T5680] usb 7-1: SerialNumber: syz [ 863.273087][T10846] FAT-fs (loop7): Directory bread(block 64) failed [ 863.318151][T10846] FAT-fs (loop7): Directory bread(block 65) failed [ 863.338059][T10846] FAT-fs (loop7): Directory bread(block 66) failed [ 863.395534][T10846] FAT-fs (loop7): Directory bread(block 67) failed [ 863.446311][T10846] FAT-fs (loop7): Directory bread(block 68) failed [ 863.448659][ T5680] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 863.490027][T10846] FAT-fs (loop7): Directory bread(block 69) failed [ 863.551013][ T5680] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 863.562463][T10846] FAT-fs (loop7): Directory bread(block 70) failed [ 863.594936][T10743] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.610782][ T5680] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 863.616915][T10846] FAT-fs (loop7): Directory bread(block 71) failed [ 863.640696][T10743] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.681587][T10846] FAT-fs (loop7): Directory bread(block 72) failed [ 863.689100][T10743] bridge_slave_0: entered allmulticast mode [ 863.740337][T10846] FAT-fs (loop7): Directory bread(block 73) failed [ 863.752503][ T5680] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 863.769462][T10743] bridge_slave_0: entered promiscuous mode [ 863.876911][T10743] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.893004][ T5680] usb 7-1: USB disconnect, device number 12 [ 863.925639][T10743] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.972336][T10743] bridge_slave_1: entered allmulticast mode [ 864.026528][T10743] bridge_slave_1: entered promiscuous mode [ 864.663336][T10743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.783582][T10743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.374030][T10743] team0: Port device team_slave_0 added [ 865.455697][T10743] team0: Port device team_slave_1 added [ 865.590691][ T9875] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 865.807526][ T9875] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.844852][ T5680] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 865.873927][ T9875] usb 8-1: config 0 interface 0 has no altsetting 0 [ 865.901793][ T9875] usb 8-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 865.932376][T10743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.948924][ T9875] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.978929][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.032326][ T9875] usb 8-1: config 0 descriptor?? [ 866.052678][ T5680] usb 1-1: Using ep0 maxpacket: 8 [ 866.086427][T10743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.111093][ T5680] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.134985][ T5680] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 866.195018][ T5680] usb 1-1: New USB device found, idVendor=0738, idProduct=1713, bcdDevice= 0.00 [ 866.210354][ T5673] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 866.218361][ T5680] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.241931][T10743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.275276][T10743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.299908][ T5680] usb 1-1: config 0 descriptor?? [ 866.422387][T10743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.450675][ T5673] usb 7-1: Using ep0 maxpacket: 8 [ 866.535800][ T9875] greenasia 0003:0E8F:0012.001E: unknown main item tag 0x0 [ 866.569495][ T9875] greenasia 0003:0E8F:0012.001E: unknown main item tag 0x0 [ 866.646916][ T9655] usb 1-1: USB disconnect, device number 53 [ 866.661583][ T9875] greenasia 0003:0E8F:0012.001E: unknown main item tag 0x0 [ 866.719354][ T9875] greenasia 0003:0E8F:0012.001E: unknown main item tag 0x0 [ 866.803098][ T9875] greenasia 0003:0E8F:0012.001E: unknown main item tag 0x0 [ 866.875382][ T9875] greenasia 0003:0E8F:0012.001E: unknown main item tag 0x0 [ 866.925748][ T9875] greenasia 0003:0E8F:0012.001E: unexpected long global item [ 866.937495][ T5673] usb 7-1: unable to get BOS descriptor or descriptor too short [ 866.972855][ T5673] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 867.010360][ T9875] greenasia 0003:0E8F:0012.001E: parse failed [ 867.027446][ T5673] usb 7-1: can't read configurations, error -71 [ 867.054970][ T9875] greenasia 0003:0E8F:0012.001E: probe with driver greenasia failed with error -22 [ 867.140092][ T9875] usb 8-1: USB disconnect, device number 2 [ 867.387291][T10743] hsr_slave_0: entered promiscuous mode [ 867.418256][T10743] hsr_slave_1: entered promiscuous mode [ 867.461777][T10743] debugfs: 'hsr0' already exists in 'hsr' [ 867.467947][T10743] Cannot create hsr debugfs directory [ 869.406974][ T5231] 8021q: adding VLAN 0 to HW filter on device eth9 [ 870.030407][ T5673] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 870.308191][ T5673] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 870.359421][ T5673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.407361][T10743] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 870.419269][ T5673] usb 2-1: Product: syz [ 870.439200][ T5673] usb 2-1: Manufacturer: syz [ 870.466224][ T5673] usb 2-1: SerialNumber: syz [ 870.547350][T10743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.611963][T10743] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 870.744247][T10743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.774539][ T5673] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 870.835799][T10743] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 870.859218][ T5673] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 870.907691][T10743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.921682][ T5673] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 870.995107][T10743] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 871.058804][ T5673] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 871.145303][T10743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 871.192205][ T5673] usb 2-1: USB disconnect, device number 42 [ 872.637664][T10915] loop0: detected capacity change from 0 to 256 [ 872.890761][T10915] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 872.984359][T10915] exFAT-fs (loop0): failed to load alloc-bitmap [ 873.072059][T10915] exFAT-fs (loop0): failed to recognize exfat type [ 874.393368][T10743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.912164][T10743] 8021q: adding VLAN 0 to HW filter on device team0 [ 875.070482][ T9868] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.078268][ T9868] bridge0: port 1(bridge_slave_0) entered forwarding state [ 875.274850][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.282648][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.358541][T10933] loop6: detected capacity change from 0 to 16 [ 875.554348][T10933] erofs (device loop6): invalid ishare xattr prefix id 0 [ 876.047941][T10933] loop6: detected capacity change from 0 to 512 [ 876.183613][T10933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 876.342930][T10933] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 876.632814][T10933] EXT4-fs (loop6): 1 truncate cleaned up [ 876.709465][T10933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 877.763928][ T5231] 8021q: adding VLAN 0 to HW filter on device eth10 [ 879.853900][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.865560][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.932223][ T5673] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 880.203401][ T5673] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 880.255253][ T5673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.290050][ T5673] usb 2-1: Product: syz [ 880.305280][T10972] loop0: detected capacity change from 0 to 256 [ 880.305946][ T5673] usb 2-1: Manufacturer: syz [ 880.340822][ T5673] usb 2-1: SerialNumber: syz [ 880.637856][ T5673] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 880.728450][ T5673] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 880.805156][ T5673] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 880.982365][ T5673] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 881.182918][ T5673] usb 2-1: USB disconnect, device number 43 [ 881.276318][T10978] loop7: detected capacity change from 0 to 512 [ 881.594092][T10978] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.651544][T10978] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 881.744018][T10983] loop0: detected capacity change from 0 to 512 [ 881.942405][T10983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 881.995567][T10983] ext4 filesystem being mounted at /352/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 882.510693][T10992] loop1: detected capacity change from 0 to 1024 [ 882.573842][T10992] EXT4-fs: inline encryption not supported [ 882.689114][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.737210][T10992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 882.914976][ T29] audit: type=1800 audit(1781622187.047:142): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1592" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 883.036026][T10743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.656615][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.044250][ T5231] 8021q: adding VLAN 0 to HW filter on device eth11 [ 885.075451][T10385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.742747][ T5684] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 885.974148][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 886.023411][ T5684] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 886.093972][ T5684] usb 2-1: config 1 has no interface number 0 [ 886.124507][ T5684] usb 2-1: config 1 interface 138 altsetting 6 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 886.190152][ T5684] usb 2-1: config 1 interface 138 has no altsetting 0 [ 886.248696][ T5684] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=62.f5 [ 886.276557][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.325101][ T5684] usb 2-1: Product: syz [ 886.344946][ T5684] usb 2-1: Manufacturer: syz [ 886.369986][ T5684] usb 2-1: SerialNumber: syz [ 886.816735][ T5684] rtl8150 2-1:1.138: couldn't find required endpoints [ 886.860982][ T5684] rtl8150 2-1:1.138: probe with driver rtl8150 failed with error -5 [ 886.965910][ T5684] usb 2-1: USB disconnect, device number 44 [ 886.975137][T10743] veth0_vlan: entered promiscuous mode [ 887.237986][T10743] veth1_vlan: entered promiscuous mode [ 887.525604][ T9799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.015043][T10743] veth0_macvtap: entered promiscuous mode [ 888.225436][T10743] veth1_macvtap: entered promiscuous mode [ 888.600678][ T5684] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 888.687441][T10743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.868590][ T5684] usb 8-1: config 1 interface 0 altsetting 13 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 888.933306][T10743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 888.943309][ T5684] usb 8-1: config 1 interface 0 has no altsetting 0 [ 889.006520][ T5684] usb 8-1: string descriptor 0 read error: -22 [ 889.043867][ T5684] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 889.080136][ T5684] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.152172][ T9868] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.208777][ T5699] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.276045][ T5699] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.337627][ T5699] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.808997][ T5684] keytouch 0003:0926:3333.001F: fixing up Keytouch IEC report descriptor [ 889.904097][T11045] loop6: detected capacity change from 0 to 128 [ 889.949288][ T5684] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/0003:0926:3333.001F/input/input28 [ 890.282619][ T5684] keytouch 0003:0926:3333.001F: input,hidraw0: USB HID v0.05 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 890.414710][ T5684] usb 8-1: USB disconnect, device number 3 [ 890.437009][T11047] loop1: detected capacity change from 0 to 1024 [ 890.498098][T11047] EXT4-fs: Ignoring removed bh option [ 890.629138][T11047] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 890.876419][T11047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 891.744980][T11054] fido_id[11054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 893.317041][ T5231] 8021q: adding VLAN 0 to HW filter on device eth12 [ 894.358311][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 897.866777][T11104] loop0: detected capacity change from 0 to 1024 [ 898.035924][T11104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 898.917893][T11112] loop6: detected capacity change from 0 to 4096 [ 898.991573][T11112] EXT4-fs (loop6): Test dummy encryption mode enabled [ 899.045758][T11112] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 899.145505][T11112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 899.513118][ T5673] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 899.710047][ T5673] usb 7-1: Using ep0 maxpacket: 32 [ 899.758149][ T5673] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 899.786100][ T5673] usb 7-1: config 0 has no interface number 0 [ 899.795827][ T5673] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 899.828274][ T5673] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 98, changing to 10 [ 899.878824][ T5673] usb 7-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 9315, setting to 1024 [ 899.914380][ T5673] usb 7-1: config 0 interface 196 has no altsetting 0 [ 899.963326][ T5673] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 900.020175][ T5673] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.059768][ T5673] usb 7-1: Product: syz [ 900.072630][ T5673] usb 7-1: Manufacturer: syz [ 900.087974][ T5673] usb 7-1: SerialNumber: syz [ 900.142939][ T5673] usb 7-1: config 0 descriptor?? [ 900.188761][T11112] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 900.251249][T11112] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 900.480243][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.543037][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.667102][ T5673] ipheth 7-1:0.196: Unable to find endpoints [ 900.780189][ T5673] usb 7-1: USB disconnect, device number 15 [ 900.954881][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.014679][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.656146][ T9799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.270646][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.578647][T11130] loop8: detected capacity change from 0 to 512 [ 902.650057][T11130] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 903.100317][ T5680] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 903.338807][ T5680] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 903.385722][ T5680] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 903.486735][ T5680] usb 9-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 903.558556][ T5680] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.616045][ T5680] usb 9-1: Product: syz [ 903.659505][ T5680] usb 9-1: Manufacturer: syz [ 903.706180][ T5680] usb 9-1: SerialNumber: syz [ 903.787407][ T5680] usb 9-1: config 0 descriptor?? [ 903.867059][T11130] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 903.928276][T11130] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 904.209504][T11130] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 904.281663][T11130] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 904.545080][ T29] audit: type=1326 audit(1781622208.687:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.7.1623" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000 [ 904.669065][ T29] audit: type=1326 audit(1781622208.757:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.7.1623" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000 [ 904.794504][ T29] audit: type=1326 audit(1781622208.887:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.7.1623" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f3301c code=0x7ffc0000 [ 904.874254][ T29] audit: type=1326 audit(1781622208.887:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.7.1623" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000 [ 904.994102][ T29] audit: type=1326 audit(1781622208.907:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11146 comm="syz.7.1623" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3301c code=0x7ffc0000 [ 905.268023][T11152] syzkaller0: entered promiscuous mode [ 905.311463][T11152] syzkaller0: entered allmulticast mode [ 905.455793][T11154] tipc: Started in network mode [ 905.518964][T11154] tipc: Node identity 6eb14e2232e3, cluster identity 4711 [ 905.578278][T11154] tipc: Enabled bearer , priority 0 [ 905.653051][T11151] tipc: Resetting bearer [ 905.804303][T11151] tipc: Disabling bearer [ 906.371057][ T5680] Error reading MAC address [ 906.532225][ T5680] usb 9-1: USB disconnect, device number 2 [ 907.289435][T11170] loop8: detected capacity change from 0 to 256 [ 907.480668][ T5680] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 907.699946][ T5680] usb 7-1: Using ep0 maxpacket: 32 [ 907.770279][ T5680] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 907.815787][ T5680] usb 7-1: config 0 has no interface number 0 [ 907.855315][ T5680] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 907.961915][ T5680] usb 7-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 908.137290][ T5680] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 908.208032][ T5680] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 908.263604][ T5680] usb 7-1: Product: syz [ 908.285242][ T5680] usb 7-1: Manufacturer: syz [ 908.312472][ T5680] usb 7-1: SerialNumber: syz [ 908.389514][ T5680] usb 7-1: config 0 descriptor?? [ 908.942744][ T5680] radio-si470x 7-1:0.35: this is not a si470x device. [ 909.023644][ T5680] radio-raremono 7-1:0.35: this is not Thanko's Raremono. [ 909.131451][ T5680] usb 7-1: USB disconnect, device number 16 [ 910.717181][T11182] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.725619][T11182] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.375069][T11182] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 912.538392][T11182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.952029][ T14] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.027771][ T14] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.108389][ T14] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.200513][ T14] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.658312][T11212] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 917.849874][T11212] usb 8-1: Using ep0 maxpacket: 32 [ 917.907518][T11212] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 917.958804][T11212] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 917.977072][T11249] loop1: detected capacity change from 0 to 512 [ 918.013860][T11212] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 918.060131][T11212] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 918.134399][T11212] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 918.151307][T11249] ext4: Unknown parameter 'context' [ 918.220263][T11212] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 918.308855][T11212] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 918.338599][T11253] loop0: detected capacity change from 0 to 256 [ 918.367274][T11212] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.463461][T11212] usb 8-1: config 0 descriptor?? [ 918.827690][T11253] FAT-fs (loop0): Directory bread(block 64) failed [ 918.878219][T11253] FAT-fs (loop0): Directory bread(block 65) failed [ 918.938510][T11253] FAT-fs (loop0): Directory bread(block 66) failed [ 919.000160][T11253] FAT-fs (loop0): Directory bread(block 67) failed [ 919.056114][T11212] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 919.074997][T11253] FAT-fs (loop0): Directory bread(block 68) failed [ 919.133730][T11253] FAT-fs (loop0): Directory bread(block 69) failed [ 919.216511][T11253] FAT-fs (loop0): Directory bread(block 70) failed [ 919.268778][T11253] FAT-fs (loop0): Directory bread(block 71) failed [ 919.345258][T11253] FAT-fs (loop0): Directory bread(block 72) failed [ 919.382624][T11212] usb 8-1: USB disconnect, device number 4 [ 919.389374][T11253] FAT-fs (loop0): Directory bread(block 73) failed [ 919.506202][T11212] usblp0: removed [ 919.685651][ T29] audit: type=1800 audit(1781622223.827:148): pid=11253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1647" name="file1" dev="loop0" ino=1048672 res=0 errno=0 [ 919.727281][T11253] syz.0.1647: attempt to access beyond end of device [ 919.727281][T11253] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 919.741989][T11253] syz.0.1647: attempt to access beyond end of device [ 919.741989][T11253] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 919.774447][T11253] syz.0.1647: attempt to access beyond end of device [ 919.774447][T11253] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 919.833895][ T29] audit: type=1800 audit(1781622223.857:149): pid=11253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1647" name="file1" dev="loop0" ino=1048672 res=0 errno=0 [ 919.921687][T11253] syz.0.1647: attempt to access beyond end of device [ 919.921687][T11253] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 920.033630][T11253] syz.0.1647: attempt to access beyond end of device [ 920.033630][T11253] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 920.135542][T11253] syz.0.1647: attempt to access beyond end of device [ 920.135542][T11253] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 920.207248][T11253] syz.0.1647: attempt to access beyond end of device [ 920.207248][T11253] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 920.284652][T11253] syz.0.1647: attempt to access beyond end of device [ 920.284652][T11253] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 920.398670][T11253] syz.0.1647: attempt to access beyond end of device [ 920.398670][T11253] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 920.471622][T11252] syz.0.1647: attempt to access beyond end of device [ 920.471622][T11252] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 922.651086][T11212] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 922.851627][T11212] usb 8-1: Using ep0 maxpacket: 32 [ 922.882381][ T5578] Bluetooth: hci1: command 0x0406 tx timeout [ 922.937437][T11212] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 922.990306][T11212] usb 8-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 923.058323][T11212] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.137101][T11212] usb 8-1: config 0 descriptor?? [ 923.678852][T11212] zeroplus 0003:0C12:0030.0020: unknown main item tag 0x3 [ 923.730147][T11212] zeroplus 0003:0C12:0030.0020: ignoring exceeding usage max [ 923.903297][T11212] zeroplus 0003:0C12:0030.0020: hidraw0: USB HID v0.81 Device [HID 0c12:0030] on usb-dummy_hcd.7-1/input0 [ 924.007547][T11212] zeroplus 0003:0C12:0030.0020: no inputs found [ 924.114097][T11298] loop0: detected capacity change from 0 to 512 [ 924.114170][T11212] usb 8-1: USB disconnect, device number 5 [ 924.187081][T11298] EXT4-fs: Ignoring removed i_version option [ 924.260745][T11298] EXT4-fs: Ignoring removed bh option [ 924.479887][T11298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 924.499446][T11298] ext4 filesystem being mounted at /366/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 924.668139][T11298] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 924.719252][T11298] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 925.062245][T11300] fido_id[11300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 925.467452][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.485614][T11200] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 925.706410][T11317] loop7: detected capacity change from 0 to 512 [ 925.778171][T11200] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 925.797264][T11317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 925.842471][T11317] EXT4-fs: inline encryption not supported [ 925.868112][T11200] usb 9-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 925.924350][T11200] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.958491][T11317] EXT4-fs (loop7): Test dummy encryption mode enabled [ 925.980122][T11200] usb 9-1: Product: syz [ 926.005599][T11200] usb 9-1: Manufacturer: syz [ 926.038513][T11200] usb 9-1: SerialNumber: syz [ 926.057429][T11317] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.1662: corrupted in-inode xattr: invalid ea_ino [ 926.100983][T11317] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 926.109762][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 926.125910][ C0] EXT4-fs (loop7): initial error at time 1781622230: ext4_iget_extra_inode:5128: inode 15 [ 926.136380][ C0] EXT4-fs (loop7): last error at time 1781622230: ext4_iget_extra_inode:5128: inode 15 [ 926.242666][T11317] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1662: couldn't read orphan inode 15 (err -117) [ 926.334700][T11317] loop7: lost filesystem error report for type 5 error -117 [ 926.347725][T11317] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 926.535289][T11200] usb 9-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 926.577550][T11317] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #13: comm syz.7.1662: corrupted inode contents [ 926.674293][T11317] EXT4-fs error (device loop7): ext4_dirty_inode:6587: inode #13: comm syz.7.1662: mark_inode_dirty error [ 926.794056][T11317] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.1662: invalid indirect mapped block 234881024 (level 0) [ 926.876871][T11317] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #13: comm syz.7.1662: corrupted inode contents [ 926.956195][T11317] EXT4-fs error (device loop7): ext4_truncate:4690: inode #13: comm syz.7.1662: mark_inode_dirty error [ 927.036523][T11317] EXT4-fs error (device loop7) in ext4_setattr:6120: Corrupt filesystem [ 927.117558][T11323] EXT4-fs error (device loop7): ext4_do_update_inode:5690: inode #13: comm syz.7.1662: corrupted inode contents [ 927.291712][T11200] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 927.428467][T11200] usb 9-1: USB disconnect, device number 3 [ 927.704695][T10385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 928.007374][T11314] udevd[11314]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.300937][T11200] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 929.491799][T11200] usb 1-1: Using ep0 maxpacket: 32 [ 929.551981][T11200] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 929.622464][T11200] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 929.669397][T11200] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.715757][T11200] usb 1-1: Product: syz [ 929.735182][T11200] usb 1-1: Manufacturer: syz [ 929.752802][T11200] usb 1-1: SerialNumber: syz [ 929.826622][T11200] cdc_ncm 1-1:1.0: skipping garbage [ 930.193363][T11198] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 930.413119][T11198] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 64 [ 930.452585][T11198] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 930.494651][T11198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.574480][T11346] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 930.913631][T11200] cdc_ncm 1-1:1.0: bind() failure [ 931.030982][T11200] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 931.082630][T11200] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 931.137646][T11200] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 931.212896][T11200] usb 1-1: USB disconnect, device number 54 [ 931.688868][T11198] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 931.732381][T11198] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input29 [ 932.066524][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 932.075298][T11198] usb 2-1: USB disconnect, device number 45 [ 933.298089][T11360] loop0: detected capacity change from 0 to 4096 [ 933.360908][T11360] EXT4-fs: inline encryption not supported [ 933.435727][T11360] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 933.504347][T11360] EXT4-fs (loop0): Test dummy encryption mode enabled [ 933.563690][T11360] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 933.681063][T11360] System zones: 0-5 [ 933.703775][T11360] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.005593][T11360] fscrypt (loop0): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 934.663156][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.495090][T11381] loop1: detected capacity change from 0 to 512 [ 935.701638][T11381] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.718894][T11383] loop0: detected capacity change from 0 to 512 [ 935.756674][T11381] EXT4-fs error (device loop1): ext4_readdir:225: inode #12: comm syz.1.1677: path /347/file0/file0: directory fails checksum at offset 0 [ 935.825868][T11383] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 935.848639][T11383] EXT4-fs (loop0): Remounting filesystem read-only [ 935.855695][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 935.855789][ C1] EXT4-fs (loop0): initial error at time 1781622239: ext4_mb_generate_buddy:1317 [ 935.855926][ C1] EXT4-fs (loop0): last error at time 1781622239: ext4_mb_generate_buddy:1317 [ 935.888970][T11383] EXT4-fs (loop0): 1 truncate cleaned up [ 935.909876][ T9868] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 935.950475][T11383] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.025128][ T9868] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 936.087491][ T9868] Quota error (device loop0): write_blk: dquota write failed [ 936.097479][T11383] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 936.149073][ T9868] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 936.218014][ T9868] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 936.267066][ T9868] Quota error (device loop0): write_blk: dquota write failed [ 936.298385][ T9868] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 936.362866][ T9868] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 936.420341][ T9868] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 936.472089][ T9868] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 936.524132][ T9868] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 936.604061][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.719349][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 937.013745][T11390] loop6: detected capacity change from 0 to 256 [ 938.492495][T11399] loop0: detected capacity change from 0 to 512 [ 938.593639][T11399] EXT4-fs (loop0): orphan cleanup on readonly fs [ 938.625326][T11399] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.1682: corrupted in-inode xattr: invalid ea_ino [ 938.732149][T11399] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 938.736169][T11399] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1682: couldn't read orphan inode 15 (err -117) [ 938.746030][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 938.746143][ C0] EXT4-fs (loop0): initial error at time 1781622242: ext4_iget_extra_inode:5128: inode 15 [ 938.746321][ C0] EXT4-fs (loop0): last error at time 1781622242: ext4_iget_extra_inode:5128: inode 15 [ 938.877947][T11399] loop0: lost filesystem error report for type 5 error -117 [ 938.924459][T11399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 939.586527][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 940.617230][T11413] loop6: detected capacity change from 0 to 256 [ 941.055833][T11198] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 941.304241][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.321528][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.344368][T11198] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 941.383692][T11198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.424906][T11198] usb 9-1: Product: syz [ 941.458376][T11198] usb 9-1: Manufacturer: syz [ 941.480858][T11198] usb 9-1: SerialNumber: syz [ 942.337132][T11424] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 942.465868][T11428] loop7: detected capacity change from 0 to 128 [ 942.685253][T11428] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 942.699050][T11428] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 943.716416][T10385] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 944.067455][T11198] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 944.067733][T11198] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 944.067869][T11198] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 944.146416][T11198] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 944.253867][T11198] usb 9-1: USB disconnect, device number 4 [ 944.752336][ T5680] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 944.920963][ T5680] usb 8-1: Using ep0 maxpacket: 16 [ 944.938384][ T5680] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 944.938532][ T5680] usb 8-1: config 0 has no interface number 0 [ 944.938663][ T5680] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 944.938838][ T5680] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 944.939069][ T5680] usb 8-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 944.939221][ T5680] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.975523][ T5680] usb 8-1: config 0 descriptor?? [ 945.735590][ T5680] uclogic 0003:28BD:0071.0021: pen parameters not found [ 945.735807][ T5680] uclogic 0003:28BD:0071.0021: interface is invalid, ignoring [ 945.803318][ T5680] usb 8-1: USB disconnect, device number 6 [ 946.642023][T11460] loop8: detected capacity change from 0 to 512 [ 947.209165][T11464] loop7: detected capacity change from 0 to 512 [ 947.343996][T11464] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.1704: inode has both inline data and extents flags [ 947.430802][T11464] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 947.432946][T11464] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.1704: couldn't read orphan inode 15 (err -117) [ 947.442958][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 947.443028][ C1] EXT4-fs (loop7): initial error at time 1781622251: ext4_orphan_get:1397: inode 15 [ 947.443153][ C1] EXT4-fs (loop7): last error at time 1781622251: ext4_orphan_get:1397: inode 15 [ 947.520339][T11464] loop7: lost filesystem error report for type 5 error -117 [ 947.702467][T11464] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 947.984850][ T29] audit: type=1800 audit(1781622252.127:150): pid=11464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1704" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 948.107933][ T29] audit: type=1804 audit(1781622252.187:151): pid=11464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1704" name="/newroot/37/file0/file1" dev="loop7" ino=18 res=1 errno=0 [ 948.420420][T11198] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 948.718345][T11198] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 948.747226][T11198] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.776574][T11198] usb 7-1: Product: syz [ 948.790269][T11198] usb 7-1: Manufacturer: syz [ 948.812715][T11198] usb 7-1: SerialNumber: syz [ 948.957683][T11485] loop1: detected capacity change from 0 to 512 [ 949.060623][T11485] EXT4-fs: Ignoring removed mblk_io_submit option [ 949.091856][T10385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.146408][T11485] EXT4-fs (loop1): orphan cleanup on readonly fs [ 949.178440][T11485] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 949.234228][T11485] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1709: attempt to clear invalid blocks 2 len 1 [ 949.308367][T11485] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 949.309740][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 949.325970][ C1] EXT4-fs (loop1): initial error at time 1781622253: ext4_clear_blocks:876: inode 13 [ 949.335900][ C1] EXT4-fs (loop1): last error at time 1781622253: ext4_clear_blocks:876: inode 13 [ 949.386582][T11485] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 949.434904][T11485] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1709: invalid indirect mapped block 1819239214 (level 0) [ 949.549343][T11485] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 949.565929][T11485] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1709: invalid indirect mapped block 1819239214 (level 1) [ 949.663818][T11485] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 949.674435][T11491] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1710'. [ 949.715085][T11485] EXT4-fs (loop1): 1 truncate cleaned up [ 949.729107][T11485] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 950.060774][T11212] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 950.226292][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.316621][T11212] usb 9-1: unable to get BOS descriptor or descriptor too short [ 950.365686][T11212] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 950.405191][T11212] usb 9-1: can't read configurations, error -71 [ 950.497870][T11495] loop7: detected capacity change from 0 to 512 [ 950.613170][T11495] ext4: Unknown parameter 'context' [ 950.782036][T11198] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 950.840804][T11198] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 950.906144][T11198] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 951.011881][T11198] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 951.115908][T11198] usb 7-1: USB disconnect, device number 17 [ 951.856470][T11506] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 952.052116][T11508] loop1: detected capacity change from 0 to 16 [ 952.076445][T11508] erofs (device loop1): invalid ishare xattr prefix id 0 [ 952.493020][T11503] loop6: detected capacity change from 0 to 8192 [ 952.791703][T11504] [U]  [ 954.998595][T11531] overlayfs: overlapping lowerdir path [ 956.160917][ T5680] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 956.363839][T11540] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1726'. [ 956.442951][ T5680] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 956.507181][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.575938][ T5680] usb 2-1: Product: syz [ 956.603275][ T5680] usb 2-1: Manufacturer: syz [ 956.637897][ T5680] usb 2-1: SerialNumber: syz [ 956.792036][T11212] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 957.044665][T11212] usb 9-1: unable to get BOS descriptor or descriptor too short [ 957.107656][T11212] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 957.165717][T11212] usb 9-1: can't read configurations, error -71 [ 958.567463][T11548] loop0: detected capacity change from 0 to 1024 [ 958.838555][T11548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 958.891593][ T5680] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 958.972614][ T5680] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 958.991027][T11548] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 959.035300][ T5680] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 959.182281][ T29] audit: type=1800 audit(1781622263.327:152): pid=11548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1729" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 959.232903][ T5680] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 959.419393][ T5680] usb 2-1: USB disconnect, device number 46 [ 959.727343][T11556] loop1: detected capacity change from 0 to 256 [ 960.818793][T11553] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 960.917776][T11553] EXT4-fs (loop0): Remounting filesystem read-only [ 962.458027][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 963.450891][T11570] loop0: detected capacity change from 0 to 1024 [ 963.480712][T11570] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 963.605303][T11563] [U]  [ 964.182534][T11554] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 964.506506][T11575] loop0: detected capacity change from 0 to 512 [ 965.207916][T11577] loop8: detected capacity change from 0 to 256 [ 965.472425][T11577] FAT-fs (loop8): Directory bread(block 64) failed [ 965.505641][T11577] FAT-fs (loop8): Directory bread(block 65) failed [ 965.539288][T11577] FAT-fs (loop8): Directory bread(block 66) failed [ 965.613629][T11577] FAT-fs (loop8): Directory bread(block 67) failed [ 965.636364][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1740'. [ 965.658444][T11577] FAT-fs (loop8): Directory bread(block 68) failed [ 965.698128][T11577] FAT-fs (loop8): Directory bread(block 69) failed [ 965.749333][T11577] FAT-fs (loop8): Directory bread(block 70) failed [ 965.784609][T11577] FAT-fs (loop8): Directory bread(block 71) failed [ 965.811236][T11577] FAT-fs (loop8): Directory bread(block 72) failed [ 965.838775][T11577] FAT-fs (loop8): Directory bread(block 73) failed [ 966.001372][T11212] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 966.136856][ T29] audit: type=1800 audit(1781622270.277:153): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1738" name="file1" dev="loop8" ino=1048676 res=0 errno=0 [ 966.167354][T11577] bio_check_eod: 17 callbacks suppressed [ 966.167439][T11577] syz.8.1738: attempt to access beyond end of device [ 966.167439][T11577] loop8: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 966.349803][T11212] usb 2-1: unable to get BOS descriptor or descriptor too short [ 966.378524][T11212] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 966.395296][T11212] usb 2-1: can't read configurations, error -71 [ 966.477083][ T5680] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 966.702758][ T5680] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 966.753030][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.783609][ T5680] usb 1-1: Product: syz [ 966.799765][ T5680] usb 1-1: Manufacturer: syz [ 966.818260][ T5680] usb 1-1: SerialNumber: syz [ 966.932604][T11594] overlayfs: missing 'lowerdir' [ 967.104037][ T5680] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 967.172652][ T5680] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 967.214436][ T5680] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 967.308332][ T5680] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 967.457088][ T5680] usb 1-1: USB disconnect, device number 55 [ 968.482538][T11610] loop0: detected capacity change from 0 to 256 [ 968.540609][T11610] exfat: Deprecated parameter 'utf8' [ 968.593667][T11610] exfat: Deprecated parameter 'utf8' [ 968.625753][T11610] exfat: Deprecated parameter 'namecase' [ 968.668422][T11610] exfat: Deprecated parameter 'utf8' [ 968.900426][T11610] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 970.193349][T11613] loop8: detected capacity change from 0 to 8192 [ 970.268608][T11613] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 970.842024][T11614] [U]  [ 971.244968][T11617] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 971.245113][T11617] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 974.079913][ T5578] Bluetooth: hci3: command 0x0406 tx timeout [ 976.044902][T11624] bridge0: entered promiscuous mode [ 976.086651][T11623] bridge0: left promiscuous mode [ 976.780201][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1756'. [ 976.791282][T11200] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 976.980152][T11200] usb 7-1: Using ep0 maxpacket: 16 [ 977.027934][T11200] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.077380][T11200] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.121647][ T5680] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 977.134123][T11200] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 977.185846][T11200] usb 7-1: New USB device found, idVendor=056a, idProduct=22b4, bcdDevice= 0.00 [ 977.233235][T11200] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.298870][T11200] usb 7-1: config 0 descriptor?? [ 977.388746][ T5680] usb 8-1: unable to get BOS descriptor or descriptor too short [ 977.425538][ T5680] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 977.458551][ T5680] usb 8-1: can't read configurations, error -71 [ 977.622965][T11636] loop0: detected capacity change from 0 to 2048 [ 977.870336][T11200] wacom 0003:056A:22B4.0022: unknown main item tag 0x7 [ 977.895584][T11200] wacom 0003:056A:22B4.0022: unknown main item tag 0x0 [ 977.929301][T11200] wacom 0003:056A:22B4.0022: unknown main item tag 0x1 [ 977.961654][T11638] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 977.973663][T11200] wacom 0003:056A:22B4.0022: reserved main item tag 0xd [ 978.087785][T11200] usb 7-1: USB disconnect, device number 18 [ 979.091459][T11642] loop7: detected capacity change from 0 to 2048 [ 979.250792][T11642] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 979.382262][ T29] audit: type=1800 audit(1781622283.517:154): pid=11642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1759" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 979.591247][T11649] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 979.797085][T10385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 981.152727][T11669] input: syz1 as /devices/virtual/input/input30 [ 981.265486][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1769'. [ 981.610146][ T5680] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 981.793488][ T5680] usb 9-1: unable to get BOS descriptor or descriptor too short [ 981.800297][ T5680] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 981.800477][ T5680] usb 9-1: can't read configurations, error -71 [ 982.182554][T11676] loop1: detected capacity change from 0 to 2048 [ 983.878057][T11683] loop6: detected capacity change from 0 to 8192 [ 985.481442][ T9655] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 985.663176][ T9655] usb 7-1: Using ep0 maxpacket: 8 [ 985.705176][ T9655] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 24, changing to 7 [ 985.785747][ T9655] usb 7-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 985.816747][ T9655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.855257][ T9655] usb 7-1: Product: syz [ 985.879478][ T9655] usb 7-1: Manufacturer: syz [ 985.898212][ T9655] usb 7-1: SerialNumber: syz [ 986.253606][ T9655] usb 7-1: 1:1 : invalid channels 0 [ 986.276884][ T9655] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 986.393259][T11713] netlink: 'syz.1.1783': attribute type 4 has an invalid length. [ 986.899884][ T9655] usb 7-1: USB disconnect, device number 19 [ 987.550275][T11438] udevd[11438]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 988.553886][T11725] loop1: detected capacity change from 0 to 512 [ 988.613436][T11725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 988.693180][T11725] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 988.985322][T11725] EXT4-fs (loop1): 1 truncate cleaned up [ 989.041828][T11725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 989.799896][ T5680] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 990.045181][ T5680] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 990.071533][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.100533][ T5680] usb 1-1: Product: syz [ 990.110756][ T5680] usb 1-1: Manufacturer: syz [ 990.120670][ T5680] usb 1-1: SerialNumber: syz [ 990.260763][T11739] loop6: detected capacity change from 0 to 4096 [ 990.333820][T11739] EXT4-fs (loop6): Test dummy encryption mode enabled [ 990.434888][ T5680] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 990.521191][T11739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 990.556174][ T5680] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 990.625685][ T5680] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 990.724998][ T5680] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 990.837954][ T5680] usb 1-1: USB disconnect, device number 56 [ 991.562381][T11739] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 991.819027][T11739] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 992.200682][ T9799] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 992.440952][T11748] loop0: detected capacity change from 0 to 4096 [ 992.512893][T11748] EXT4-fs (loop0): invalid inodes per group: 0 [ 992.512893][T11748] [ 993.448295][T11755] loop7: detected capacity change from 0 to 128 [ 993.896918][T11759] netlink: 'syz.0.1795': attribute type 4 has an invalid length. [ 994.647225][T11766] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 994.942050][T11771] loop6: detected capacity change from 0 to 256 [ 996.139066][T11784] loop8: detected capacity change from 0 to 512 [ 996.235550][T11784] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #15: comm syz.8.1803: inode has both inline data and extents flags [ 996.235708][T11784] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 996.239789][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 996.239898][ C1] EXT4-fs (loop8): initial error at time 1781622300: ext4_orphan_get:1397: inode 15 [ 996.240065][ C1] EXT4-fs (loop8): last error at time 1781622300: ext4_orphan_get:1397: inode 15 [ 996.247757][T11784] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.1803: couldn't read orphan inode 15 (err -117) [ 996.247918][T11784] loop8: lost filesystem error report for type 5 error -117 [ 996.263309][T11784] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 996.281637][ T9655] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 996.484466][ T9655] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 996.484633][ T9655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.484767][ T9655] usb 1-1: Product: syz [ 996.484871][ T9655] usb 1-1: Manufacturer: syz [ 996.484975][ T9655] usb 1-1: SerialNumber: syz [ 996.761304][ T9655] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 996.761580][ T9655] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 996.761717][ T9655] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 996.900973][ T9655] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 997.060153][ T9655] usb 1-1: USB disconnect, device number 57 [ 997.706435][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1804'. [ 998.201622][T10743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.039090][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 999.788611][T11798] loop8: detected capacity change from 0 to 128 [ 1000.779151][T11800] loop0: detected capacity change from 0 to 2048 [ 1000.791078][T11803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1807'. [ 1000.835638][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1808'. [ 1000.881957][T11803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1807'. [ 1000.901223][T11800] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1001.259074][T11800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.265936][T11804] loop7: detected capacity change from 0 to 512 [ 1001.457112][T11800] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1806: bg 0: block 2: invalid block bitmap [ 1001.568820][T11807] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1001.760553][T11804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1001.902773][T11804] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1002.564200][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1002.733560][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.740465][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1005.108299][T11823] loop8: detected capacity change from 0 to 128 [ 1005.680110][T11823] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 1005.706117][T10385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.216414][T11839] loop1: detected capacity change from 0 to 16 [ 1008.230568][T11839] erofs (device loop1): mounted with root inode @ nid 36. [ 1008.271838][T11830] [U]  [ 1008.459373][T11839] erofs (device loop1): readahead error at folio 2 @ nid 89 [ 1008.460429][T11839] syz.1.1821: attempt to access beyond end of device [ 1008.460429][T11839] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16 [ 1008.481017][T11839] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 4096 [ 1008.481195][T11839] erofs (device loop1): read error -117 @ 0 of nid 89 [ 1008.533682][ T29] audit: type=1800 audit(1781622312.627:155): pid=11839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1821" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 1009.390177][ T5680] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1009.616600][ T5680] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1009.616772][ T5680] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.616906][ T5680] usb 8-1: Product: syz [ 1009.617014][ T5680] usb 8-1: Manufacturer: syz [ 1009.617119][ T5680] usb 8-1: SerialNumber: syz [ 1011.228034][ T5680] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1011.228320][ T5680] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1011.228457][ T5680] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1011.348269][ T5680] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1011.610880][ T5680] usb 8-1: USB disconnect, device number 9 [ 1012.477526][T11848] loop1: detected capacity change from 0 to 128 [ 1013.869818][ T5578] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1013.885335][ T5578] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1013.900717][ T5578] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1013.925219][ T5578] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1013.941126][ T5578] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1014.773884][ T9655] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1015.011135][ T9655] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 1015.058283][ T9655] usb 2-1: config 0 has no interface number 1 [ 1015.083013][ T9655] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1015.135244][ T9655] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1015.220750][ T9655] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1015.271782][ T9655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1015.309412][ T9655] usb 2-1: SerialNumber: syz [ 1015.337827][ T9655] usb 2-1: config 0 descriptor?? [ 1015.684351][ T9655] uvcvideo 2-1:0.199: Found UVC 0.00 device (0002:0000) [ 1015.722457][ T9655] uvcvideo 2-1:0.199: No valid video chain found. [ 1015.950304][ T5680] usb 2-1: USB disconnect, device number 49 [ 1016.000285][ T5578] Bluetooth: hci5: command tx timeout [ 1016.009862][T11200] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1016.259317][T11200] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1016.284578][T11200] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.333144][T11200] usb 8-1: Product: syz [ 1016.337847][T11200] usb 8-1: Manufacturer: syz [ 1016.381252][T11200] usb 8-1: SerialNumber: syz [ 1016.675152][T11200] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1016.756226][T11200] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1016.791434][T11200] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1016.853834][T11885] loop0: detected capacity change from 0 to 128 [ 1016.888576][T11200] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1017.097720][T11200] usb 8-1: USB disconnect, device number 10 [ 1017.692757][ T9868] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.897685][ T9868] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.084803][ T5578] Bluetooth: hci5: command tx timeout [ 1018.311291][ T9868] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.365026][T11897] loop7: detected capacity change from 0 to 1024 [ 1018.532949][T11897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1018.659388][T10385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.866921][ T9868] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.286484][T11902] loop1: detected capacity change from 0 to 2048 [ 1019.460358][T11902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1019.757688][T11902] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 1019.830831][T11902] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 13 with error 28 [ 1019.931989][T11902] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1019.931989][T11902] [ 1020.049258][T11912] loop0: detected capacity change from 0 to 512 [ 1020.061820][T11902] EXT4-fs (loop1): Total free blocks count 0 [ 1020.100668][T11902] EXT4-fs (loop1): Free/Dirty block details [ 1020.117910][T11912] EXT4-fs: Ignoring removed oldalloc option [ 1020.145527][T11902] EXT4-fs (loop1): free_blocks=66060288 [ 1020.160914][ T5578] Bluetooth: hci5: command tx timeout [ 1020.188484][T11902] EXT4-fs (loop1): dirty_blocks=16 [ 1020.211011][T11198] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1020.223086][T11902] EXT4-fs (loop1): Block reservation details [ 1020.234255][T11912] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.1845: Parent and EA inode have the same ino 15 [ 1020.248596][T11912] loop0: lost filesystem error report for type 5 error -117 [ 1020.249594][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 1020.263985][ C0] EXT4-fs (loop0): initial error at time 1781622324: ext4_xattr_inode_iget:437 [ 1020.273273][ C0] EXT4-fs (loop0): last error at time 1781622324: ext4_xattr_inode_iget:437 [ 1020.274810][T11912] EXT4-fs (loop0): 1 orphan inode deleted [ 1020.302677][T11902] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 1020.398546][T11912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1020.429338][T11198] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.440222][T11198] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1020.451759][T11198] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1020.474195][T11198] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 206, setting to 64 [ 1020.500052][T11198] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1020.563305][T11198] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1020.612948][T11198] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.673157][T11198] usb 9-1: Product: syz [ 1020.696939][T11198] usb 9-1: Manufacturer: syz [ 1020.729111][T11198] usb 9-1: SerialNumber: syz [ 1020.820239][T11913] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1020.858775][ T9868] bridge_slave_1: left allmulticast mode [ 1020.908498][ T5594] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1020.929278][ T9868] bridge_slave_1: left promiscuous mode [ 1020.966767][ T9868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.034580][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.046097][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1021.081103][ T9868] bridge_slave_0: left allmulticast mode [ 1021.110424][ T9868] bridge_slave_0: left promiscuous mode [ 1021.158471][ T9868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.176431][T11913] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1021.461298][ T5680] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1021.650596][ T5680] usb 8-1: Using ep0 maxpacket: 16 [ 1021.706299][ T5680] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.754824][ T5680] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 1021.812102][ T5680] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 1021.869787][T11913] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1021.877922][ T5680] usb 8-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1021.939380][ T5680] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1021.957218][ T5680] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1021.966722][ T5680] usb 8-1: SerialNumber: syz [ 1022.002117][T11918] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1022.059862][T11918] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1022.108920][ T5680] hub 8-1:1.0: bad descriptor, ignoring hub [ 1022.119398][T11198] cdc_ncm 9-1:1.0: bind() failure [ 1022.130376][ T5680] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1022.212416][T11198] cdc_ncm 9-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1022.240014][ T5578] Bluetooth: hci5: command tx timeout [ 1022.256056][T11198] cdc_mbim 9-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1022.355593][T11198] usbtest 9-1:1.1: probe with driver usbtest failed with error -71 [ 1022.379186][T11918] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1022.418856][T11198] usb 9-1: USB disconnect, device number 11 [ 1022.442901][T11918] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1022.932334][ T5680] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 1023.175415][ T9868] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.271955][ T9868] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.314052][ T5680] usb 8-1: USB disconnect, device number 11 [ 1023.360183][ T9868] bond0 (unregistering): Released all slaves [ 1023.405733][T11212] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1023.664770][T11212] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1023.679463][T11212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.723259][T11212] usb 2-1: Product: syz [ 1023.744378][T11212] usb 2-1: Manufacturer: syz [ 1023.768352][T11188] bridge0: entered promiscuous mode [ 1023.775148][T11212] usb 2-1: SerialNumber: syz [ 1023.794281][ T9868] tipc: Left network mode [ 1024.060943][T11212] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1024.114987][T11212] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1024.194887][T11212] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1024.304142][T11212] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1024.417724][T11212] usb 2-1: USB disconnect, device number 50 [ 1025.250272][ T9868] hsr_slave_0: left promiscuous mode [ 1025.292238][ T9868] hsr_slave_1: left promiscuous mode [ 1025.308876][ T9868] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.356470][ T9868] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.406684][ T9868] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.415148][ T9868] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.556595][ T9868] veth1_macvtap: left promiscuous mode [ 1025.582272][ T9868] veth0_macvtap: left promiscuous mode [ 1025.609422][ T9868] veth1_vlan: left promiscuous mode [ 1025.636189][ T9868] veth0_vlan: left promiscuous mode [ 1025.696688][T11943] loop0: detected capacity change from 0 to 512 [ 1025.852098][T11943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1025.970732][T11943] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.099404][ T56] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1027.171306][ T56] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1027.222020][ T56] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1027.222020][ T56] [ 1027.255964][ T56] EXT4-fs (loop0): Total free blocks count 0 [ 1027.286721][ T56] EXT4-fs (loop0): Free/Dirty block details [ 1027.326375][ T56] EXT4-fs (loop0): free_blocks=65280 [ 1027.346133][ T56] EXT4-fs (loop0): dirty_blocks=1 [ 1027.372921][ T56] EXT4-fs (loop0): Block reservation details [ 1027.394198][ T56] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 1027.443018][ T5577] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1027.471324][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1027.687136][T11963] overlayfs: missing 'workdir' [ 1028.604459][ T9868] team0 (unregistering): Port device team_slave_1 removed [ 1028.679309][ T9868] team0 (unregistering): Port device team_slave_0 removed [ 1029.293970][T11188] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1029.549020][T11188] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1029.585421][T11188] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.624898][T11188] usb 8-1: Product: syz [ 1029.643481][T11188] usb 8-1: Manufacturer: syz [ 1029.668569][T11188] usb 8-1: SerialNumber: syz [ 1029.932666][T11188] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1030.010966][T11188] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1030.074182][T11188] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1030.191856][T11188] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1030.304148][T11188] usb 8-1: USB disconnect, device number 12 [ 1030.530704][T11987] loop0: detected capacity change from 0 to 128 [ 1030.613881][T11987] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 1030.717346][T11987] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1030.785074][T11987] ext2 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.017206][ T5231] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1031.038632][T11990] loop8: detected capacity change from 0 to 4096 [ 1031.065560][T11856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.099319][T11990] EXT4-fs: Ignoring removed mblk_io_submit option [ 1031.107696][T11856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.126230][T11990] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1031.137090][ T5577] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1031.149025][T11856] bridge_slave_0: entered allmulticast mode [ 1031.156170][T11990] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1031.184131][T11990] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 1031.218974][T11990] System zones: 0-5 [ 1031.227287][T11856] bridge_slave_0: entered promiscuous mode [ 1031.271850][T11990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1031.338457][T11994] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 1031.402001][T11856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.432224][T11856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.470093][T11856] bridge_slave_1: entered allmulticast mode [ 1031.516833][T11856] bridge_slave_1: entered promiscuous mode [ 1031.677480][T11990] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1031.762560][T11990] overlayfs: upper fs does not support tmpfile. [ 1031.819978][T11990] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1032.257216][T11856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.435803][T11856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.473378][T10743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.715662][T12010] loop1: detected capacity change from 0 to 512 [ 1032.858548][T11856] team0: Port device team_slave_0 added [ 1032.883923][T12010] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1032.893039][T11856] team0: Port device team_slave_1 added [ 1032.961547][T12010] ext4 filesystem being mounted at /391/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.080926][T12014] overlayfs: missing 'workdir' [ 1033.193475][T11856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.239977][T11856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.367057][T11856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.412581][T12016] overlayfs: failed index dir cleanup (-512) [ 1033.463197][T12016] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 1033.492525][T11856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.550825][T11856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1033.658356][T11856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.897541][T12019] overlayfs: missing 'workdir' [ 1033.993303][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1034.363767][T11856] hsr_slave_0: entered promiscuous mode [ 1034.417731][T11856] hsr_slave_1: entered promiscuous mode [ 1034.472869][T11856] debugfs: 'hsr0' already exists in 'hsr' [ 1034.504946][T11856] Cannot create hsr debugfs directory [ 1036.520034][T11200] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1036.750373][T11200] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1036.777737][T11200] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.805286][T11200] usb 9-1: Product: syz [ 1036.820285][T11200] usb 9-1: Manufacturer: syz [ 1036.845114][T11200] usb 9-1: SerialNumber: syz [ 1036.984913][T11856] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1037.110888][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1037.135789][T11200] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1037.180533][T11856] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1037.216647][T11200] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1037.254085][T11200] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1037.315105][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1037.360731][T11200] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1037.367310][T11856] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1037.469815][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1037.489772][T11200] usb 9-1: USB disconnect, device number 12 [ 1037.540007][T11856] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1037.693514][T11856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1038.528153][ T5231] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1039.707797][T11856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1039.993720][T11856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.099895][T11200] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1040.132467][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.140238][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.310696][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.318425][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1040.332456][T11200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.378987][T11200] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.417115][T11200] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1040.466111][T11200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.533464][T11200] usb 2-1: config 0 descriptor?? [ 1041.065642][T11200] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 1041.115093][T11200] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 1041.163344][T11200] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 1041.216114][T11200] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 1041.260481][T11200] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 1041.274572][T12076] loop0: detected capacity change from 0 to 512 [ 1041.349245][T11200] playstation 0003:054C:0DF2.0023: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0 [ 1041.370569][T12076] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1041.477400][T12076] EXT4-fs (loop0): 1 truncate cleaned up [ 1041.518524][T12076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1041.815953][T11200] playstation 0003:054C:0DF2.0023: Failed to retrieve feature with reportID 5: -71 [ 1041.880388][T11200] playstation 0003:054C:0DF2.0023: Failed to retrieve DualSense calibration info: -71 [ 1041.960566][T11200] playstation 0003:054C:0DF2.0023: Failed to get calibration data from DualSense [ 1042.045277][T11200] playstation 0003:054C:0DF2.0023: Failed to create dualsense. [ 1042.072441][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.115529][T11200] playstation 0003:054C:0DF2.0023: probe with driver playstation failed with error -71 [ 1042.214174][T11200] usb 2-1: USB disconnect, device number 51 [ 1042.498014][T12081] fido_id[12081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1042.990547][T12092] loop0: detected capacity change from 0 to 512 [ 1043.074682][T12092] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 1044.590053][ T5680] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1044.848103][ T5680] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1044.901355][ T5680] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.938332][ T5680] usb 9-1: Product: syz [ 1044.943025][T11198] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1044.955480][ T5680] usb 9-1: Manufacturer: syz [ 1044.977657][ T5680] usb 9-1: SerialNumber: syz [ 1045.175253][T11198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1045.241779][T11198] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.299797][T11198] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 1045.314830][ T5680] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1045.378468][T11198] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.408352][ T5680] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1045.455686][ T5680] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1045.474063][T11198] usb 2-1: config 0 descriptor?? [ 1045.572228][ T5680] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1045.677748][ T5231] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1045.695799][ T5680] usb 9-1: USB disconnect, device number 13 [ 1046.139431][T11198] aquacomputer_d5next 0003:0C70:F0B6.0024: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 1046.398084][T11198] usb 2-1: USB disconnect, device number 52 [ 1047.206129][T12129] fido_id[12129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1047.228729][T11856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.320753][ T5680] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1047.580440][ T5680] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1047.632984][ T5680] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1047.680096][ T5680] usb 9-1: can't read configurations, error -71 [ 1047.980213][T12139] loop0: detected capacity change from 0 to 4096 [ 1048.041633][T12139] EXT4-fs: inline encryption not supported [ 1048.109742][T12139] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1048.158978][T12139] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1048.312872][T12139] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 1048.363417][T12139] System zones: 0-5 [ 1048.436187][T12139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1048.842501][T12139] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1049.384255][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1050.454608][ T9655] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1050.539419][T12177] loop1: detected capacity change from 0 to 128 [ 1050.712455][T12177] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1050.784530][ T9655] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1050.857483][T12177] ext4 filesystem being mounted at /397/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1050.892681][ T9655] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1050.929790][ T9655] usb 1-1: config 1 has no interface number 0 [ 1050.971898][ T9655] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1051.041830][T11856] veth0_vlan: entered promiscuous mode [ 1051.060075][ T9655] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1051.110627][ T9655] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 52, changing to 7 [ 1051.182887][ T9655] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice= 0.40 [ 1051.258123][ T9655] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.279096][T11856] veth1_vlan: entered promiscuous mode [ 1051.307205][ T9655] usb 1-1: Product: syz [ 1051.333246][ T9655] usb 1-1: Manufacturer: syz [ 1051.367733][ T9655] usb 1-1: SerialNumber: syz [ 1051.669933][ T5594] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1051.764076][ T9655] usb 1-1: 1:0 : does not exist [ 1051.794961][ T9655] usb 1-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 1051.953375][T11856] veth0_macvtap: entered promiscuous mode [ 1052.091695][T11856] veth1_macvtap: entered promiscuous mode [ 1052.576924][T11856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1052.627692][ T9655] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 1052.742050][ T9655] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1052.777102][ T9655] snd_usb_pod 1-1:1.1: set_interface failed [ 1052.815366][ T9655] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1052.860666][T11856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1052.865534][ T9655] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 1052.950123][ T9655] usb 1-1: USB disconnect, device number 58 [ 1053.084393][T11101] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.098722][ T55] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.099014][ T55] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.099227][ T55] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1053.228826][T11218] udevd[11218]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.390062][T11212] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1053.599267][T11212] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1053.608207][T11212] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1053.608407][T11212] usb 9-1: can't read configurations, error -71 [ 1053.768406][ T5231] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1054.785712][T12208] loop0: detected capacity change from 0 to 256 [ 1055.127164][T12208] FAT-fs (loop0): Directory bread(block 64) failed [ 1055.127297][T12208] FAT-fs (loop0): Directory bread(block 65) failed [ 1055.127567][T12208] FAT-fs (loop0): Directory bread(block 66) failed [ 1055.127682][T12208] FAT-fs (loop0): Directory bread(block 67) failed [ 1055.151064][T12208] FAT-fs (loop0): Directory bread(block 68) failed [ 1055.151207][T12208] FAT-fs (loop0): Directory bread(block 69) failed [ 1055.151509][T12208] FAT-fs (loop0): Directory bread(block 70) failed [ 1055.151625][T12208] FAT-fs (loop0): Directory bread(block 71) failed [ 1055.151894][T12208] FAT-fs (loop0): Directory bread(block 72) failed [ 1055.152009][T12208] FAT-fs (loop0): Directory bread(block 73) failed [ 1055.532096][T12210] loop8: detected capacity change from 0 to 4096 [ 1055.548152][T12210] EXT4-fs: inline encryption not supported [ 1055.581853][T12210] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1055.581958][T12210] EXT4-fs (loop8): Test dummy encryption mode enabled [ 1055.611219][T12210] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 1055.611872][T12210] System zones: 0-5 [ 1055.755543][T12210] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1056.048482][T12210] fscrypt (loop8): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1056.730594][T10743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1056.971061][T12225] tipc: Started in network mode [ 1056.976331][T12225] tipc: Node identity 080211000001, cluster identity 4711 [ 1057.031406][T12225] tipc: Enabled bearer , priority 0 [ 1057.106620][T12229] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1057.164026][T12229] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1057.967690][ T29] audit: type=1800 audit(1781622362.107:156): pid=12237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1918" name="file1" dev="overlay" ino=2309 res=0 errno=0 [ 1058.168772][ T5684] tipc: Node number set to 134418688 [ 1058.677572][T12243] loop8: detected capacity change from 0 to 1024 [ 1058.804191][T12243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1059.653898][T10743] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 1059.720401][T10743] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 1059.790750][T10743] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 1059.856168][T10743] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 1059.915609][T10743] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 1059.984424][T10743] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 1060.042008][T10743] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 1060.081357][T10743] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 1060.124162][T10743] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 1060.175953][T10743] EXT4-fs error (device loop8): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 1060.191702][ T5684] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1060.446347][ T5684] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1060.495069][ T5684] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1060.545282][ T5684] usb 1-1: can't read configurations, error -71 [ 1061.759366][ T5699] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.800237][ T5699] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.283961][T10743] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1062.300556][T11101] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.431651][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1062.431757][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1062.522951][T11101] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.826682][T12268] [U]  [ 1062.979070][T11101] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.451852][T11101] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.173226][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.181292][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.213056][T11101] bridge_slave_1: left allmulticast mode [ 1064.234926][T11101] bridge_slave_1: left promiscuous mode [ 1064.258660][T11101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1064.284396][T11101] bridge_slave_0: left allmulticast mode [ 1064.300198][T11101] bridge_slave_0: left promiscuous mode [ 1064.312653][T11101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.576808][ T29] audit: type=1800 audit(1781622369.717:157): pid=12290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1931" name="file1" dev="overlay" ino=472 res=0 errno=0 [ 1065.634753][T11101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.712301][T11101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.810310][T11101] bond0 (unregistering): Released all slaves [ 1065.918391][T12295] tipc: Enabled bearer , priority 0 [ 1066.015313][T12296] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 1066.088704][T12296] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1066.747569][T12307] loop7: detected capacity change from 0 to 256 [ 1067.023386][ T4875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1067.037920][ T4875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1067.048961][ T4875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1067.070783][ T4875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1067.087184][ T4875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1067.324814][T12307] FAT-fs (loop7): Directory bread(block 64) failed [ 1067.382528][T12307] FAT-fs (loop7): Directory bread(block 65) failed [ 1067.435342][T12307] FAT-fs (loop7): Directory bread(block 66) failed [ 1067.477889][T12307] FAT-fs (loop7): Directory bread(block 67) failed [ 1067.490314][T11101] hsr_slave_0: left promiscuous mode [ 1067.510308][T12307] FAT-fs (loop7): Directory bread(block 68) failed [ 1067.533856][T11101] hsr_slave_1: left promiscuous mode [ 1067.553772][T12307] FAT-fs (loop7): Directory bread(block 69) failed [ 1067.583763][T11101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1067.600125][T12307] FAT-fs (loop7): Directory bread(block 70) failed [ 1067.626572][T11101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.636888][T12307] FAT-fs (loop7): Directory bread(block 71) failed [ 1067.654640][T12307] FAT-fs (loop7): Directory bread(block 72) failed [ 1067.669104][T11101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1067.705610][T12307] FAT-fs (loop7): Directory bread(block 73) failed [ 1067.732948][T11101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.958232][T11101] veth1_macvtap: left promiscuous mode [ 1067.972289][T11202] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1067.985602][T11101] veth0_macvtap: left promiscuous mode [ 1068.012559][T11101] veth1_vlan: left promiscuous mode [ 1068.027451][T11101] veth0_vlan: left promiscuous mode [ 1068.138956][T12320] binder: 12318:12320 unknown command 0 [ 1068.139048][T12320] binder: 12318:12320 ioctl c0306201 80000200 returned -22 [ 1069.120953][ T5578] Bluetooth: hci2: command tx timeout [ 1069.402412][T12316] [U]  [ 1070.851219][T11101] team0 (unregistering): Port device team_slave_1 removed [ 1070.902166][T11101] team0 (unregistering): Port device team_slave_0 removed [ 1071.200430][ T5578] Bluetooth: hci2: command tx timeout [ 1071.516295][T12325] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1071.533772][T12325] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1071.750583][T11202] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1071.800625][T11202] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1071.875510][T11202] usb 1-1: can't read configurations, error -71 [ 1072.638763][ T29] audit: type=1800 audit(1781622376.777:158): pid=12345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1943" name="file1" dev="overlay" ino=2347 res=0 errno=0 [ 1073.284179][ T5578] Bluetooth: hci2: command tx timeout [ 1074.557210][T12374] binder_alloc: 12368: pid 12368 spamming oneway? 1 buffers allocated for a total size of 5240 [ 1075.360243][ T5578] Bluetooth: hci2: command tx timeout [ 1075.914757][T12379] loop7: detected capacity change from 0 to 4096 [ 1075.996100][T12379] EXT4-fs: Ignoring removed orlov option [ 1076.075860][T12379] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1076.162509][T12379] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1076.289919][T11215] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1076.553698][ T29] audit: type=1326 audit(1781622380.687:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12378 comm="syz.7.1951" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f3301c code=0x0 [ 1076.603261][ T5231] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1076.620387][T11215] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1076.680833][T11215] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1076.718807][T11215] usb 1-1: can't read configurations, error -71 [ 1077.112885][T10385] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.768607][T12308] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.826427][T12308] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.850658][T12308] bridge_slave_0: entered allmulticast mode [ 1079.905508][T12308] bridge_slave_0: entered promiscuous mode [ 1080.000133][T12308] bridge0: port 2(bridge_slave_1) entered blocking state [ 1080.032463][T12308] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.055444][T12308] bridge_slave_1: entered allmulticast mode [ 1080.068109][T12308] bridge_slave_1: entered promiscuous mode [ 1080.630383][T12308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.754302][T12308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.768908][T12440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1965'. [ 1080.863904][T11215] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1081.124998][T11215] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1081.137019][T12308] team0: Port device team_slave_0 added [ 1081.168184][T11215] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.201224][T11215] usb 10-1: Product: syz [ 1081.207668][T12308] team0: Port device team_slave_1 added [ 1081.222938][T11215] usb 10-1: Manufacturer: syz [ 1081.224470][T11202] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1081.246737][T11215] usb 10-1: SerialNumber: syz [ 1081.505778][T11202] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1081.552416][T11215] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1081.567513][T11202] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1081.622732][T11202] usb 1-1: can't read configurations, error -71 [ 1081.626581][T11215] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1081.721538][T11215] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1081.742219][T12308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1081.780839][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1081.816829][T11215] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1081.878625][T12308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1081.897695][T11215] usb 10-1: USB disconnect, device number 2 [ 1081.968026][T12308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1082.007995][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1082.103459][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1082.850326][T12308] hsr_slave_0: entered promiscuous mode [ 1082.904501][T12308] hsr_slave_1: entered promiscuous mode [ 1082.953404][T12308] debugfs: 'hsr0' already exists in 'hsr' [ 1082.972223][T12308] Cannot create hsr debugfs directory [ 1085.376526][T12489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1980'. [ 1085.715477][T12483] [U]  [ 1085.744105][ T5684] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1085.973580][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1085.984067][ T5684] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1085.984254][ T5684] usb 2-1: can't read configurations, error -71 [ 1086.100798][T11200] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1086.338922][T11200] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1086.339089][T11200] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.339218][T11200] usb 10-1: Product: syz [ 1086.339320][T11200] usb 10-1: Manufacturer: syz [ 1086.339422][T11200] usb 10-1: SerialNumber: syz [ 1086.633031][T11200] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1086.633306][T11200] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1086.633445][T11200] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1086.679124][T11200] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1086.776014][T11200] usb 10-1: USB disconnect, device number 3 [ 1086.816416][T12308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1086.908978][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1086.921215][T12308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1086.993476][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1087.002104][T12308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1087.087585][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1087.104915][T12308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1087.213263][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1088.961463][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1089.286623][T12308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1089.405890][T11101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.413737][T11101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1089.669364][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.677040][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1090.048210][T12535] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1993'. [ 1090.437297][ T29] audit: type=1800 audit(1781622394.577:160): pid=12541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1994" name="file1" dev="overlay" ino=2415 res=0 errno=0 [ 1090.543683][T11215] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1090.768857][T11215] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1090.838479][T11215] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1090.878121][T11215] usb 10-1: can't read configurations, error -71 [ 1091.451288][T11188] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1091.735443][T11188] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1091.775856][T11188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.808589][T11188] usb 2-1: Product: syz [ 1091.836127][T11188] usb 2-1: Manufacturer: syz [ 1091.879347][T11188] usb 2-1: SerialNumber: syz [ 1092.228915][T11188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1092.322800][T11188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1092.322948][T11188] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1092.428503][T11188] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1092.485489][T11188] usb 2-1: USB disconnect, device number 55 [ 1092.927411][T12558] [U]  [ 1094.465347][T12582] loop0: detected capacity change from 0 to 4096 [ 1094.555680][T12582] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1094.645794][T12582] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 1094.804533][T12582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.259777][T11215] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1095.501000][T11215] usb 1-1: Using ep0 maxpacket: 32 [ 1095.561670][T11215] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 1095.603954][T11215] usb 1-1: config 0 has no interface number 0 [ 1095.626105][T11215] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1095.653849][T11215] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 98, changing to 10 [ 1095.721186][T11215] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 9315, setting to 1024 [ 1095.803642][T11215] usb 1-1: config 0 interface 196 has no altsetting 0 [ 1095.876399][T11215] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1095.930640][T11215] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.974329][T11215] usb 1-1: Product: syz [ 1096.002929][T11215] usb 1-1: Manufacturer: syz [ 1096.029769][T11215] usb 1-1: SerialNumber: syz [ 1096.093681][T11215] usb 1-1: config 0 descriptor?? [ 1096.139250][T12582] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1096.191658][T12582] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1096.219421][T12603] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2009'. [ 1096.303428][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2008'. [ 1096.340031][T12308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1096.551129][T11215] ipheth 1-1:0.196: Unable to find endpoints [ 1096.675530][T11215] usb 1-1: USB disconnect, device number 67 [ 1096.723666][T11202] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1096.954497][T11202] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1097.008073][T11202] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1097.063804][T11202] usb 8-1: can't read configurations, error -71 [ 1097.328942][T12308] veth0_vlan: entered promiscuous mode [ 1097.485931][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.499114][T12308] veth1_vlan: entered promiscuous mode [ 1097.953464][T11200] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1098.293150][T11200] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1098.344228][T11200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.346824][T12308] veth0_macvtap: entered promiscuous mode [ 1098.391213][T11200] usb 2-1: Product: syz [ 1098.416524][T11200] usb 2-1: Manufacturer: syz [ 1098.435536][T11200] usb 2-1: SerialNumber: syz [ 1098.533161][T12308] veth1_macvtap: entered promiscuous mode [ 1098.559222][T12623] netlink: 'syz.7.2014': attribute type 14 has an invalid length. [ 1098.599967][T12623] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2014'. [ 1098.670398][T12623] bond0: option xmit_hash_policy: invalid value (8) [ 1098.726809][T11200] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1098.784417][T11200] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1098.843126][T11200] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1098.952751][T11200] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1099.056952][T11200] usb 2-1: USB disconnect, device number 56 [ 1099.066354][T12308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1099.156477][T12627] warning: `syz.9.2015' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1099.328912][T12308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1099.624201][T11101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.691253][T11101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.737206][T11101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.814053][T11101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1100.510565][ T29] audit: type=1800 audit(1781622404.647:161): pid=12645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2019" name="file1" dev="overlay" ino=149 res=0 errno=0 [ 1100.541249][T12631] [U]  [ 1102.489983][ T5231] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1102.615427][T12660] loop1: detected capacity change from 0 to 4096 [ 1102.710690][T12660] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1102.807764][T12660] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8842c018, mo2=0003] [ 1102.978107][T12660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1103.463463][T11215] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1103.712994][T11215] usb 2-1: Using ep0 maxpacket: 32 [ 1103.789668][T11215] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1103.830858][T11215] usb 2-1: config 0 has no interface number 0 [ 1103.863067][T11215] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1103.908537][T11215] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 98, changing to 10 [ 1103.951430][T11215] usb 2-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 9315, setting to 1024 [ 1104.027607][T11215] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1104.090756][T11215] usb 2-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1104.143435][T11215] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.186651][T11215] usb 2-1: Product: syz [ 1104.210190][T11215] usb 2-1: Manufacturer: syz [ 1104.250068][T11215] usb 2-1: SerialNumber: syz [ 1104.336612][T11215] usb 2-1: config 0 descriptor?? [ 1104.378186][T12660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1104.436928][T12660] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1104.565606][T12685] syzkaller0: entered promiscuous mode [ 1104.605606][T12685] syzkaller0: entered allmulticast mode [ 1104.750743][T12687] tipc: Started in network mode [ 1104.800506][T12687] tipc: Node identity 2ecf038dae05, cluster identity 4711 [ 1104.815750][T11215] ipheth 2-1:0.196: Unable to find endpoints [ 1104.857973][T12687] tipc: Enabled bearer , priority 0 [ 1104.902365][T11215] usb 2-1: USB disconnect, device number 57 [ 1104.973381][T12682] tipc: Resetting bearer [ 1105.078060][T12693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2030'. [ 1105.149275][T12682] tipc: Disabling bearer [ 1105.228720][T12693] hsr_slave_0: left promiscuous mode [ 1105.285119][T12693] hsr_slave_1: left promiscuous mode [ 1105.800445][ T5594] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1106.896634][T12712] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 1106.896775][T12712] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 1107.392064][T12706] [U]  [ 1108.560241][T12703] syz.9.2033 (12703) used greatest stack depth: 1376 bytes left [ 1109.100473][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.159752][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.766629][T12737] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2041'. [ 1109.799899][T12737] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2041'. [ 1109.896787][T12734] bridge_slave_0: left allmulticast mode [ 1109.903168][T12734] bridge_slave_0: left promiscuous mode [ 1109.911496][T12734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.953576][T12734] bridge_slave_1: left allmulticast mode [ 1109.960940][T12734] bridge_slave_1: left promiscuous mode [ 1109.986292][T12734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.038061][T12734] bond0: (slave bond_slave_0): Releasing backup interface [ 1110.070110][T12734] bond0: (slave bond_slave_1): Releasing backup interface [ 1110.132706][T12734] team0: Port device team_slave_0 removed [ 1110.175514][T12734] team0: Port device team_slave_1 removed [ 1110.189869][T12734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.198881][T12734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.226270][T12734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.234276][T12734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.292030][T12734] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1110.323718][ T5231] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1110.414141][T12736] team0: Mode changed to "loadbalance" [ 1110.514096][ T5699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.537412][ T5699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.144682][T12749] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 1111.193553][T12749] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 1111.301433][T12751] tipc: Started in network mode [ 1111.368128][T12751] tipc: Node identity 080211000001, cluster identity 4711 [ 1111.425664][T12751] tipc: Enabled bearer , priority 0 [ 1112.535961][T12770] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2048'. [ 1112.542352][T11202] tipc: Node number set to 134418688 [ 1112.577865][T12768] loop9: detected capacity change from 0 to 512 [ 1112.748394][T12768] ext4: Unknown parameter 'context' [ 1113.548401][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2053'. [ 1113.673066][T12784] erspan0: entered promiscuous mode [ 1113.700223][T12784] erspan0: left promiscuous mode [ 1114.015133][T12782] tipc: Resetting bearer [ 1114.219695][T12777] [U]  [ 1114.457230][T12782] tipc: Resetting bearer [ 1114.981928][T12794] tipc: Enabled bearer , priority 10 [ 1116.082330][T12814] tipc: Started in network mode [ 1116.082516][T12814] tipc: Node identity 1e973128fd2b, cluster identity 4711 [ 1116.083439][T12814] tipc: Enabled bearer , priority 0 [ 1116.293375][T12795] tipc: Disabling bearer [ 1117.127596][ T5231] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1121.457933][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2072'. [ 1122.928860][T12874] [U]  [ 1124.661810][T12905] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2083'. [ 1125.109273][T12911] loop0: detected capacity change from 0 to 256 [ 1125.614529][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.627077][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1126.168001][ T5578] block nbd0: Receive control failed (result -1) [ 1127.687603][T12944] netlink: 'syz.9.2091': attribute type 9 has an invalid length. [ 1127.737929][T12944] netlink: 'syz.9.2091': attribute type 6 has an invalid length. [ 1129.072847][T12954] [U]  [ 1130.417931][T12978] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2099'. [ 1130.418047][T12978] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2099'. [ 1135.998450][T13033] [U]  [ 1137.922858][ T4875] Bluetooth: hci5: command 0x0406 tx timeout [ 1139.069329][T13073] [U]  [ 1144.131709][T13147] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1144.171063][T13147] bond1 (unregistering): Released all slaves [ 1144.422089][T13150] bridge0: port 3(vlan2) entered blocking state [ 1144.433456][T13150] bridge0: port 3(vlan2) entered disabled state [ 1144.482838][T13150] vlan2: entered allmulticast mode [ 1144.525529][T13150] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1144.610826][T13150] vlan2: entered promiscuous mode [ 1144.656692][T13150] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1145.355508][T13159] mac80211_hwsim hwsim17 syzkaller0: left promiscuous mode [ 1145.355658][T13159] mac80211_hwsim hwsim17 syzkaller0: left allmulticast mode [ 1145.742797][T13154] [U]  [ 1150.284585][T13212] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1150.410064][T13212] bond1 (unregistering): Released all slaves [ 1150.866152][T13224] Bluetooth: MGMT ver 1.23 [ 1151.749258][T13234] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 1152.361249][T13237] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2163'. [ 1152.577949][T13242] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2164'. [ 1153.670452][T13259] hsr0: entered promiscuous mode [ 1155.354070][T13275] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1155.485972][T13275] bond1 (unregistering): Released all slaves [ 1156.258406][T13289] netlink: 392 bytes leftover after parsing attributes in process `syz.9.2178'. [ 1158.618179][T13318] tipc: Enabling of bearer rejected, already enabled [ 1158.662729][T13318] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 1158.692066][T13318] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1158.813332][T13318] tipc: Resetting bearer [ 1159.565878][T13319] [U]  [ 1161.130910][T13342] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2191'. [ 1162.750627][ T5578] block nbd1: Receive control failed (result -1) [ 1166.540949][T13408] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1166.541095][T13408] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1166.628688][T13397] [U]  [ 1168.577826][T13419] netlink: 'syz.1.2207': attribute type 1 has an invalid length. [ 1168.924700][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2209'. [ 1169.012835][T13432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2207'. [ 1169.440409][T13423] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 1170.325415][T13428] veth3: entered promiscuous mode [ 1170.350650][ T5578] block nbd2: Receive control failed (result -1) [ 1170.368868][T13428] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 1173.477590][T13466] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 1173.477733][T13466] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 1173.655104][T13471] netlink: 'syz.3.2222': attribute type 3 has an invalid length. [ 1173.684830][T13471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2222'. [ 1173.758506][T11200] hid-generic 0005:0C45:0008.0025: item fetching failed at offset 2/3 [ 1173.771371][T11200] hid-generic 0005:0C45:0008.0025: probe with driver hid-generic failed with error -22 [ 1173.916700][T13462] [U]  [ 1174.308226][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 1174.344191][ T5578] block nbd3: Receive control failed (result -1) [ 1178.401018][T13521] netlink: 'syz.0.2237': attribute type 3 has an invalid length. [ 1178.494201][T13521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2237'. [ 1179.485514][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2241'. [ 1179.663534][ T5578] block nbd4: Receive control failed (result -1) [ 1180.474745][T13545] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 1183.168517][T13572] netlink: 'syz.1.2253': attribute type 3 has an invalid length. [ 1183.206093][T13572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2253'. [ 1185.573077][T13592] netlink: 'syz.3.2260': attribute type 4 has an invalid length. [ 1185.622029][T13592] netlink: 'syz.3.2260': attribute type 8 has an invalid length. [ 1185.662679][T13592] netlink: 'syz.3.2260': attribute type 1 has an invalid length. [ 1185.689715][T13592] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2260'. [ 1185.712317][T13592] NCSI netlink: No device for ifindex 0 [ 1186.795696][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2264'. [ 1187.053938][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1187.066677][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1189.269991][T13630] bridge0: port 3(vlan0) entered blocking state [ 1189.303024][T13635] netlink: 260 bytes leftover after parsing attributes in process `syz.7.2275'. [ 1189.330133][T13630] bridge0: port 3(vlan0) entered disabled state [ 1189.406749][T13630] vlan0: entered allmulticast mode [ 1189.440869][T13630] geneve0: entered allmulticast mode [ 1189.506664][T13630] vlan0: entered promiscuous mode [ 1189.530223][T13630] geneve0: entered promiscuous mode [ 1193.440931][T13670] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 1193.615330][T13672] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2289'. [ 1197.182676][T13704] netlink: 260 bytes leftover after parsing attributes in process `syz.9.2302'. [ 1199.974618][T13735] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2307'. [ 1203.497066][T13755] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2317'. [ 1218.870493][T13850] ===================================================== [ 1218.878206][T13850] BUG: KMSAN: uninit-value in ieee802154_hdr_push+0x9a4/0xa30 [ 1218.886007][T13850] ieee802154_hdr_push+0x9a4/0xa30 [ 1218.891368][T13850] ieee802154_header_create+0x854/0xb90 [ 1219.066683][T13850] dgram_sendmsg+0xb55/0x16f0 [ 1219.071705][T13850] ieee802154_sock_sendmsg+0x91/0xe0 [ 1219.077222][T13850] ____sys_sendmsg+0xf37/0xfd0 [ 1219.082340][T13850] ___sys_sendmsg+0x271/0x3b0 [ 1219.087242][T13850] __sys_sendmsg+0x1aa/0x300 [ 1219.092074][T13850] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1219.097904][T13850] ia32_sys_call+0x1e4a/0x4360 [ 1219.103048][T13850] __do_fast_syscall_32+0x195/0x470 [ 1219.108543][T13850] do_fast_syscall_32+0x37/0x80 [ 1219.113585][T13850] do_SYSENTER_32+0x1f/0x30 [ 1219.118278][T13850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.124899][T13850] [ 1219.127330][T13850] Uninit was stored to memory at: [ 1219.132765][T13850] ieee802154_hdr_push+0x99d/0xa30 [ 1219.138359][T13850] ieee802154_header_create+0x854/0xb90 [ 1219.144153][T13850] dgram_sendmsg+0xb55/0x16f0 [ 1219.149038][T13850] ieee802154_sock_sendmsg+0x91/0xe0 [ 1219.154562][T13850] ____sys_sendmsg+0xf37/0xfd0 [ 1219.159578][T13850] ___sys_sendmsg+0x271/0x3b0 [ 1219.344443][T13850] __sys_sendmsg+0x1aa/0x300 [ 1219.349334][T13850] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1219.355092][T13850] ia32_sys_call+0x1e4a/0x4360 [ 1219.360104][T13850] __do_fast_syscall_32+0x195/0x470 [ 1219.365505][T13850] do_fast_syscall_32+0x37/0x80 [ 1219.370546][T13850] do_SYSENTER_32+0x1f/0x30 [ 1219.375241][T13850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.381839][T13850] [ 1219.384281][T13850] Local variable hdr created at: [ 1219.389325][T13850] ieee802154_header_create+0x4e/0xb90 [ 1219.394996][T13850] dgram_sendmsg+0xb55/0x16f0 [ 1219.399878][T13850] [ 1219.402396][T13850] CPU: 1 UID: 0 PID: 13850 Comm: syz.9.2349 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 1219.413671][T13850] Tainted: [L]=SOFTLOCKUP [ 1219.418131][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1219.428362][T13850] ===================================================== [ 1219.608487][T13850] Disabling lock debugging due to kernel taint [ 1219.618764][T13850] Kernel panic - not syncing: kmsan.panic set ... [ 1219.625397][T13850] CPU: 0 UID: 0 PID: 13850 Comm: syz.9.2349 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 1219.636597][T13850] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1219.642267][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1219.652476][T13850] Call Trace: [ 1219.655863][T13850] [ 1219.658901][T13850] __dump_stack+0x26/0x30 [ 1219.663422][T13850] dump_stack_lvl+0x50/0x1c0 [ 1219.668189][T13850] ? dump_stack+0x12/0x25 [ 1219.672714][T13850] dump_stack+0x1e/0x25 [ 1219.677044][T13850] vpanic+0x7b4/0x1430 [ 1219.681330][T13850] panic+0x15d/0x160 [ 1219.685479][T13850] kmsan_report+0x31a/0x320 [ 1219.690204][T13850] ? __msan_warning+0x1b/0x30 [ 1219.695078][T13850] ? ieee802154_hdr_push+0x9a4/0xa30 [ 1219.700564][T13850] ? ieee802154_header_create+0x854/0xb90 [ 1219.706463][T13850] ? dgram_sendmsg+0xb55/0x16f0 [ 1219.711500][T13850] ? ieee802154_sock_sendmsg+0x91/0xe0 [ 1219.717177][T13850] ? ____sys_sendmsg+0xf37/0xfd0 [ 1219.722359][T13850] ? ___sys_sendmsg+0x271/0x3b0 [ 1219.727457][T13850] ? __sys_sendmsg+0x1aa/0x300 [ 1219.732474][T13850] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1219.738405][T13850] ? ia32_sys_call+0x1e4a/0x4360 [ 1219.743602][T13850] ? __do_fast_syscall_32+0x195/0x470 [ 1219.749175][T13850] ? do_fast_syscall_32+0x37/0x80 [ 1219.754393][T13850] ? do_SYSENTER_32+0x1f/0x30 [ 1219.759264][T13850] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.766002][T13850] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.772733][T13850] ? ___sys_sendmsg+0x271/0x3b0 [ 1219.777839][T13850] ? __sys_sendmsg+0x1aa/0x300 [ 1219.782873][T13850] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1219.788804][T13850] ? ia32_sys_call+0x1e4a/0x4360 [ 1219.793999][T13850] ? kmsan_get_metadata+0xf1/0x160 [ 1219.799367][T13850] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.805428][T13850] ? cfg802154_pernet_exit+0x221/0x230 [ 1219.811126][T13850] ? filter_irq_stacks+0x49/0x190 [ 1219.816365][T13850] ? kmsan_get_metadata+0xf1/0x160 [ 1219.821727][T13850] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1219.828207][T13850] ? kmsan_get_metadata+0xf1/0x160 [ 1219.833576][T13850] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1219.840161][T13850] ? kmsan_get_metadata+0xf1/0x160 [ 1219.845532][T13850] __msan_warning+0x1b/0x30 [ 1219.850262][T13850] ieee802154_hdr_push+0x9a4/0xa30 [ 1219.855640][T13850] ? vmw_cmd_dx_clear_depthstencil_view+0x72/0xf0 [ 1219.862396][T13850] ? __msan_memcpy+0x105/0x1c0 [ 1219.867390][T13850] ieee802154_header_create+0x854/0xb90 [ 1219.873178][T13850] ? kmsan_get_metadata+0xf1/0x160 [ 1219.878564][T13850] dgram_sendmsg+0xb55/0x16f0 [ 1219.883460][T13850] ? __pfx_ieee802154_header_create+0x10/0x10 [ 1219.889761][T13850] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1219.895087][T13850] ieee802154_sock_sendmsg+0x91/0xe0 [ 1219.900604][T13850] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1219.906817][T13850] ____sys_sendmsg+0xf37/0xfd0 [ 1219.911880][T13850] ___sys_sendmsg+0x271/0x3b0 [ 1219.916806][T13850] ? kmsan_get_metadata+0xf1/0x160 [ 1219.922180][T13850] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.928248][T13850] ? __rcu_read_unlock+0x6c/0xd0 [ 1219.933386][T13850] ? __fget_files+0x3b4/0x4a0 [ 1219.938287][T13850] ? __fget_files+0x3b9/0x4a0 [ 1219.943162][T13850] ? kmsan_get_metadata+0xf1/0x160 [ 1219.948522][T13850] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.954593][T13850] __sys_sendmsg+0x1aa/0x300 [ 1219.959470][T13850] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1219.965243][T13850] ia32_sys_call+0x1e4a/0x4360 [ 1219.970253][T13850] __do_fast_syscall_32+0x195/0x470 [ 1219.975689][T13850] do_fast_syscall_32+0x37/0x80 [ 1219.980775][T13850] do_SYSENTER_32+0x1f/0x30 [ 1219.985488][T13850] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1219.992078][T13850] RIP: 0023:0xf6fef01c [ 1219.996306][T13850] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1220.016124][T13850] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1220.024756][T13850] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000540 [ 1220.032919][T13850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1220.041052][T13850] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1220.049178][T13850] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1220.057300][T13850] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1220.065463][T13850] [ 1220.240651][T13850] Kernel Offset: disabled [ 1220.245095][T13850] Rebooting in 86400 seconds..