last executing test programs: 8m3.260675827s ago: executing program 0 (id=2338): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r1, 0x8b22, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8m0.525371267s ago: executing program 0 (id=2344): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) clock_adjtime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, 0x0, &(0x7f0000001180)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) 7m59.430611192s ago: executing program 0 (id=2346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="89e7ee2c21fe50a3b47380c988ca4b5e002882fef7efb627af71b51ad251f9", 0x1f}, {0x0}], 0x2) 7m56.949554357s ago: executing program 4 (id=2349): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f00000000c0)=0x8000008, 0x2a) 7m53.184381408s ago: executing program 4 (id=2354): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) pipe(&(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) 7m52.911333354s ago: executing program 4 (id=2355): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a3000000000480000000b0a010200000000000000000100000009000300735a7a320000000014000480080002400000000408000140000000000900010073797a30"], 0xb8}}, 0x0) 7m51.581434512s ago: executing program 4 (id=2356): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) execveat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3e4cd25529e20900"}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x24, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) 7m50.759720871s ago: executing program 0 (id=2359): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r1 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) close(0xffffffffffffffff) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@name={'name', 0x3d, '-'}}, {@name={'name', 0x3d, '_'}}]}) 7m47.975521264s ago: executing program 0 (id=2364): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_procfs(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x34, &(0x7f00000000c0)=0x8000008, 0x2a) 7m45.022878277s ago: executing program 4 (id=2368): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="49592c5f3e4da0a09f3582771fe9eccc2dda6ed7803bdb45dd5c8fc7fc713e2764180d4554fc7b3a2d2458531c5977477ccc53ceeb3e5851cfb226079b8b2087784b8a1160b46353fee1f40dcc69dc7735d190c9f204bfab1e18a61b75c70c31233c0ffa1524cd6522b7448bcdb5a65e484747f6b6ed618618492b36cc40d77b3806ff95b95e7793504cc4854c") ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000c00027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) io_uring_enter(0xffffffffffffffff, 0x43d0, 0x4add, 0x1, &(0x7f0000000140)={[0x8]}, 0x8) 7m44.895384955s ago: executing program 0 (id=2369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="89e7ee2c21fe50a3b47380c988ca4b5e002882fef7efb627af71b51ad251f9", 0x1f}, {&(0x7f00000006c0)}], 0x2) 7m43.61248809s ago: executing program 4 (id=2370): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x10) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce010900000000"], 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000000040)={[{'lock'}]}) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(r3, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xffffff80}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x8, 0x28}, 0x50) 7m29.839503348s ago: executing program 32 (id=2369): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="89e7ee2c21fe50a3b47380c988ca4b5e002882fef7efb627af71b51ad251f9", 0x1f}, {&(0x7f00000006c0)}], 0x2) 7m27.857242415s ago: executing program 33 (id=2370): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x10) syz_usb_connect(0x5, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce010900000000"], 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80), 0x0, &(0x7f0000000040)={[{'lock'}]}) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(r3, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7a}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getlink={0x28, 0x12, 0x301, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x8a6b, 0x11530}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xffffff80}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x4, 0x8, 0x8, 0x28}, 0x50) 18.274237788s ago: executing program 1 (id=3150): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8091}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x48044}, 0x0) 16.928320537s ago: executing program 1 (id=3153): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r1, 0x8b22, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000140)={0xf, 0x0, 0x2, 0x80}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.784804414s ago: executing program 2 (id=3157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000c900850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket(0x10, 0x803, 0x0) 14.795501192s ago: executing program 3 (id=3158): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x0) 13.539678185s ago: executing program 2 (id=3159): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffa, 0xfffffffffffffffc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x9, 0xdd, 0x5, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, &(0x7f0000003f80)={0x2020}, 0x2020) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81f0fa, 0xc574450d1af334b4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4044) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsmount(r5, 0x0, 0x5) rmdir(&(0x7f0000000240)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x15, 0x6, 0x17, 0x2, 0x803, 0x1, 0xd, 0xffffffffffffffff}}) 13.252813743s ago: executing program 1 (id=3161): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r6, @ANYRES32=r2], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 13.172428527s ago: executing program 6 (id=3162): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x31, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b1"}, @generic={0x80, 0x13, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0"}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@generic={0xff, 0xf, "50d650847249ad288702ebd0d654b9"}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}], 0x100}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x44000, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f556234701", 0xd0}, {&(0x7f0000002840)="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", 0xee3}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 11.855256815s ago: executing program 2 (id=3165): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003a0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32], 0x50) 11.495389206s ago: executing program 2 (id=3166): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) fsopen(0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@perf_event={0x7e}}, 0x18) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0xeeee8000, 0x10000, 0x8}) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) modify_ldt$write2(0x11, &(0x7f0000000100)={0x3ba, 0x20000000, 0x0, 0x1, 0x2, 0x1}, 0x10) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000380)={{@host}, 0x59, 0x2800000000000000, 0x1, 0xfffffffa}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) 11.374422133s ago: executing program 6 (id=3167): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="49592c5f3e4da0a09f3582771fe9eccc2dda6ed7803bdb45dd5c8fc7fc713e2764180d4554fc7b3a2d2458531c5977477ccc53ceeb3e5851cfb226079b8b2087784b8a1160b46353fee1f40dcc69dc7735d190c9f204bfab1e18a61b75c70c31233c0ffa1524cd6522b7448bcdb5a65e484747f6b6ed618618492b36cc40d77b3806ff95b95e7793504cc4854c") ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000c00027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) io_uring_enter(0xffffffffffffffff, 0x43d0, 0x4add, 0x1, &(0x7f0000000140)={[0x8]}, 0x8) 10.945141278s ago: executing program 6 (id=3168): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000280)=[{0x5, 0x1001, 0x0, 0x0}], 0x1}) 9.126982265s ago: executing program 5 (id=3170): socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x202842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x2000000000000021) 8.85660626s ago: executing program 3 (id=3171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000c900850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket(0x10, 0x803, 0x0) 7.941531834s ago: executing program 3 (id=3172): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') setresuid(0x0, 0xee01, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x11}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = dup2(r5, r3) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200040c5}, 0x814) 7.765021505s ago: executing program 6 (id=3173): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) ioctl(r1, 0x8b22, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r4, &(0x7f00000002c0)=""/75, 0x4b, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000140)={0xf, 0x0, 0x2, 0x80}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.520683059s ago: executing program 5 (id=3174): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x8091}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x1}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}, 0x1, 0x0, 0x0, 0x48044}, 0x0) 7.413311975s ago: executing program 3 (id=3175): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setrlimit(0xa, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000090000000000000000000000850000002c000000850000000800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES8=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x28}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40881) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8007, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r8, &(0x7f0000000500)=""/198, 0xc6) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="120000007d0000000800000002"], 0x48) 5.830976478s ago: executing program 5 (id=3176): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000003a0000000300000000000000", @ANYRES32=0x1, @ANYBLOB="000200"/20, @ANYRES32=0x0, @ANYRES32], 0x50) 4.932582491s ago: executing program 1 (id=3177): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffa, 0xfffffffffffffffc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x9, 0xdd, 0x5, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup3(r3, r2, 0x0) read$FUSE(r4, &(0x7f0000003f80)={0x2020}, 0x2020) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81f0fa, 0xc574450d1af334b4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4044) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsmount(r6, 0x0, 0x5) rmdir(&(0x7f0000000240)='./file0\x00') ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000340)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x15, 0x6, 0x17, 0x2, 0x803, 0x1, 0xd, 0xffffffffffffffff}}) 4.576422562s ago: executing program 5 (id=3178): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x31, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b1"}, @generic={0x80, 0x13, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0"}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x40, 0x29, 0x36, {0x5e, 0x4, '\x00', [@generic={0xff, 0xf, "50d650847249ad288702ebd0d654b9"}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}], 0x100}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) sendto$inet6(0xffffffffffffffff, &(0x7f0000000ec0)='\n', 0x1, 0x44000, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f556234701", 0xd0}, {&(0x7f0000002840)="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", 0xee3}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.176328345s ago: executing program 6 (id=3179): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r0, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="49592c5f3e4da0a09f3582771fe9eccc2dda6ed7803bdb45dd5c8fc7fc713e2764180d4554fc7b3a2d2458531c5977477ccc53ceeb3e5851cfb226079b8b2087784b8a1160b46353fee1f40dcc69dc7735d190c9f204bfab1e18a61b75c70c31233c0ffa1524cd6522b7448bcdb5a65e484747f6b6ed618618492b36cc40d77b3806ff95b95e7793504cc4854c") ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000500)) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x36}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000c00027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) io_uring_enter(0xffffffffffffffff, 0x43d0, 0x4add, 0x1, &(0x7f0000000140)={[0x8]}, 0x8) 3.689479284s ago: executing program 6 (id=3180): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') io_uring_setup(0x1694, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc06c4124, &(0x7f0000000080)) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36) 3.631616847s ago: executing program 2 (id=3181): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00'], 0x5}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@rand_addr=' \x01\x00', @remote, @private1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x80040306}) readv(r4, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x81) unshare(0x64000600) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r0) 3.528836283s ago: executing program 5 (id=3182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff00000000094600", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000c900850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x4001400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socket(0x10, 0x803, 0x0) 2.521250522s ago: executing program 2 (id=3183): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r3, 0xffffffffffffffff, 0x0) 2.474167155s ago: executing program 1 (id=3184): socket$nl_generic(0x10, 0x3, 0x10) mount$bind(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00), 0x202842, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x2000000000000021) 2.460789536s ago: executing program 3 (id=3185): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') setresuid(0x0, 0xee01, 0x0) writev(r0, &(0x7f00000003c0), 0x100000000000022d) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x11}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24004001}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x77359400}, {0x77359400}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000000040)=r3, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = dup2(r5, r3) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f00000000c0)=r6, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200040c5}, 0x814) 1.744805278s ago: executing program 5 (id=3186): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000280)=[{0x7, 0x200, 0x0, 0x0}, {0x5, 0x1001, 0x0, 0x0}], 0x2}) 1.317686953s ago: executing program 3 (id=3187): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) 0s ago: executing program 1 (id=3188): socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r4, @ANYRES32=r0], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) kernel console output (not intermixed with test programs): ow down [ 1218.658962][ T4630] bond0: (slave bond_slave_0): interface is now down [ 1218.668204][T13889] bond0: (slave bond_slave_0): interface is now down [ 1218.674990][T13889] bond0: (slave bond_slave_1): interface is now down [ 1218.757528][T13889] bond0: (slave syz_tun): interface is now down [ 1218.775342][ T4630] bond0: (slave bond_slave_1): interface is now down [ 1218.842434][ T4630] bond0: (slave syz_tun): interface is now down [ 1218.855372][T13889] bond0: (slave bond_slave_0): interface is now down [ 1218.865879][T13889] bond0: (slave bond_slave_1): interface is now down [ 1218.878907][ T4630] bond0: (slave bond_slave_0): interface is now down [ 1218.931447][T14090] random: crng reseeded on system resumption [ 1219.503980][T13889] bond0: (slave syz_tun): interface is now down [ 1219.545780][ T4630] bond0: (slave bond_slave_1): interface is now down [ 1219.552538][ T4630] bond0: (slave syz_tun): interface is now down [ 1219.559564][T13889] bond0: (slave bond_slave_0): interface is now down [ 1219.569053][T13889] bond0: (slave bond_slave_1): interface is now down [ 1219.595625][T13889] bond0: (slave syz_tun): interface is now down [ 1219.635260][ T4630] bond0: (slave bond_slave_0): interface is now down [ 1219.642057][ T4630] bond0: (slave bond_slave_1): interface is now down [ 1219.649465][T13889] bond0: (slave bond_slave_0): interface is now down [ 1219.659239][T13889] bond0: (slave bond_slave_1): interface is now down [ 1219.692563][T13795] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1219.725454][ T4630] bond0: (slave syz_tun): interface is now down [ 1219.735364][T13889] bond0: (slave syz_tun): interface is now down [ 1219.775271][ T4294] bond0: (slave bond_slave_0): interface is now down [ 1219.782039][ T4294] bond0: (slave bond_slave_1): interface is now down [ 1219.795663][T13795] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1219.815241][T13889] bond0: (slave bond_slave_0): interface is now down [ 1219.822047][T13889] bond0: (slave bond_slave_1): interface is now down [ 1219.826272][ T4294] bond0: (slave syz_tun): interface is now down [ 1219.891819][ T4489] bond0: (slave bond_slave_0): interface is now down [ 1219.903126][ T4489] bond0: (slave bond_slave_1): interface is now down [ 1219.911372][T13889] bond0: (slave syz_tun): interface is now down [ 1219.930667][ T4489] bond0: (slave syz_tun): interface is now down [ 1219.945243][T13889] bond0: (slave bond_slave_0): interface is now down [ 1219.962257][T13889] bond0: (slave bond_slave_1): interface is now down [ 1219.977713][T13889] bond0: (slave syz_tun): interface is now down [ 1219.985487][ T4489] bond0: (slave bond_slave_0): interface is now down [ 1219.992234][ T4489] bond0: (slave bond_slave_1): interface is now down [ 1220.009208][ T26] audit: type=1326 audit(1770002029.974:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14095 comm="syz.3.2450" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa28939aeb9 code=0x0 [ 1220.042808][ T4489] bond0: (slave syz_tun): interface is now down [ 1220.066821][ T4294] bond0: (slave bond_slave_0): interface is now down [ 1220.075292][ T4294] bond0: (slave bond_slave_1): interface is now down [ 1220.106972][ T4294] bond0: (slave syz_tun): interface is now down [ 1220.115344][T13889] bond0: (slave bond_slave_0): interface is now down [ 1220.198735][T13889] bond0: (slave bond_slave_1): interface is now down [ 1220.225755][T13889] bond0: (slave syz_tun): interface is now down [ 1220.235762][ T4294] bond0: (slave bond_slave_0): interface is now down [ 1220.395767][ T4294] bond0: (slave bond_slave_1): interface is now down [ 1220.428141][ T4526] bond0: (slave bond_slave_0): interface is now down [ 1220.444834][ T4526] bond0: (slave bond_slave_1): interface is now down [ 1220.565903][ T4294] bond0: (slave syz_tun): interface is now down [ 1220.595706][ T4630] bond0: (slave bond_slave_0): interface is now down [ 1220.602571][ T4526] bond0: (slave syz_tun): interface is now down [ 1220.626722][ T4630] bond0: (slave bond_slave_1): interface is now down [ 1220.645429][ T4526] bond0: (slave bond_slave_0): interface is now down [ 1220.656177][ T4526] bond0: (slave bond_slave_1): interface is now down [ 1220.663609][ T4630] bond0: (slave syz_tun): interface is now down [ 1220.688130][ T4526] bond0: (slave syz_tun): interface is now down [ 1220.744283][ T4630] bond0: (slave bond_slave_0): interface is now down [ 1220.757705][T13795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.797490][ T4630] bond0: (slave bond_slave_1): interface is now down [ 1220.804266][ T4630] bond0: (slave syz_tun): interface is now down [ 1220.811244][ T4526] bond0: (slave bond_slave_0): interface is now down [ 1220.874773][ T4526] bond0: (slave bond_slave_1): interface is now down [ 1220.922603][ T4526] bond0: (slave syz_tun): interface is now down [ 1220.955329][ T4630] bond0: (slave bond_slave_0): interface is now down [ 1220.955338][ T4526] bond0: (slave bond_slave_0): interface is now down [ 1220.955357][ T4526] bond0: (slave bond_slave_1): interface is now down [ 1220.962073][ T4630] bond0: (slave bond_slave_1): interface is now down [ 1220.962091][ T4630] bond0: (slave syz_tun): interface is now down [ 1221.201032][ T4630] bond0: (slave bond_slave_0): interface is now down [ 1221.213988][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1221.227731][ T4630] bond0: (slave bond_slave_1): interface is now down [ 1221.234986][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1221.249360][ T4630] bond0: (slave syz_tun): interface is now down [ 1221.267504][T13795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.296967][ T4630] bond0: (slave bond_slave_0): interface is now down [ 1221.314932][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1221.333965][ T4630] bond0: (slave bond_slave_1): interface is now down [ 1221.343501][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1221.365380][ T4630] bond0: (slave syz_tun): interface is now down [ 1221.375491][ T4526] bond0: (slave syz_tun): interface is now down [ 1221.390411][T11252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.397695][T11252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.435227][ T4641] bond0: (slave bond_slave_0): interface is now down [ 1221.450094][ T4641] bond0: (slave bond_slave_1): interface is now down [ 1221.465250][ T4489] bond0: (slave bond_slave_0): interface is now down [ 1221.472292][ T4641] bond0: (slave syz_tun): interface is now down [ 1221.479201][ T4489] bond0: (slave bond_slave_1): interface is now down [ 1221.535278][ T4489] bond0: (slave syz_tun): interface is now down [ 1221.543482][ T4294] bond0: (slave bond_slave_0): interface is now down [ 1221.556767][ T4294] bond0: (slave bond_slave_1): interface is now down [ 1221.563583][ T4294] bond0: (slave syz_tun): interface is now down [ 1221.570302][ T4526] bond0: (slave bond_slave_0): interface is now down [ 1221.583705][ T4526] bond0: (slave bond_slave_1): interface is now down [ 1221.602447][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1221.615882][ T4526] bond0: (slave syz_tun): interface is now down [ 1221.647177][ T4526] bond0: (slave bond_slave_0): interface is now down [ 1221.655645][ T4641] bond0: (slave bond_slave_0): interface is now down [ 1221.676058][ T4641] bond0: (slave bond_slave_1): interface is now down [ 1221.684269][T13765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.691952][ T4526] bond0: (slave bond_slave_1): interface is now down [ 1221.701828][ T4641] bond0: (slave syz_tun): interface is now down [ 1221.718677][ T4526] bond0: (slave syz_tun): interface is now down [ 1221.731227][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1221.746019][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1221.770847][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1221.786278][ T4526] bond0: (slave bond_slave_0): interface is now down [ 1221.794315][ T4641] bond0: (slave bond_slave_0): interface is now down [ 1221.803754][ T4526] bond0: (slave bond_slave_1): interface is now down [ 1221.815209][ T4641] bond0: (slave bond_slave_1): interface is now down [ 1221.822042][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1221.830152][ T4526] bond0: (slave syz_tun): interface is now down [ 1221.837297][ T4641] bond0: (slave syz_tun): interface is now down [ 1221.865359][ T4641] bond0: (slave bond_slave_0): interface is now down [ 1221.872522][ T4526] bond0: (slave bond_slave_0): interface is now down [ 1221.872975][T11252] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.886688][T11252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.901873][ T4641] bond0: (slave bond_slave_1): interface is now down [ 1221.911907][ T4526] bond0: (slave bond_slave_1): interface is now down [ 1221.930298][ T4641] bond0: (slave syz_tun): interface is now down [ 1221.937496][ T4526] bond0: (slave syz_tun): interface is now down [ 1221.960705][ T4526] bond0: now running without any active interface! [ 1221.975178][ T4641] bond0: (slave bond_slave_0): interface is now down [ 1221.992145][ T4641] bond0: (slave bond_slave_1): interface is now down [ 1222.025206][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1222.032926][ T4641] bond0: (slave syz_tun): interface is now down [ 1222.074196][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1222.075540][ T4641] bond0: (slave bond_slave_0): interface is now down [ 1222.135190][ T4641] bond0: (slave bond_slave_1): interface is now down [ 1222.141973][ T4641] bond0: (slave syz_tun): interface is now down [ 1222.194739][ T4641] bond0: now running without any active interface! [ 1222.277426][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1222.321058][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1222.417294][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1222.451137][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1222.498585][T13795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1222.547383][T13795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1223.356235][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1223.373496][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1223.413465][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1223.432480][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1223.452968][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1223.490569][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1223.600315][ T75] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.807286][ T75] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.977232][ T75] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.147309][ T75] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1224.270160][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1224.293393][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1224.362287][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1224.376176][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1224.460031][T13795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.494942][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1224.511238][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1224.650349][T13765] device veth0_vlan entered promiscuous mode [ 1224.658705][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1224.685714][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1224.731284][T13765] device veth1_vlan entered promiscuous mode [ 1224.894468][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1224.932349][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1225.011450][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1225.060521][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1225.130256][ T75] tipc: Left network mode [ 1225.138844][T13765] device veth0_macvtap entered promiscuous mode [ 1225.326824][T13765] device veth1_macvtap entered promiscuous mode [ 1227.117380][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1227.196199][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1227.530984][T13765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.612321][T13765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.677164][T13765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.745787][T13765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.805377][T13765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.865449][T13765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.915168][T13765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1227.957658][T13765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.007949][T13765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.341750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1228.358010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1228.380262][T13765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.404542][T13765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.437233][T13765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.467422][T13765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.485268][T13765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.515578][T13765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.535128][T13765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1228.555102][T13765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.587890][T13765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.368112][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1229.396553][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1229.434806][T13765] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.444401][T13765] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.453426][T13765] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.462837][T13765] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.809593][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1229.836245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1229.972911][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1230.016077][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1230.044332][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1230.080175][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1230.119283][ T3652] kernel write not supported for file /snd/pcmC0D0p (pid: 3652 comm: kworker/0:3) [ 1230.402464][T13795] device veth0_vlan entered promiscuous mode [ 1230.462595][T14211] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2464'. [ 1230.544481][T13795] device veth1_vlan entered promiscuous mode [ 1230.584274][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1230.605136][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1230.705716][ T4630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1231.970631][ T26] audit: type=1326 audit(1770002041.924:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409f79aeb9 code=0x7ffc0000 [ 1232.067576][T14226] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1232.409948][ T26] audit: type=1326 audit(1770002041.924:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409f79aeb9 code=0x7ffc0000 [ 1232.746466][ T26] audit: type=1326 audit(1770002041.924:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14216 comm="syz.1.2466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f409f79aeb9 code=0x7ffc0000 [ 1232.949944][T13889] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.963860][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1232.992476][T13889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1233.001609][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1233.028539][T14222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'. [ 1233.037829][T14222] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'. [ 1233.047372][T14223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'. [ 1233.056632][T14223] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'. [ 1233.187799][T13795] device veth0_macvtap entered promiscuous mode [ 1233.246010][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1233.266426][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1233.308656][T13795] device veth1_macvtap entered promiscuous mode [ 1233.636924][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1233.677688][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1233.724508][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.184306][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.459733][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.634341][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.693457][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.748745][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.908161][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1235.142025][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.207788][T13795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1235.262283][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1235.309609][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1235.378766][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.400075][T14263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1235.430058][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.491174][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.509520][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.519548][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.555129][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.565037][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.602626][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.622959][T13795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1235.644118][T13795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1235.686786][T13795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1235.697024][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1235.717572][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1235.749473][T13795] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.765225][T13795] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.785239][ T4333] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 1235.795168][T13795] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.803942][T13795] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.987374][ T4333] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1236.024445][ T4333] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1236.107776][ T4333] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1236.132893][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.210368][ T75] device hsr_slave_0 left promiscuous mode [ 1236.227548][ T75] device hsr_slave_1 left promiscuous mode [ 1236.234425][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1236.242263][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1236.256103][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1236.263966][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1236.278094][ T75] device bridge_slave_1 left promiscuous mode [ 1236.285621][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.318084][ T75] device bridge_slave_0 left promiscuous mode [ 1236.334366][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.387943][ T4333] usb 4-1: usb_control_msg returned -32 [ 1236.395478][ T4333] usbtmc 4-1:16.0: can't read capabilities [ 1236.429385][ T75] device veth1_macvtap left promiscuous mode [ 1236.444476][ T75] device veth0_macvtap left promiscuous mode [ 1236.458651][ T75] device veth1_vlan left promiscuous mode [ 1236.466539][ T75] device veth0_vlan left promiscuous mode [ 1237.050917][T14280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.061219][T14280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.132079][T14281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.140764][T14281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.778352][ T75] team0 (unregistering): Port device batadv1 removed [ 1237.979618][T14285] random: crng reseeded on system resumption [ 1238.596877][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.603456][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.099639][T12556] usb 4-1: USB disconnect, device number 19 [ 1240.368888][T14295] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1240.408723][ T8738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1240.419579][ T8738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1240.429797][ T8738] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1240.437866][ T8738] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1240.445798][ T8738] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1240.453179][ T8738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1241.608895][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1241.706225][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1241.789021][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1241.864178][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1242.515515][ T8738] Bluetooth: hci4: command 0x0409 tx timeout [ 1242.733371][ T75] bond0 (unregistering): Released all slaves [ 1244.636488][ T8738] Bluetooth: hci4: command 0x041b tx timeout [ 1246.067797][T14342] netlink: 'syz.3.2488': attribute type 21 has an invalid length. [ 1246.075910][T14342] netlink: 'syz.3.2488': attribute type 6 has an invalid length. [ 1246.083714][T14342] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2488'. [ 1246.678909][ T8738] Bluetooth: hci4: command 0x040f tx timeout [ 1247.400125][ T75] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.040775][T14299] chnl_net:caif_netlink_parms(): no params data found [ 1248.317448][T14380] random: crng reseeded on system resumption [ 1248.981247][ T8738] Bluetooth: hci4: command 0x0419 tx timeout [ 1249.214131][ T75] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.478032][ T75] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.920895][ T75] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.965770][T14299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.965852][T14299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.967104][T14299] device bridge_slave_0 entered promiscuous mode [ 1249.969247][T14299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.969334][T14299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.970532][T14299] device bridge_slave_1 entered promiscuous mode [ 1250.141654][T14299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.145334][ T4310] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1250.174858][T14299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.326045][ T4310] usb 3-1: Using ep0 maxpacket: 16 [ 1250.345394][ T4310] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1250.345422][ T4310] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1250.345439][ T4310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1250.345462][ T4310] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1250.345480][ T4310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.356433][ T4310] usb 3-1: config 0 descriptor?? [ 1250.465715][T14299] team0: Port device team_slave_0 added [ 1250.468595][T14299] team0: Port device team_slave_1 added [ 1250.647055][T14398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1250.658163][T14398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1250.730212][T14299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.730227][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.730254][T14299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.744042][T14299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.744077][T14299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.744097][T14299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1250.892765][T14299] device hsr_slave_0 entered promiscuous mode [ 1250.935814][T14299] device hsr_slave_1 entered promiscuous mode [ 1250.947575][T14299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1250.947725][T14299] Cannot create hsr debugfs directory [ 1252.687136][T14413] netlink: 'syz.5.2499': attribute type 21 has an invalid length. [ 1252.695208][T14413] netlink: 'syz.5.2499': attribute type 6 has an invalid length. [ 1252.702987][T14413] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2499'. [ 1252.827269][ T4310] usbhid 3-1:0.0: can't add hid device: -71 [ 1252.846509][ T4310] usbhid: probe of 3-1:0.0 failed with error -71 [ 1253.068292][ T4310] usb 3-1: USB disconnect, device number 25 [ 1255.557191][ T75] device hsr_slave_0 left promiscuous mode [ 1255.709835][ T75] device hsr_slave_1 left promiscuous mode [ 1255.762255][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1255.795547][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1255.850500][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1255.922082][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1255.955891][ T75] device bridge_slave_1 left promiscuous mode [ 1255.962251][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.199792][ T75] device bridge_slave_0 left promiscuous mode [ 1256.218794][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.471422][T14451] random: crng reseeded on system resumption [ 1256.925861][T14457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1256.969068][ T75] device veth1_macvtap left promiscuous mode [ 1256.992529][ T75] device veth0_macvtap left promiscuous mode [ 1257.013801][ T75] device veth1_vlan left promiscuous mode [ 1257.041503][ T75] device veth0_vlan left promiscuous mode [ 1257.185267][ T4325] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1257.253287][ T4310] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1257.402554][ T4325] usb 3-1: Using ep0 maxpacket: 16 [ 1257.424135][ T4325] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1257.441140][ T4325] usb 3-1: config 0 has no interface number 0 [ 1257.447859][ T4325] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1257.459661][ T4325] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1257.471657][ T4310] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1257.482210][ T4310] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1257.496472][ T4310] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1257.509009][ T4325] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1257.528808][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1257.540626][ T4310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.550701][ T4325] usb 3-1: Product: syz [ 1257.557170][ T4325] usb 3-1: SerialNumber: syz [ 1257.566870][ T4325] usb 3-1: config 0 descriptor?? [ 1257.576972][ T4325] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1257.585955][ T4325] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input13 [ 1257.767867][ T4310] usb 2-1: usb_control_msg returned -32 [ 1257.782295][ T4310] usbtmc 2-1:16.0: can't read capabilities [ 1257.790881][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1257.801641][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1257.809229][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1257.822569][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1257.834065][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1257.844553][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1257.852442][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1257.859750][ T4325] usb 3-1: USB disconnect, device number 26 [ 1257.867162][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1257.874187][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1257.894760][ T4325] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1258.482721][T14463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.493797][T14463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.509004][T14463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1258.519437][T14463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1258.951013][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1259.198752][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1259.269535][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.365990][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.050233][ T75] bond0 (unregistering): Released all slaves [ 1260.200659][ T6592] kernel write not supported for file /snd/pcmC0D0p (pid: 6592 comm: kworker/0:10) [ 1260.230274][ T4325] usb 2-1: USB disconnect, device number 15 [ 1260.416071][T14459] netlink: 'syz.5.2509': attribute type 21 has an invalid length. [ 1260.424040][T14459] netlink: 'syz.5.2509': attribute type 6 has an invalid length. [ 1260.432101][T14459] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2509'. [ 1260.788858][T14299] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1261.180949][T14299] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1261.774333][T14299] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1261.872625][T14299] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1262.845797][T14299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1262.963373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1263.000056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1263.053390][T14299] 8021q: adding VLAN 0 to HW filter on device team0 [ 1263.088306][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1263.098008][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1263.139370][ T4526] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.146663][ T4526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1263.250610][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1263.276787][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1263.329767][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1263.362423][ T4526] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.369785][ T4526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1263.405590][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1263.444314][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1263.475290][T12556] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1263.507467][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1263.540139][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1263.579124][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1263.601677][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1263.635022][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1263.655252][T12556] usb 2-1: Using ep0 maxpacket: 32 [ 1263.663205][T12556] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1263.667211][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1263.736508][T12556] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1263.749291][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1263.795605][T12556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.822428][T14299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1263.853267][T12556] usb 2-1: config 0 descriptor?? [ 1263.880209][T14299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1264.009003][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1264.042255][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1265.577903][T14534] xt_CT: No such helper "snmp_trap" [ 1266.137329][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1266.166494][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1266.203792][T14299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.357898][ T6592] usb 2-1: USB disconnect, device number 16 [ 1266.632816][T14553] loop5: detected capacity change from 0 to 128 [ 1266.683950][T14553] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1266.802358][T14553] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1270.217537][T14583] program syz.3.2532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1270.746821][T14591] netlink: 'syz.1.2533': attribute type 21 has an invalid length. [ 1270.754841][T14591] netlink: 'syz.1.2533': attribute type 6 has an invalid length. [ 1270.763490][T14591] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2533'. [ 1271.342060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1271.356479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1271.411453][ T6592] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1271.428871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1271.440319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1271.481296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1271.499935][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1271.511078][T14299] device veth0_vlan entered promiscuous mode [ 1271.625567][ T6592] usb 2-1: Using ep0 maxpacket: 32 [ 1271.637250][ T6592] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1271.673815][ T6592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.706282][T14299] device veth1_vlan entered promiscuous mode [ 1271.708577][ T6592] usb 2-1: config 0 descriptor?? [ 1271.732824][ T26] audit: type=1326 audit(1770002081.694:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.3.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28939aeb9 code=0x7ffc0000 [ 1271.792486][ T26] audit: type=1326 audit(1770002081.724:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.3.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28939aeb9 code=0x7ffc0000 [ 1272.018144][ T6592] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1272.034146][ T6592] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1272.042886][ T6592] dib0700: firmware download failed at 7 with -22 [ 1272.058041][ T6592] usb 2-1: USB disconnect, device number 17 [ 1272.064087][ T26] audit: type=1326 audit(1770002081.784:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.3.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7fa28939aeb9 code=0x7ffc0000 [ 1272.089517][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1272.114150][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1272.158824][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1272.187497][ T26] audit: type=1326 audit(1770002081.784:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.3.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28939aeb9 code=0x7ffc0000 [ 1272.222304][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1272.259702][T14299] device veth0_macvtap entered promiscuous mode [ 1272.342036][T14299] device veth1_macvtap entered promiscuous mode [ 1272.349629][ T26] audit: type=1326 audit(1770002081.784:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14603 comm="syz.3.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28939aeb9 code=0x7ffc0000 [ 1272.384418][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1272.398740][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1272.467285][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.518935][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.564115][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.641661][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.685210][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.738511][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.824965][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1272.857247][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1272.897099][T14299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.934910][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1272.962197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1273.011291][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.045102][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.061233][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.091104][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.115147][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.145186][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.165095][T14299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1273.185222][T14299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1273.226047][T14299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.246731][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1273.279164][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1273.306965][T14299] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.325365][T12556] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1273.359735][T14299] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.550969][T14299] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.582442][T14299] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.635298][T12556] usb 3-1: Using ep0 maxpacket: 32 [ 1273.643125][T12556] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1273.677863][T14632] netlink: 'syz.3.2544': attribute type 21 has an invalid length. [ 1273.686503][T14632] netlink: 'syz.3.2544': attribute type 6 has an invalid length. [ 1273.695609][T14632] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2544'. [ 1273.705743][T14633] device syzkaller0 entered promiscuous mode [ 1273.835205][T12556] usb 3-1: config 0 has no interface number 0 [ 1273.880993][T12556] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1273.915449][T12556] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1274.085178][T12556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.115756][T12556] usb 3-1: Product: syz [ 1274.137119][T12556] usb 3-1: Manufacturer: syz [ 1274.192992][T12556] usb 3-1: SerialNumber: syz [ 1274.836486][T12556] usb 3-1: config 0 descriptor?? [ 1275.074659][T12556] ipheth 3-1:0.196: Unable to find endpoints [ 1275.100211][T12556] usb 3-1: USB disconnect, device number 27 [ 1275.118185][ T4526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.129508][ T4526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.142939][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1275.434271][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.513966][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.643569][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1275.918489][T14656] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1275.929626][T14656] team0: Port device batadv1 added [ 1275.954711][T14656] hub 9-0:1.0: USB hub found [ 1275.996948][T14656] hub 9-0:1.0: 1 port detected [ 1276.325331][T12243] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1276.525125][T12243] usb 3-1: Using ep0 maxpacket: 32 [ 1276.533896][T12243] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1276.586170][T12243] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.609110][T12243] usb 3-1: config 0 descriptor?? [ 1276.857194][T12243] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1276.891032][T12243] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1277.042736][T12243] dib0700: firmware download failed at 7 with -22 [ 1277.063255][T12243] usb 3-1: USB disconnect, device number 28 [ 1277.877615][T14683] random: crng reseeded on system resumption [ 1280.734232][T14710] loop1: detected capacity change from 0 to 2048 [ 1281.779584][T14710] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1281.825768][T14710] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1285.335131][T14738] random: crng reseeded on system resumption [ 1286.400041][T14743] device syzkaller0 entered promiscuous mode [ 1286.415316][ T4325] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1286.636370][ T4325] usb 3-1: Using ep0 maxpacket: 32 [ 1286.650158][ T4325] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1286.660383][ T4325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.679282][ T4325] usb 3-1: config 0 descriptor?? [ 1286.889843][ T4325] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1286.911453][ T4325] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1286.935129][ T4325] dib0700: firmware download failed at 7 with -22 [ 1286.971096][ T4325] usb 3-1: USB disconnect, device number 29 [ 1287.833887][T14767] capability: warning: `syz.5.2573' uses deprecated v2 capabilities in a way that may be insecure [ 1288.542197][T14777] loop2: detected capacity change from 0 to 2048 [ 1288.580735][T14777] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1289.757498][T14777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1291.195634][T14788] affs: No valid root block on device nullb0 [ 1293.784334][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2581'. [ 1293.793525][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2581'. [ 1293.803748][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2581'. [ 1293.812956][T14811] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2581'. [ 1293.926279][T14812] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1293.936273][ T26] audit: type=1326 audit(1770002103.794:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1294.460916][ T26] audit: type=1326 audit(1770002103.794:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1294.675936][ T26] audit: type=1326 audit(1770002103.794:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14802 comm="syz.6.2581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1297.813035][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058b5f800: rx timeout, send abort [ 1297.824621][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888058b5f800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1299.023246][T14870] random: crng reseeded on system resumption [ 1299.082755][T14871] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1300.074304][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.087933][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.858422][T14886] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1300.908890][T14886] team0: Port device batadv2 added [ 1300.921160][T14894] loop2: detected capacity change from 0 to 8 [ 1301.799061][ T26] audit: type=1800 audit(1770002111.764:71): pid=14898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2600" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 1302.115345][ T8738] Bluetooth: hci5: command 0x0406 tx timeout [ 1305.765507][T13273] kernel write not supported for file /snd/pcmC0D0p (pid: 13273 comm: kworker/1:11) [ 1307.046654][T14943] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2607'. [ 1307.244875][T14946] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1313.355912][T14988] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1313.618978][T14993] hub 9-0:1.0: USB hub found [ 1313.644050][T14993] hub 9-0:1.0: 1 port detected [ 1313.709081][T14999] random: crng reseeded on system resumption [ 1314.520784][T14988] team0: Port device batadv1 added [ 1314.704176][T15005] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1317.919851][T15014] device syzkaller0 entered promiscuous mode [ 1318.101060][T15019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2625'. [ 1320.102461][T15041] loop1: detected capacity change from 0 to 4096 [ 1321.358830][T15054] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1321.430397][T15055] random: crng reseeded on system resumption [ 1322.405929][ T26] audit: type=1800 audit(1770002132.374:72): pid=15041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2628" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 1323.826613][T15084] device syzkaller0 entered promiscuous mode [ 1324.638425][T15095] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1325.016866][T15102] hub 9-0:1.0: USB hub found [ 1325.017693][T15095] team0: Port device batadv5 added [ 1325.125262][T15102] hub 9-0:1.0: 1 port detected [ 1327.799553][T15134] random: crng reseeded on system resumption [ 1329.067881][T15142] netlink: 'syz.3.2648': attribute type 21 has an invalid length. [ 1329.075869][T15142] netlink: 'syz.3.2648': attribute type 6 has an invalid length. [ 1329.083695][T15142] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2648'. [ 1329.848050][T15148] device syzkaller0 entered promiscuous mode [ 1330.615221][T15159] loop2: detected capacity change from 0 to 136 [ 1333.256893][T15192] device bridge0 entered promiscuous mode [ 1333.351705][T15192] device vlan2 entered promiscuous mode [ 1334.030743][T15198] netlink: 'syz.6.2662': attribute type 21 has an invalid length. [ 1334.039016][T15198] netlink: 'syz.6.2662': attribute type 6 has an invalid length. [ 1334.046957][T15198] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2662'. [ 1334.387544][T15206] device syzkaller0 entered promiscuous mode [ 1334.528020][T15212] random: crng reseeded on system resumption [ 1335.028236][T15211] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1336.189407][T15221] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1336.213595][T15221] team0: Port device batadv2 added [ 1336.337621][ T4410] kernel write not supported for file /snd/pcmC0D0p (pid: 4410 comm: kworker/0:7) [ 1336.381946][T15223] hub 9-0:1.0: USB hub found [ 1336.420537][T15223] hub 9-0:1.0: 1 port detected [ 1338.309226][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2672'. [ 1338.772163][T15247] netlink: 'syz.6.2673': attribute type 21 has an invalid length. [ 1338.780165][T15247] netlink: 'syz.6.2673': attribute type 6 has an invalid length. [ 1338.788060][T15247] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2673'. [ 1339.860774][T15266] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1339.895795][T15266] cgroup: No subsys list or none specified [ 1341.945929][T15271] device syzkaller0 entered promiscuous mode [ 1342.370622][T15275] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 1344.662070][T15294] netlink: 'syz.2.2686': attribute type 21 has an invalid length. [ 1344.670080][T15294] netlink: 'syz.2.2686': attribute type 6 has an invalid length. [ 1344.678094][T15294] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2686'. [ 1345.639686][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2688'. [ 1346.102914][T15312] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1346.137801][T15312] cgroup: No subsys list or none specified [ 1347.796433][T15313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'. [ 1349.390839][T15328] device syzkaller0 entered promiscuous mode [ 1349.682007][T15335] RDS: rds_bind could not find a transport for ::ffff:172.30.0.6, load rds_tcp or rds_rdma? [ 1351.092783][T13518] kernel write not supported for file /snd/pcmC0D0p (pid: 13518 comm: kworker/0:2) [ 1352.286148][T15342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.720111][T13518] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1354.127157][T13518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1354.139043][T15357] netlink: 'syz.1.2700': attribute type 21 has an invalid length. [ 1354.146995][T15357] netlink: 'syz.1.2700': attribute type 6 has an invalid length. [ 1354.155474][T15357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2700'. [ 1354.236663][T13518] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.332224][T15360] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1354.370884][T15360] cgroup: No subsys list or none specified [ 1355.857227][T13518] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1356.056125][T13518] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1356.348820][T13518] usb 3-1: config 0 descriptor?? [ 1356.433263][T13518] usb 3-1: can't set config #0, error -71 [ 1356.481190][T13518] usb 3-1: USB disconnect, device number 30 [ 1357.476937][T15372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2704'. [ 1357.969886][ T4333] kernel write not supported for file /snd/pcmC0D0p (pid: 4333 comm: kworker/1:7) [ 1359.380124][T15383] loop2: detected capacity change from 0 to 16 [ 1359.567238][T15383] erofs: (device loop2): EXPERIMENTAL compressed fragments feature in use. Use at your own risk! [ 1359.805370][T15383] erofs: (device loop2): EXPERIMENTAL global deduplication feature in use. Use at your own risk! [ 1360.935181][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2709'. [ 1361.489079][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.495499][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.115405][T11081] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1363.555428][ T8738] Bluetooth: hci4: command 0x0406 tx timeout [ 1363.575519][T15418] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1365.170184][T15418] cgroup: No subsys list or none specified [ 1365.996968][T15423] loop2: detected capacity change from 0 to 32768 [ 1366.071075][T15428] device syzkaller0 entered promiscuous mode [ 1366.169312][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2716'. [ 1366.178495][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2716'. [ 1366.196146][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2716'. [ 1366.205317][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2716'. [ 1366.316401][T15436] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1366.636860][T15423] XFS (loop2): Mounting V5 Filesystem [ 1366.744597][T15423] XFS (loop2): Ending clean mount [ 1366.922545][T15423] XFS (loop2): Quotacheck needed: Please wait. [ 1367.098855][T15423] XFS (loop2): Quotacheck: Done. [ 1370.222774][ T7325] XFS (loop2): Unmounting Filesystem [ 1370.336588][T15462] loop1: detected capacity change from 0 to 16 [ 1371.617807][T15460] loop6: detected capacity change from 0 to 32768 [ 1371.751494][T14187] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1371.842758][T15460] XFS (loop6): Mounting V5 Filesystem [ 1372.257839][T15475] netlink: 'syz.5.2726': attribute type 21 has an invalid length. [ 1372.266267][T15475] netlink: 'syz.5.2726': attribute type 6 has an invalid length. [ 1372.274246][T15475] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2726'. [ 1372.898938][T15460] XFS (loop6): Ending clean mount [ 1372.909330][T15460] XFS (loop6): Quotacheck needed: Please wait. [ 1373.022010][T15460] XFS (loop6): Quotacheck: Done. [ 1373.686581][T15485] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1374.158309][T15484] cgroup: No subsys list or none specified [ 1374.213296][T14299] XFS (loop6): Unmounting Filesystem [ 1374.616235][T15493] device syzkaller0 entered promiscuous mode [ 1376.200322][ T4333] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1376.735101][ T4333] usb 2-1: Using ep0 maxpacket: 32 [ 1376.742342][ T4333] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1376.928266][ T4333] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.964512][ T4333] usb 2-1: config 0 descriptor?? [ 1377.219864][ T4333] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1377.240458][ T4333] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1377.248869][ T4333] dib0700: firmware download failed at 7 with -22 [ 1377.567517][ T4410] usb 2-1: USB disconnect, device number 18 [ 1377.799187][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'. [ 1379.678581][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2731'. [ 1379.688191][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2731'. [ 1379.785496][T15553] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1380.911997][T15556] loop3: detected capacity change from 0 to 32768 [ 1381.015519][T15567] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 1381.072368][T15567] cgroup: No subsys list or none specified [ 1381.350883][T15556] XFS (loop3): Mounting V5 Filesystem [ 1382.052795][T15556] XFS (loop3): Ending clean mount [ 1382.060428][T15556] XFS (loop3): Quotacheck needed: Please wait. [ 1382.105311][T15575] loop5: detected capacity change from 0 to 1024 [ 1382.134812][T15575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1382.245308][T15575] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1382.274483][T15575] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1382.334495][T15584] random: crng reseeded on system resumption [ 1383.029867][T15575] System zones: 0-1, 3-36 [ 1383.061174][T15556] XFS (loop3): Quotacheck: Done. [ 1383.292720][T15575] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1386.000614][T15605] loop1: detected capacity change from 0 to 32768 [ 1386.363619][T15606] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 1386.363619][T15606] [ 1386.380791][T15606] ERROR: (device loop1): remounting filesystem as read-only [ 1386.401063][T15606] syz.1.2748: attempt to access beyond end of device [ 1386.401063][T15606] loop1: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 1386.755707][ T4267] XFS (loop3): Unmounting Filesystem [ 1387.274308][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2750'. [ 1387.283567][T15618] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2750'. [ 1387.353756][T15619] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1388.128146][ T107] blkno = 1580, nblocks = 1 [ 1388.132842][ T107] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 1388.132842][ T107] [ 1388.346778][T13765] EXT4-fs (loop5): unmounting filesystem. [ 1390.515138][T13518] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1391.173439][T15642] random: crng reseeded on system resumption [ 1391.238212][T15639] loop2: detected capacity change from 0 to 131072 [ 1391.470064][T15639] F2FS-fs (loop2): invalid crc value [ 1391.515360][T13518] usb 4-1: Using ep0 maxpacket: 32 [ 1391.532514][T13518] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1391.545861][T15639] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1391.579944][T13518] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.605243][T15639] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 1391.630884][T15639] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 1391.686949][T13518] usb 4-1: config 0 descriptor?? [ 1392.115687][T13518] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 1392.443557][T13518] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1392.789842][T13518] dib0700: firmware download failed at 7 with -22 [ 1393.639482][T13518] usb 4-1: USB disconnect, device number 20 [ 1393.906881][T15675] netlink: 'syz.1.2762': attribute type 10 has an invalid length. [ 1394.117307][T13518] kernel write not supported for file /snd/pcmC0D0p (pid: 13518 comm: kworker/0:2) [ 1394.838573][T15688] vivid-007: kernel_thread() failed [ 1395.123750][T15675] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1396.716359][T15704] random: crng reseeded on system resumption [ 1397.667974][T15694] loop3: detected capacity change from 0 to 40427 [ 1397.696835][T15694] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1397.705480][T15694] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1397.797018][T15694] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1398.157319][T15726] loop2: detected capacity change from 0 to 1024 [ 1398.170841][T15726] EXT4-fs: Ignoring removed orlov option [ 1398.176999][T15726] EXT4-fs: Ignoring removed bh option [ 1398.250528][T15726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1402.086568][T15765] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1402.132641][T15765] team0: Port device batadv4 added [ 1402.403416][T11081] kernel write not supported for file /snd/pcmC0D0p (pid: 11081 comm: kworker/1:2) [ 1403.457547][T15773] loop1: detected capacity change from 0 to 1024 [ 1403.464880][T15773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1403.473691][T15761] hub 9-0:1.0: USB hub found [ 1403.532074][T15761] hub 9-0:1.0: 1 port detected [ 1403.595343][T15773] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1403.701374][T15773] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 1403.835254][T15773] System zones: 0-1, 3-36 [ 1403.864892][ T7325] EXT4-fs (loop2): unmounting filesystem. [ 1403.887954][T15773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1405.004383][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 1405.344710][T15804] loop5: detected capacity change from 0 to 32768 [ 1405.547279][T15805] ERROR: (device loop5): dbAlloc: the hint is outside the map [ 1405.547279][T15805] [ 1405.565696][T15805] ERROR: (device loop5): remounting filesystem as read-only [ 1405.581888][T15805] syz.5.2785: attempt to access beyond end of device [ 1405.581888][T15805] loop5: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 1406.509795][ T107] blkno = 1580, nblocks = 1 [ 1406.514643][ T107] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map [ 1406.514643][ T107] [ 1406.681687][T15821] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1407.731096][ T26] audit: type=1326 audit(1770002217.694:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.6.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1407.761255][T15828] netlink: 'syz.2.2791': attribute type 21 has an invalid length. [ 1407.769694][T15828] netlink: 'syz.2.2791': attribute type 6 has an invalid length. [ 1407.777810][T15828] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2791'. [ 1407.859345][ T4333] kernel write not supported for file /snd/pcmC0D0p (pid: 4333 comm: kworker/1:7) [ 1407.965353][ T26] audit: type=1326 audit(1770002217.694:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.6.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1408.148159][ T26] audit: type=1326 audit(1770002217.694:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.6.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1408.780423][T15835] loop5: detected capacity change from 0 to 4096 [ 1408.845532][T15835] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1408.900705][ T26] audit: type=1326 audit(1770002217.694:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.6.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1409.010178][T15844] loop6: detected capacity change from 0 to 1024 [ 1409.092631][T15844] EXT4-fs: Ignoring removed orlov option [ 1409.105343][ T26] audit: type=1326 audit(1770002217.694:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.6.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1409.146903][T15844] EXT4-fs: Ignoring removed bh option [ 1409.249186][ T26] audit: type=1326 audit(1770002217.694:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.6.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1409.272762][T15844] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1409.282259][ T26] audit: type=1326 audit(1770002217.694:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.6.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1409.306063][ T26] audit: type=1326 audit(1770002217.694:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.6.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1409.329377][ T26] audit: type=1326 audit(1770002217.724:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.6.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1409.353582][ T26] audit: type=1326 audit(1770002217.724:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.6.2793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac179aeb9 code=0x7ffc0000 [ 1409.388666][T15835] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 1409.396381][ T4333] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1409.440677][T15835] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1409.552247][T15852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2795'. [ 1409.645181][ T4333] usb 4-1: Using ep0 maxpacket: 32 [ 1409.653808][ T4333] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1409.668719][ T4333] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1409.874280][ T4333] usb 4-1: config 0 has no interface number 0 [ 1409.891797][ T4333] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1409.899991][ T4333] usb 4-1: config 0 has no interface number 0 [ 1409.907532][ T4333] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1409.915643][ T4333] usb 4-1: config 0 has no interface number 0 [ 1409.923056][ T4333] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1409.931190][ T4333] usb 4-1: config 0 has no interface number 0 [ 1409.938785][ T4333] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1409.989945][ T4333] usb 4-1: config 0 has no interface number 0 [ 1410.850480][ T4333] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1410.859029][ T4333] usb 4-1: config 0 has no interface number 0 [ 1410.860485][T13765] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 1410.875302][ T4333] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1410.883634][T13765] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 1410.892203][ T4333] usb 4-1: config 0 has no interface number 0 [ 1410.899785][ T4333] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 1411.025538][ T4333] usb 4-1: config 0 has no interface number 0 [ 1411.099163][ T4333] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1411.129771][ T4333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.138065][ T4333] usb 4-1: Product: syz [ 1411.141538][T14299] EXT4-fs (loop6): unmounting filesystem. [ 1411.142473][ T4333] usb 4-1: Manufacturer: syz [ 1411.152830][ T4333] usb 4-1: SerialNumber: syz [ 1411.174482][ T4333] usb 4-1: config 0 descriptor?? [ 1411.193933][ T4333] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 1411.598792][ T4333] etas_es58x 4-1:0.2: es58x_get_product_info: Could not read the product info: -EPROTO [ 1411.629091][ T4333] etas_es58x: probe of 4-1:0.2 failed with error -71 [ 1411.681834][T15841] netlink: 'syz.2.2804': attribute type 21 has an invalid length. [ 1411.711274][ T4333] usb 4-1: USB disconnect, device number 21 [ 1411.726602][T15841] netlink: 'syz.2.2804': attribute type 6 has an invalid length. [ 1411.753318][T15841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2804'. [ 1414.290262][T15900] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1415.314218][ T8319] kernel write not supported for file /snd/pcmC0D0p (pid: 8319 comm: kworker/1:10) [ 1415.324516][T15911] loop2: detected capacity change from 0 to 16 [ 1415.331755][T15911] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1417.170401][T15925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2811'. [ 1417.371575][T15923] loop1: detected capacity change from 0 to 1024 [ 1417.573937][T15923] EXT4-fs: Ignoring removed orlov option [ 1417.615392][T15923] EXT4-fs: Ignoring removed bh option [ 1417.830218][T15923] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1417.842039][T15930] random: crng reseeded on system resumption [ 1419.023374][T15948] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2815'. [ 1419.198419][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 1420.053612][T15961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1420.062872][T15961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1420.072953][T15961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1420.082182][T15961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2818'. [ 1420.373504][T15962] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1422.969317][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.975722][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.117093][T15982] loop3: detected capacity change from 0 to 16 [ 1423.124161][T15982] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1423.340640][ T4333] kernel write not supported for file /snd/pcmC0D0p (pid: 4333 comm: kworker/1:7) [ 1425.032184][T15987] vivid-005: kernel_thread() failed [ 1426.711857][T16020] loop6: detected capacity change from 0 to 4096 [ 1426.770959][T16020] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 1426.912169][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2830'. [ 1426.921407][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2830'. [ 1426.934516][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2830'. [ 1426.943833][T16025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2830'. [ 1427.058991][T16026] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1427.771567][T16020] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 1427.825207][T16020] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1427.913933][T16032] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1428.109021][T14299] ntfs3: loop6: ntfs_sync_fs r=1a failed, -22. [ 1428.125662][T14299] ntfs3: loop6: ntfs_evict_inode r=1a failed, -22. [ 1429.516350][T16061] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2835'. [ 1429.573210][T13518] kernel write not supported for file /snd/pcmC0D0p (pid: 13518 comm: kworker/0:2) [ 1430.895364][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 1434.012869][T16096] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1434.325916][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2841'. [ 1434.335929][T16093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2841'. [ 1434.345186][T16094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2841'. [ 1434.354195][T16094] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2841'. [ 1434.840415][T16106] random: crng reseeded on system resumption [ 1435.170986][ T8319] kernel write not supported for file /snd/pcmC0D0p (pid: 8319 comm: kworker/1:10) [ 1436.401194][T16126] loop3: detected capacity change from 0 to 16 [ 1436.408505][T16126] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1437.376789][ T4324] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1437.575297][ T4324] usb 3-1: Using ep0 maxpacket: 32 [ 1437.582536][ T4324] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1437.635477][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.743386][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1437.756395][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1437.765471][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1437.785028][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1437.792708][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1437.802794][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1438.021401][ T4324] usb 3-1: config 0 descriptor?? [ 1438.082227][T16140] loop3: detected capacity change from 0 to 64 [ 1438.233975][ T4324] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1438.268985][ T4324] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1438.299636][ T4324] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1438.315166][ T4324] usb 3-1: media controller created [ 1438.427354][ T4324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1438.851392][ T4324] DVB: Unable to find symbol dib7000p_attach() [ 1438.865188][ T4324] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1438.892326][ T4621] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.795272][ T4324] rc_core: IR keymap rc-dib0700-rc5 not found [ 1439.802191][ T4324] Registered IR keymap rc-empty [ 1439.875191][T13766] Bluetooth: hci1: command 0x0409 tx timeout [ 1439.955867][ T4324] dvb-usb: could not initialize remote control. [ 1439.963965][ T4621] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.165060][ T4324] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1440.943882][T16169] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1440.981054][ T4324] usb 3-1: USB disconnect, device number 32 [ 1441.064167][T16174] random: crng reseeded on system resumption [ 1441.454723][ T4324] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1441.785623][ T4384] kernel write not supported for file /snd/pcmC0D0p (pid: 4384 comm: kworker/0:6) [ 1441.953301][ T4621] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.965316][T13766] Bluetooth: hci1: command 0x041b tx timeout [ 1443.049937][ T4621] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.074845][ T6366] libceph: connect (1)[c::]:6789 error -101 [ 1443.082464][ T6366] libceph: mon0 (1)[c::]:6789 connect error [ 1443.199500][T16177] ceph: No mds server is up or the cluster is laggy [ 1443.365073][ T6366] libceph: connect (1)[c::]:6789 error -101 [ 1443.374309][ T6366] libceph: mon0 (1)[c::]:6789 connect error [ 1443.672665][T16135] chnl_net:caif_netlink_parms(): no params data found [ 1443.761251][T16193] loop3: detected capacity change from 0 to 4096 [ 1443.950675][ T6366] libceph: connect (1)[c::]:6789 error -101 [ 1443.965113][ T6366] libceph: mon0 (1)[c::]:6789 connect error [ 1444.035104][T13766] Bluetooth: hci1: command 0x040f tx timeout [ 1445.349334][T16135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1445.376751][T16135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1445.412785][T16135] device bridge_slave_0 entered promiscuous mode [ 1445.469689][T16135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.500542][T16135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.538131][T16135] device bridge_slave_1 entered promiscuous mode [ 1445.564381][T16218] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2865'. [ 1445.869683][ T4621] tipc: Left network mode [ 1445.938497][T16135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.973058][T16135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1446.127914][T13766] Bluetooth: hci1: command 0x0419 tx timeout [ 1446.213798][T16226] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2867'. [ 1446.467741][T16135] team0: Port device team_slave_0 added [ 1446.765063][T16237] random: crng reseeded on system resumption [ 1447.062598][T16135] team0: Port device team_slave_1 added [ 1447.098893][T16135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1447.106203][T16135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.140225][T16135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1447.286718][ T4384] kernel write not supported for file /snd/pcmC0D0p (pid: 4384 comm: kworker/0:6) [ 1447.306236][T16135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1447.313337][T16135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1447.339956][T16135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.862751][T16135] device hsr_slave_0 entered promiscuous mode [ 1447.873956][T16135] device hsr_slave_1 entered promiscuous mode [ 1447.884566][T16135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1447.893296][T16135] Cannot create hsr debugfs directory [ 1449.032704][T16255] loop3: detected capacity change from 0 to 256 [ 1449.047788][T16257] tmpfs: Unknown parameter 'grpquota' [ 1450.040267][T16255] FAT-fs (loop3): Directory bread(block 64) failed [ 1450.093636][T16255] FAT-fs (loop3): Directory bread(block 65) failed [ 1450.181982][T16255] FAT-fs (loop3): Directory bread(block 66) failed [ 1450.235481][T16255] FAT-fs (loop3): Directory bread(block 67) failed [ 1450.284105][T16255] FAT-fs (loop3): Directory bread(block 68) failed [ 1450.335654][T16255] FAT-fs (loop3): Directory bread(block 69) failed [ 1450.364878][T16255] FAT-fs (loop3): Directory bread(block 70) failed [ 1450.415141][T16255] FAT-fs (loop3): Directory bread(block 71) failed [ 1450.445249][T16255] FAT-fs (loop3): Directory bread(block 72) failed [ 1450.451914][T16255] FAT-fs (loop3): Directory bread(block 73) failed [ 1451.454856][ T4621] bond0: (slave wlan1): Releasing backup interface [ 1452.564078][T16278] loop6: detected capacity change from 0 to 4096 [ 1452.995290][T16287] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1453.463406][T16293] loop3: detected capacity change from 0 to 1024 [ 1454.006419][T16298] hfsplus: invalid catalog entry type [ 1454.041368][T16293] hfsplus: invalid catalog entry type [ 1454.173780][T16135] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1454.224497][ T4745] hfsplus: bad catalog folder entry [ 1454.245622][ T4745] hfsplus: bad catalog file entry [ 1454.261337][T16135] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1454.345962][T16135] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1454.404436][T16135] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1454.463772][ T4621] device hsr_slave_0 left promiscuous mode [ 1454.566746][ T4621] device hsr_slave_1 left promiscuous mode [ 1454.596270][ T4621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1454.657965][ T4621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1454.706564][ T4621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1454.723049][ T4621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.823342][ T4621] device bridge_slave_1 left promiscuous mode [ 1454.875938][ T4621] bridge0: port 2(bridge_slave_1) entered disabled state [ 1455.015983][ T4621] device bridge_slave_0 left promiscuous mode [ 1455.057318][ T4621] bridge0: port 1(bridge_slave_0) entered disabled state [ 1455.369564][T16283] loop5: detected capacity change from 0 to 32768 [ 1455.427569][ T4621] device veth0_macvtap left promiscuous mode [ 1455.440349][ T4621] device veth1_vlan left promiscuous mode [ 1455.479518][ T4621] device veth0_vlan left promiscuous mode [ 1455.551662][T16283] (syz.5.2880,16283,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1455.705517][T16283] (syz.5.2880,16283,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1456.654303][T16283] (syz.5.2880,16283,0):ocfs2_initialize_super:2286 ERROR: status = -12 [ 1456.707336][T16283] (syz.5.2880,16283,0):ocfs2_fill_super:1176 ERROR: status = -12 [ 1456.715948][T16309] hub 9-0:1.0: USB hub found [ 1456.723051][T16309] hub 9-0:1.0: 1 port detected [ 1456.918965][T14261] I/O error, dev loop5, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1457.297363][ T4621] team0 (unregistering): Port device batadv5 removed [ 1457.465786][ T4621] team0 (unregistering): Port device batadv4 removed [ 1457.616423][ T4621] team0 (unregistering): Port device batadv3 removed [ 1457.757005][ T4621] team0 (unregistering): Port device batadv2 removed [ 1457.874069][ T4621] team0 (unregistering): Port device batadv1 removed [ 1460.435633][T16347] overlayfs: failed to resolve './file2': -2 [ 1461.008110][T16355] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1461.883690][ T4621] team0 (unregistering): Port device team_slave_1 removed [ 1462.019787][ T4621] team0 (unregistering): Port device team_slave_0 removed [ 1462.110379][ T4621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.186637][ T4621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.209553][ T4621] bond0 (unregistering): Released all slaves [ 1464.369709][T16351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2890'. [ 1464.378839][T16351] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2890'. [ 1464.388144][T16352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2890'. [ 1464.397208][T16352] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2890'. [ 1464.905636][T16135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.806663][T16379] tmpfs: Unknown parameter 'grpquota' [ 1465.866984][ C1] vkms_vblank_simulate: vblank timer overrun [ 1466.281481][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1466.336124][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1466.386680][T16135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1466.618559][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1466.635807][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1467.406437][T13892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.413619][T13892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1467.464319][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1467.501065][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1467.576573][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1467.625499][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1467.632669][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1467.688210][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1467.768840][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1467.788630][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1467.825750][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1467.866021][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1467.926309][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1467.940167][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1467.959676][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1468.001818][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1468.071581][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1468.088132][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1468.146908][T16135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1470.027579][T16423] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2904'. [ 1470.065177][T16423] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2904'. [ 1470.193157][T16440] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1470.695737][T16436] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2904'. [ 1470.704921][T16436] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2904'. [ 1471.092341][ T4333] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1471.164696][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1471.180852][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1471.295387][ T4333] usb 4-1: Using ep0 maxpacket: 32 [ 1471.303483][ T4333] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1471.324602][T16135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1471.349314][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.391687][ T4333] usb 4-1: config 0 descriptor?? [ 1471.558963][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1472.345339][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1472.376531][ T4333] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1472.426079][ T4333] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1472.495498][ T4333] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1472.502806][ T4333] usb 4-1: media controller created [ 1472.740428][ T4333] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1472.787069][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1472.806121][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1472.839106][T16135] device veth0_vlan entered promiscuous mode [ 1472.924266][T16135] device veth1_vlan entered promiscuous mode [ 1472.951899][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1473.009181][ T4695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1473.194862][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1473.370230][ T4333] DVB: Unable to find symbol dib7000p_attach() [ 1473.378580][ T4333] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1473.405581][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1473.462478][T16135] device veth0_macvtap entered promiscuous mode [ 1473.581007][T16472] netlink: 'syz.2.2912': attribute type 21 has an invalid length. [ 1473.589346][T16472] netlink: 'syz.2.2912': attribute type 6 has an invalid length. [ 1473.597357][T16472] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2912'. [ 1473.612746][T16135] device veth1_macvtap entered promiscuous mode [ 1473.655321][ T4333] rc_core: IR keymap rc-dib0700-rc5 not found [ 1473.683322][ T4333] Registered IR keymap rc-empty [ 1473.694716][ T4333] dvb-usb: could not initialize remote control. [ 1473.721154][ T4333] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1473.768031][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.796699][ T4333] usb 4-1: USB disconnect, device number 22 [ 1473.820221][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.857439][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1473.900612][ T4333] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1473.935184][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1473.986764][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.046557][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.109676][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1474.185197][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.247156][T16135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1474.316111][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.336986][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.377749][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.425158][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1474.507935][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1474.603893][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.255700][T16135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1475.266312][T16135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1475.277768][T16135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1475.285442][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1475.301283][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1475.371168][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1475.416212][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1475.446563][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1475.688000][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1476.003950][T16135] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.058495][T16135] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.105212][T16135] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.148675][T16135] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.560486][T15244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.607013][T15244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1476.765435][T16514] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1476.869058][T16514] team0: Port device batadv3 added [ 1476.935217][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1477.006037][ T4641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1477.025259][ T4641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.050846][T16523] hub 9-0:1.0: USB hub found [ 1477.072881][T16523] hub 9-0:1.0: 1 port detected [ 1477.097118][T15244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1477.606386][T16529] loop1: detected capacity change from 0 to 32768 [ 1477.769346][T16533] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 1477.769346][T16533] [ 1477.780683][T16533] ERROR: (device loop1): remounting filesystem as read-only [ 1477.795320][T16533] syz.1.2846: attempt to access beyond end of device [ 1477.795320][T16533] loop1: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 1479.807975][T16545] loop5: detected capacity change from 0 to 16 [ 1479.815346][T16545] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1480.785058][ T6592] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1480.817195][ T107] blkno = 1580, nblocks = 1 [ 1480.822877][ T107] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 1480.822877][ T107] [ 1481.005061][ T6592] usb 3-1: Using ep0 maxpacket: 32 [ 1481.012924][ T6592] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1481.495063][ T6592] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1481.525914][ T6592] usb 3-1: config 0 descriptor?? [ 1481.738376][ T6592] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1481.798912][ T6592] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1481.841889][ T6592] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1481.866092][ T6592] usb 3-1: media controller created [ 1482.271715][ T6592] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1483.119022][ T6592] DVB: Unable to find symbol dib7000p_attach() [ 1483.133261][ T6592] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1483.655350][ T6592] rc_core: IR keymap rc-dib0700-rc5 not found [ 1483.661647][ T6592] Registered IR keymap rc-empty [ 1484.418905][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.425376][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.465621][ T6592] dvb-usb: could not initialize remote control. [ 1484.472086][ T6592] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1484.515397][ T6592] usb 3-1: USB disconnect, device number 33 [ 1485.680939][ T6592] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1486.040815][T16615] random: crng reseeded on system resumption [ 1486.355058][ T6592] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1487.735163][ T4317] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1487.955470][ T4317] usb 2-1: Using ep0 maxpacket: 32 [ 1487.967840][ T4317] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1487.977838][ T4317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.020342][ T4317] usb 2-1: config 0 descriptor?? [ 1488.246924][ T4317] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1488.263463][ T4317] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1488.448826][ T4317] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1488.456782][ T4317] usb 2-1: media controller created [ 1488.754594][T16645] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1488.801276][ T4317] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1489.242809][T16641] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1489.502025][T16641] team0: Port device batadv4 added [ 1490.379224][T16642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1490.388446][T16642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1490.397714][T16643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1490.406882][T16643] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2946'. [ 1490.696355][T16641] hub 9-0:1.0: USB hub found [ 1490.748488][T16641] hub 9-0:1.0: 1 port detected [ 1490.844251][ T4317] DVB: Unable to find symbol dib7000p_attach() [ 1490.855332][ T4317] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1492.325903][ T4317] rc_core: IR keymap rc-dib0700-rc5 not found [ 1492.338125][ T4317] Registered IR keymap rc-empty [ 1493.573916][ T4317] dvb-usb: could not initialize remote control. [ 1493.600745][ T4317] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1493.646273][T16681] random: crng reseeded on system resumption [ 1493.932699][ T6592] usb 2-1: USB disconnect, device number 19 [ 1494.052421][ T6592] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1496.068319][T16694] loop1: detected capacity change from 0 to 16 [ 1496.075768][T16694] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1497.472756][T16698] loop1: detected capacity change from 0 to 32768 [ 1497.507744][T16698] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 1497.507744][T16698] [ 1497.520966][T16698] ERROR: (device loop1): remounting filesystem as read-only [ 1497.529151][T16698] syz.1.2959: attempt to access beyond end of device [ 1497.529151][T16698] loop1: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 1497.728353][ T107] blkno = 1580, nblocks = 1 [ 1497.733034][ T107] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 1497.733034][ T107] [ 1497.995610][T16703] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1498.123573][T16703] team0: Port device batadv4 added [ 1499.168297][T16703] hub 9-0:1.0: USB hub found [ 1499.181566][T16703] hub 9-0:1.0: 1 port detected [ 1502.352668][T16732] netlink: 'syz.3.2968': attribute type 21 has an invalid length. [ 1502.361297][T16732] netlink: 'syz.3.2968': attribute type 6 has an invalid length. [ 1502.369268][T16732] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2968'. [ 1502.545703][T16737] loop3: detected capacity change from 0 to 16 [ 1502.552850][T16737] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 1503.498030][T16741] loop2: detected capacity change from 0 to 16 [ 1503.505263][T16741] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1504.458995][T16745] netlink: 'syz.3.2972': attribute type 1 has an invalid length. [ 1504.603702][T16745] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1504.688675][T16745] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1505.053241][T16749] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 1505.270070][T16758] bond1: (slave gretap1): making interface the new active one [ 1505.318839][T16758] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1505.965520][T16765] loop6: detected capacity change from 0 to 512 [ 1505.975728][T16765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1506.024304][T16765] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1506.045319][T16765] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1506.753490][T16776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2978'. [ 1508.990816][T14299] EXT4-fs (loop6): unmounting filesystem. [ 1509.316128][T16787] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1509.338434][T16787] team0: Port device batadv1 added [ 1510.127607][T16790] hub 9-0:1.0: USB hub found [ 1510.132529][T16790] hub 9-0:1.0: 1 port detected [ 1511.888412][T16805] loop1: detected capacity change from 0 to 32768 [ 1511.916351][T16805] ERROR: (device loop1): dbAlloc: the hint is outside the map [ 1511.916351][T16805] [ 1511.928124][T16805] ERROR: (device loop1): remounting filesystem as read-only [ 1511.936299][T16805] syz.1.2987: attempt to access beyond end of device [ 1511.936299][T16805] loop1: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 1512.193860][ T107] blkno = 1580, nblocks = 1 [ 1512.198788][ T107] ERROR: (device loop1): dbUpdatePMap: blocks are outside the map [ 1512.198788][ T107] [ 1512.289370][ T4267] bond0: (slave syz_tun): Releasing backup interface [ 1512.529479][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1512.541720][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1512.552449][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1512.563091][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1512.573773][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1512.581436][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1512.754139][ T32] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.246520][ T32] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.479244][ T32] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1513.729055][ T32] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1514.287687][T16824] loop2: detected capacity change from 0 to 16 [ 1514.295426][T16824] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 1514.654186][ T32] tipc: Left network mode [ 1514.705114][T13766] Bluetooth: hci0: command 0x0409 tx timeout [ 1515.439850][T16834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2992'. [ 1516.095856][T16842] loop1: detected capacity change from 0 to 16 [ 1516.102753][T16842] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 1516.991698][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 1517.298144][T16810] chnl_net:caif_netlink_parms(): no params data found [ 1519.209879][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 1519.532563][T16810] bridge0: port 1(bridge_slave_0) entered blocking state [ 1519.578195][T16810] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.617403][T16810] device bridge_slave_0 entered promiscuous mode [ 1519.770283][T16873] hub 9-0:1.0: USB hub found [ 1519.782554][T16873] hub 9-0:1.0: 1 port detected [ 1519.849272][T16864] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1519.955989][T16864] team0: Port device batadv5 added [ 1520.016011][T16810] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.035148][T16810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1520.080139][T16810] device bridge_slave_1 entered promiscuous mode [ 1520.575890][ T32] bond1: (slave gretap1): Releasing active interface [ 1520.618312][T16810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1520.716601][T16810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.235048][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 1521.292814][T16810] team0: Port device team_slave_0 added [ 1521.390601][T16810] team0: Port device team_slave_1 added [ 1521.854095][T16810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.875200][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.060250][T16810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1522.166080][T16810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1522.205817][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1522.341872][T16810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1522.399083][ T32] device hsr_slave_0 left promiscuous mode [ 1522.419995][ T32] device hsr_slave_1 left promiscuous mode [ 1522.440389][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.461528][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.485319][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.503166][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.601633][T16891] loop2: detected capacity change from 0 to 32768 [ 1522.699269][T16891] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 1522.699269][T16891] [ 1522.710692][T16891] ERROR: (device loop2): remounting filesystem as read-only [ 1522.718983][T16891] syz.2.3000: attempt to access beyond end of device [ 1522.718983][T16891] loop2: rw=2049, sector=44032, nr_sectors = 8 limit=32768 [ 1522.841716][ T107] blkno = 1580, nblocks = 1 [ 1522.847608][ T107] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 1522.847608][ T107] [ 1522.858927][ T32] device bridge_slave_1 left promiscuous mode [ 1522.883892][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.931766][ T32] device bridge_slave_0 left promiscuous mode [ 1523.025896][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 1523.216643][ T32] device veth0_macvtap left promiscuous mode [ 1523.247900][ T32] device veth1_vlan left promiscuous mode [ 1523.279292][ T32] device veth0_vlan left promiscuous mode [ 1524.340911][ T32] infiniband syz0: set down [ 1525.734284][ T32] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1525.828556][ T32] bond1 (unregistering): Released all slaves [ 1525.902480][ T32] team0 (unregistering): Port device batadv4 removed [ 1525.918247][T16929] random: crng reseeded on system resumption [ 1526.225996][ T32] team0 (unregistering): Port device batadv3 removed [ 1526.369445][ T32] team0 (unregistering): Port device batadv2 removed [ 1526.478832][ T32] team0 (unregistering): Port device batadv1 removed [ 1528.173742][T16944] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 1530.196816][ T32] team0 (unregistering): Port device team_slave_1 removed [ 1530.394148][ T32] team0 (unregistering): Port device team_slave_0 removed [ 1530.618035][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1530.708154][T13892] smc: removing ib device syz0 [ 1531.047307][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1531.669297][ T32] bond0 (unregistering): Released all slaves [ 1531.838519][T16941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3010'. [ 1531.847845][T16941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3010'. [ 1531.857511][T16942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3010'. [ 1531.866579][T16942] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3010'. [ 1532.160135][T16810] device hsr_slave_0 entered promiscuous mode [ 1532.219434][T16810] device hsr_slave_1 entered promiscuous mode [ 1532.392116][T16962] netlink: 'syz.5.3014': attribute type 21 has an invalid length. [ 1532.400391][T16962] netlink: 'syz.5.3014': attribute type 6 has an invalid length. [ 1532.408440][T16962] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3014'. [ 1533.305002][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3017'. [ 1535.020947][T16997] hub 9-0:1.0: USB hub found [ 1535.105648][T16997] hub 9-0:1.0: 1 port detected [ 1535.274136][T16988] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1535.359722][T16988] team0: Port device batadv2 added [ 1538.002265][T16810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1538.076179][T16810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1538.147886][T16810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1538.204775][T16810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1539.217765][T17025] vivid-005: kernel_thread() failed [ 1540.242466][T17035] netlink: 'syz.2.3027': attribute type 21 has an invalid length. [ 1540.250574][T17035] netlink: 'syz.2.3027': attribute type 6 has an invalid length. [ 1540.258541][T17035] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3027'. [ 1541.094440][T16810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.208523][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1541.225847][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1541.448422][T16810] 8021q: adding VLAN 0 to HW filter on device team0 [ 1541.492812][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1542.196740][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1542.205512][T13892] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.212647][T13892] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1542.366832][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1542.397690][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1542.407066][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1542.441457][T13892] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.448891][T13892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1542.687247][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1543.453189][T13889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1543.687449][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1543.755430][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1543.802478][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1544.228349][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1544.518686][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1544.556061][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1544.598826][T16810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1544.747684][T16810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1544.904158][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1544.917962][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1545.072287][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1545.409026][T17080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3036'. [ 1545.819846][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.829829][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.242764][T17093] netlink: 'syz.6.3038': attribute type 21 has an invalid length. [ 1547.250878][T17093] netlink: 'syz.6.3038': attribute type 6 has an invalid length. [ 1547.258700][T17093] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3038'. [ 1549.335052][T17115] vivid-001: kernel_thread() failed [ 1549.716459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1549.724124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1549.805813][T16810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1549.908956][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1549.936114][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1550.129542][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1551.430786][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1551.466889][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1551.506263][ T4526] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1552.120339][T17133] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1552.176396][T17133] team0: Port device batadv3 added [ 1552.371873][T16810] device veth0_vlan entered promiscuous mode [ 1552.428305][T16810] device veth1_vlan entered promiscuous mode [ 1553.413871][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1553.466230][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1553.485796][T16810] device veth0_macvtap entered promiscuous mode [ 1553.535423][T16810] device veth1_macvtap entered promiscuous mode [ 1553.610163][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1553.814192][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.579900][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.634444][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.844353][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.892769][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.913418][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1554.939480][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1554.988218][T16810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.165492][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1555.935358][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1555.990035][T13892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1555.999607][T17166] netlink: 'syz.2.3051': attribute type 21 has an invalid length. [ 1556.008588][T17166] netlink: 'syz.2.3051': attribute type 6 has an invalid length. [ 1556.016491][T17166] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3051'. [ 1557.130012][T17185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3053'. [ 1557.140517][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.156230][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.173760][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.295028][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.362757][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.403457][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.435039][T16810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1559.618824][T16810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.686933][T16810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1559.855861][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1559.876468][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1559.904483][T16810] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.934568][T16810] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.068316][T16810] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.079305][T16810] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.195328][T11252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.309764][T11252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.329626][T11252] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1561.445572][T11252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.453812][T11252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.540750][ T4355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1562.660394][T17244] netlink: 'syz.1.3064': attribute type 21 has an invalid length. [ 1562.668575][T17244] netlink: 'syz.1.3064': attribute type 6 has an invalid length. [ 1562.676433][T17244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3064'. [ 1563.576113][T13766] Bluetooth: hci1: command 0x0406 tx timeout [ 1565.438130][T17271] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1565.446845][T17271] team0: Port device batadv1 added [ 1565.579875][T17269] hub 9-0:1.0: USB hub found [ 1565.592350][T17269] hub 9-0:1.0: 1 port detected [ 1567.585521][T17292] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3071'. [ 1570.011412][T17324] netlink: 'syz.2.3077': attribute type 21 has an invalid length. [ 1570.019347][T17324] netlink: 'syz.2.3077': attribute type 6 has an invalid length. [ 1570.027339][T17324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3077'. [ 1572.977971][T17352] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1573.018422][T17352] team0: Port device batadv4 added [ 1573.112163][T17352] hub 9-0:1.0: USB hub found [ 1573.138571][T17352] hub 9-0:1.0: 1 port detected [ 1574.826692][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 1576.206787][T17391] netlink: 'syz.1.3089': attribute type 21 has an invalid length. [ 1576.214820][T17391] netlink: 'syz.1.3089': attribute type 6 has an invalid length. [ 1576.222811][T17391] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3089'. [ 1580.065131][T17423] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1580.073584][T17423] team0: Port device batadv3 added [ 1580.398231][T17420] hub 9-0:1.0: USB hub found [ 1580.433590][T17420] hub 9-0:1.0: 1 port detected [ 1580.975200][T13273] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1581.165220][T13273] usb 4-1: Using ep0 maxpacket: 32 [ 1581.174533][T13273] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1581.255595][T13273] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.377230][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3100'. [ 1581.393728][T13273] usb 4-1: config 0 descriptor?? [ 1581.677650][T13273] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1581.705594][T13273] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1581.754215][T13273] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1581.824047][T13273] usb 4-1: media controller created [ 1581.887609][T17435] dib0700: tx buffer length is larger than 4. Not supported. [ 1581.964682][T13273] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1582.175024][T13273] DVB: Unable to find symbol dib7000p_attach() [ 1582.183604][T13273] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1582.468803][T17447] netlink: 'syz.5.3101': attribute type 21 has an invalid length. [ 1582.476831][T17447] netlink: 'syz.5.3101': attribute type 6 has an invalid length. [ 1582.484604][T17447] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3101'. [ 1582.744997][T13273] rc_core: IR keymap rc-dib0700-rc5 not found [ 1583.469286][T13273] Registered IR keymap rc-empty [ 1583.474679][T13273] dvb-usb: could not initialize remote control. [ 1583.481837][T13273] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1583.502969][T13273] usb 4-1: USB disconnect, device number 23 [ 1583.542794][T13273] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1587.914633][T17500] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1588.088257][T17500] team0: Port device batadv2 added [ 1588.210167][T17500] hub 9-0:1.0: USB hub found [ 1588.239573][T17500] hub 9-0:1.0: 1 port detected [ 1589.865793][T17516] netlink: 'syz.6.3115': attribute type 21 has an invalid length. [ 1589.873991][T17516] netlink: 'syz.6.3115': attribute type 6 has an invalid length. [ 1589.882647][T17516] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3115'. [ 1592.025054][ T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1592.255164][ T22] usb 6-1: Using ep0 maxpacket: 32 [ 1592.272478][ T22] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1592.282385][ T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.309741][ T22] usb 6-1: config 0 descriptor?? [ 1592.520525][ T22] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1592.547035][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1592.587669][ T22] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1592.615427][ T22] usb 6-1: media controller created [ 1592.714567][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1593.954457][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'. [ 1594.048452][ T22] DVB: Unable to find symbol dib7000p_attach() [ 1594.054818][ T22] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1594.485548][ T22] rc_core: IR keymap rc-dib0700-rc5 not found [ 1594.491785][ T22] Registered IR keymap rc-empty [ 1597.796003][ T22] dvb-usb: could not initialize remote control. [ 1597.802336][ T22] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1597.893426][ T4410] usb 6-1: USB disconnect, device number 2 [ 1598.144645][T17577] netlink: 'syz.6.3129': attribute type 21 has an invalid length. [ 1598.152677][T17577] netlink: 'syz.6.3129': attribute type 6 has an invalid length. [ 1598.160595][T17577] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3129'. [ 1598.176542][ T4410] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1601.986999][T17615] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1602.026313][T17615] team0: Port device batadv4 added [ 1602.428643][T17610] hub 9-0:1.0: USB hub found [ 1602.442186][T17610] hub 9-0:1.0: 1 port detected [ 1602.639178][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3140'. [ 1603.395250][ T22] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1603.429899][T17633] netlink: 'syz.3.3142': attribute type 21 has an invalid length. [ 1603.437911][T17633] netlink: 'syz.3.3142': attribute type 6 has an invalid length. [ 1603.445793][T17633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3142'. [ 1603.695080][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 1603.717180][ T22] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1603.751910][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.914185][ T22] usb 3-1: config 0 descriptor?? [ 1604.792894][ T22] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1604.860872][ T22] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1604.908848][ T22] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1604.945116][ T22] usb 3-1: media controller created [ 1605.539700][ T22] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1605.901240][ T22] DVB: Unable to find symbol dib7000p_attach() [ 1605.908004][ T22] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1606.395377][ T22] rc_core: IR keymap rc-dib0700-rc5 not found [ 1606.412015][ T22] Registered IR keymap rc-empty [ 1607.240894][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.247313][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.862876][T17686] netlink: 'syz.5.3154': attribute type 21 has an invalid length. [ 1609.870913][T17686] netlink: 'syz.5.3154': attribute type 6 has an invalid length. [ 1609.879174][T17686] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3154'. [ 1610.045122][ T22] dvb-usb: could not initialize remote control. [ 1610.076173][ T22] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1610.251517][ T22] usb 3-1: USB disconnect, device number 35 [ 1611.170394][ T22] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1611.286062][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3156'. [ 1614.869928][T17738] netlink: 'syz.6.3167': attribute type 21 has an invalid length. [ 1614.877885][T17738] netlink: 'syz.6.3167': attribute type 6 has an invalid length. [ 1614.885732][T17738] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3167'. [ 1615.055884][T17721] hub 9-0:1.0: USB hub found [ 1615.076042][T17721] hub 9-0:1.0: 1 port detected [ 1619.614851][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3175'. [ 1622.116342][T17797] netlink: 'syz.6.3179': attribute type 21 has an invalid length. [ 1622.124309][T17797] netlink: 'syz.6.3179': attribute type 6 has an invalid length. [ 1622.132950][T17797] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3179'. [ 1624.775607][ T5995] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1625.015163][ T5995] usb 6-1: Using ep0 maxpacket: 32 [ 1625.022453][ T5995] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1625.047279][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.168857][ T5995] usb 6-1: config 0 descriptor?? [ 1625.932930][ T5995] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1625.958980][ T5995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1626.005738][ T5995] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1626.028732][ T5995] usb 6-1: media controller created [ 1626.099305][ T5995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1626.140540][T17822] ------------[ cut here ]------------ [ 1626.146163][T17822] usb 6-1: BOGUS control dir, pipe 80000380 doesn't match bRequestType c0 [ 1626.189631][T17833] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1626.198246][T17822] WARNING: CPU: 1 PID: 17822 at drivers/usb/core/urb.c:413 usb_submit_urb+0x11ae/0x1920 [ 1626.208202][T17822] Modules linked in: [ 1626.212159][T17822] CPU: 1 PID: 17822 Comm: syz.5.3186 Not tainted syzkaller #0 [ 1626.219747][T17822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1626.230542][T17822] RIP: 0010:usb_submit_urb+0x11ae/0x1920 [ 1626.236514][T17822] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 e0 97 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 c2 a9 27 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07 [ 1626.256541][T17822] RSP: 0018:ffffc90003537868 EFLAGS: 00010246 [ 1626.262745][T17822] RAX: a4dc86815ab4f100 RBX: ffff888055699000 RCX: 0000000000080000 [ 1626.270810][T17822] RDX: ffffc9000e489000 RSI: 0000000000003b96 RDI: 0000000000003b97 [ 1626.278898][T17822] RBP: 1ffff1100b960dbd R08: ffffc900035374e7 R09: 1ffff920006a6e9c [ 1626.286997][T17822] R10: dffffc0000000000 R11: fffff520006a6e9d R12: ffff88805cb061b8 [ 1626.295061][T17822] R13: ffff8880584730f8 R14: 0000000080000380 R15: ffff88805cb06de8 [ 1626.303162][T17822] FS: 00007fbbdd2ea6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1626.312200][T17822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1626.318851][T17822] CR2: 00007f07e999dff8 CR3: 000000005fc6a000 CR4: 00000000003506e0 [ 1626.326925][T17822] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1626.334995][T17822] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1626.343018][T17822] Call Trace: [ 1626.346482][T17822] [ 1626.349473][T17822] usb_start_wait_urb+0x128/0x4e0 [ 1626.354555][T17822] ? usb_api_blocking_completion+0xb0/0xb0 [ 1626.360504][T17822] usb_control_msg+0x22f/0x3e0 [ 1626.365351][T17822] dib0700_i2c_xfer+0xbc8/0xf90 [ 1626.370310][T17822] ? rt_mutex_slowlock+0x395/0x740 [ 1626.375546][T17822] ? dib0700_set_gpio+0x1f0/0x1f0 [ 1626.380619][T17822] __i2c_transfer+0x880/0x22b0 [ 1626.385493][T17822] ? i2c_cmd+0x110/0x110 [ 1626.389793][T17822] ? __might_fault+0xa6/0x120 [ 1626.394523][T17822] ? i2c_transfer+0x117/0x3a0 [ 1626.399298][T17822] i2c_transfer+0x25d/0x3a0 [ 1626.403850][T17822] ? __i2c_transfer+0x22b0/0x22b0 [ 1626.408981][T17822] ? __might_fault+0xc2/0x120 [ 1626.413706][T17822] ? __might_fault+0xa6/0x120 [ 1626.418520][T17822] ? _copy_from_user+0x10b/0x170 [ 1626.423487][T17822] i2cdev_ioctl_rdwr+0x3dc/0x6d0 [ 1626.428488][T17822] i2cdev_ioctl+0x610/0x7b0 [ 1626.433041][T17822] ? i2cdev_write+0x120/0x120 [ 1626.437822][T17822] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1626.442789][T17822] ? security_file_ioctl+0x7c/0xa0 [ 1626.447978][T17822] ? i2cdev_write+0x120/0x120 [ 1626.452697][T17822] __se_sys_ioctl+0xfa/0x170 [ 1626.457355][T17822] do_syscall_64+0x4c/0xa0 [ 1626.461815][T17822] ? clear_bhb_loop+0x60/0xb0 [ 1626.466540][T17822] ? clear_bhb_loop+0x60/0xb0 [ 1626.471268][T17822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.477213][T17822] RIP: 0033:0x7fbbdc39aeb9 [ 1626.481654][T17822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.501399][T17822] RSP: 002b:00007fbbdd2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1626.509873][T17822] RAX: ffffffffffffffda RBX: 00007fbbdc615fa0 RCX: 00007fbbdc39aeb9 [ 1626.517949][T17822] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 1626.525990][T17822] RBP: 00007fbbdc408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1626.534017][T17822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.542083][T17822] R13: 00007fbbdc616038 R14: 00007fbbdc615fa0 R15: 00007ffff998aad8 [ 1626.550187][T17822] [ 1626.553216][T17822] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1626.560510][T17822] CPU: 1 PID: 17822 Comm: syz.5.3186 Not tainted syzkaller #0 [ 1626.567991][T17822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1626.578156][T17822] Call Trace: [ 1626.581570][T17822] [ 1626.584524][T17822] dump_stack_lvl+0x188/0x24e [ 1626.589314][T17822] ? memcpy+0x3c/0x60 [ 1626.593330][T17822] ? show_regs_print_info+0x12/0x12 [ 1626.598567][T17822] ? load_image+0x400/0x400 [ 1626.603153][T17822] panic+0x2e5/0x730 [ 1626.607101][T17822] ? bpf_jit_dump+0xd0/0xd0 [ 1626.611819][T17822] __warn+0x2f8/0x4f0 [ 1626.615823][T17822] ? usb_submit_urb+0x11ae/0x1920 [ 1626.620887][T17822] ? usb_submit_urb+0x11ae/0x1920 [ 1626.625929][T17822] report_bug+0x2ba/0x4f0 [ 1626.630285][T17822] ? usb_submit_urb+0x11ae/0x1920 [ 1626.635354][T17822] handle_bug+0x3a/0x70 [ 1626.639578][T17822] exc_invalid_op+0x16/0x40 [ 1626.644110][T17822] asm_exc_invalid_op+0x16/0x20 [ 1626.648975][T17822] RIP: 0010:usb_submit_urb+0x11ae/0x1920 [ 1626.654668][T17822] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 e0 97 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 c2 a9 27 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07 [ 1626.674305][T17822] RSP: 0018:ffffc90003537868 EFLAGS: 00010246 [ 1626.680403][T17822] RAX: a4dc86815ab4f100 RBX: ffff888055699000 RCX: 0000000000080000 [ 1626.688499][T17822] RDX: ffffc9000e489000 RSI: 0000000000003b96 RDI: 0000000000003b97 [ 1626.696493][T17822] RBP: 1ffff1100b960dbd R08: ffffc900035374e7 R09: 1ffff920006a6e9c [ 1626.704575][T17822] R10: dffffc0000000000 R11: fffff520006a6e9d R12: ffff88805cb061b8 [ 1626.712569][T17822] R13: ffff8880584730f8 R14: 0000000080000380 R15: ffff88805cb06de8 [ 1626.720652][T17822] ? usb_submit_urb+0x11ae/0x1920 [ 1626.725713][T17822] usb_start_wait_urb+0x128/0x4e0 [ 1626.730755][T17822] ? usb_api_blocking_completion+0xb0/0xb0 [ 1626.736583][T17822] usb_control_msg+0x22f/0x3e0 [ 1626.741404][T17822] dib0700_i2c_xfer+0xbc8/0xf90 [ 1626.746287][T17822] ? rt_mutex_slowlock+0x395/0x740 [ 1626.751417][T17822] ? dib0700_set_gpio+0x1f0/0x1f0 [ 1626.756454][T17822] __i2c_transfer+0x880/0x22b0 [ 1626.761245][T17822] ? i2c_cmd+0x110/0x110 [ 1626.765501][T17822] ? __might_fault+0xa6/0x120 [ 1626.770214][T17822] ? i2c_transfer+0x117/0x3a0 [ 1626.774946][T17822] i2c_transfer+0x25d/0x3a0 [ 1626.779488][T17822] ? __i2c_transfer+0x22b0/0x22b0 [ 1626.784547][T17822] ? __might_fault+0xc2/0x120 [ 1626.789233][T17822] ? __might_fault+0xa6/0x120 [ 1626.793919][T17822] ? _copy_from_user+0x10b/0x170 [ 1626.798880][T17822] i2cdev_ioctl_rdwr+0x3dc/0x6d0 [ 1626.803841][T17822] i2cdev_ioctl+0x610/0x7b0 [ 1626.808363][T17822] ? i2cdev_write+0x120/0x120 [ 1626.813064][T17822] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1626.818018][T17822] ? security_file_ioctl+0x7c/0xa0 [ 1626.823141][T17822] ? i2cdev_write+0x120/0x120 [ 1626.827834][T17822] __se_sys_ioctl+0xfa/0x170 [ 1626.832441][T17822] do_syscall_64+0x4c/0xa0 [ 1626.836878][T17822] ? clear_bhb_loop+0x60/0xb0 [ 1626.841568][T17822] ? clear_bhb_loop+0x60/0xb0 [ 1626.846262][T17822] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1626.852168][T17822] RIP: 0033:0x7fbbdc39aeb9 [ 1626.856593][T17822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.876256][T17822] RSP: 002b:00007fbbdd2ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1626.884689][T17822] RAX: ffffffffffffffda RBX: 00007fbbdc615fa0 RCX: 00007fbbdc39aeb9 [ 1626.892679][T17822] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 1626.900669][T17822] RBP: 00007fbbdc408c1f R08: 0000000000000000 R09: 0000000000000000 [ 1626.908923][T17822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.916906][T17822] R13: 00007fbbdc616038 R14: 00007fbbdc615fa0 R15: 00007ffff998aad8 [ 1626.924928][T17822] [ 1626.928583][T17822] Kernel Offset: disabled [ 1626.933021][T17822] Rebooting in 86400 seconds..