last executing test programs: 20m32.48296079s ago: executing program 4 (id=5): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x10f}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a2329", 0x1d}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 20m30.600889866s ago: executing program 4 (id=22): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0xc, 0x81, 0x0, 0x8, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new defaultBuser:syz 0000000000000000409'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r4, &(0x7f0000004b00)=[{{&(0x7f0000000f00)={0x2, 0x4e1f, @local}, 0x10, &(0x7f0000000000)=[{0x0, 0x9}, {&(0x7f0000000fc0)="e6d9", 0x2}], 0x2}}], 0x1, 0x8000) 20m14.447382906s ago: executing program 32 (id=22): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0xc, 0x81, 0x0, 0x8, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new defaultBuser:syz 0000000000000000409'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, 0x0, &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r4, &(0x7f0000004b00)=[{{&(0x7f0000000f00)={0x2, 0x4e1f, @local}, 0x10, &(0x7f0000000000)=[{0x0, 0x9}, {&(0x7f0000000fc0)="e6d9", 0x2}], 0x2}}], 0x1, 0x8000) 18m39.075925352s ago: executing program 0 (id=167): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 18m37.716666411s ago: executing program 0 (id=172): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 18m36.937855322s ago: executing program 0 (id=173): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0xc, 0x81, 0x0, 0x8, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new defaultBuser:syz 0000000000000000409'], 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r4, &(0x7f0000004b00)=[{{&(0x7f0000000f00)={0x2, 0x4e1f, @local}, 0x10, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000fc0)="e6", 0x1}], 0x2}}], 0x1, 0x8000) 18m31.966512132s ago: executing program 0 (id=180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000080)="2e1221b23bb601c477d3df163e757b3d00", 0x11}], 0x1) 18m28.995406832s ago: executing program 0 (id=184): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c) syz_emit_ethernet(0x4a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r1, &(0x7f0000048040)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x40015, 0x200, &(0x7f0000000880)="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"}) socket$inet_smc(0x2b, 0x1, 0x0) socket(0xa, 0x3, 0xff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r3, &(0x7f0000000340)=[{&(0x7f0000000180)=""/112, 0x70}], 0x1, 0x0, 0x0) 18m27.889369749s ago: executing program 0 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 18m10.551372213s ago: executing program 33 (id=187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 15m10.870142083s ago: executing program 5 (id=456): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'veth0_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x5, 0x0, 0x0) 15m9.3106773s ago: executing program 5 (id=458): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f0000000b80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x4}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)}}], 0x1, 0x24000084) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, 0x0, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, &(0x7f00000002c0)) 15m5.33777587s ago: executing program 5 (id=462): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740), 0x0, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 15m3.171593383s ago: executing program 5 (id=467): socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x48000) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000200)={'wg2\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x12, 0x5, 0x391f, 0x7}}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f00000000c0)={0x9, 0x2}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) 15m0.405778559s ago: executing program 5 (id=471): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) ioperm(0x1, 0x9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32]) shmctl$SHM_UNLOCK(0x0, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)='y', 0x1}], 0x1) write(r0, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000050002000008000f40fe00000e", 0x24) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) 14m57.58396371s ago: executing program 5 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 14m41.796684433s ago: executing program 34 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x78}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 12m3.132296776s ago: executing program 1 (id=709): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000), 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x7ffffffe, 0x10100}, &(0x7f0000000180), &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000fffd000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc980000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000006c0003806800008008000340000000025c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100002c0001800a0001006c696d69740000001c0002800c00024000000000800000000c0001400000000000000008"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x844) 12m1.703366659s ago: executing program 1 (id=711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x65, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}}, &(0x7f0000000000)='GPL\x00'}, 0x94) socket(0x10, 0x2, 0x0) 12m1.303951242s ago: executing program 1 (id=712): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r1, r0, 0x0, 0x20000023893) 11m54.945798838s ago: executing program 1 (id=720): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xbf}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009800) 11m53.535088035s ago: executing program 1 (id=724): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006c00)=@delchain={0x24, 0x65, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0x1}, {0x5, 0xa}, {0x5, 0x5}}}, 0x24}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, 0x0) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1d, r3, 0x1, {0x2, 0xf0}, 0xfd}, 0x18, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x801}, 0x40010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0x8, 0xd215) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x105241) ioctl$NBD_SET_SOCK(r6, 0xab00, 0xffffffffffffffff) r7 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x400) ioctl$NBD_DISCONNECT(r7, 0xab08) close_range(r5, 0xffffffffffffffff, 0x0) 11m50.138229418s ago: executing program 1 (id=728): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0xd07e, 0x0, 0xe, "810000cc2b000000000000fa25ffff00ffffff"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="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", 0x681}], 0x2}}], 0x1, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) 11m17.290990147s ago: executing program 35 (id=728): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0xd07e, 0x0, 0xe, "810000cc2b000000000000fa25ffff00ffffff"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="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", 0x681}], 0x2}}], 0x1, 0x4000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r4, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) 1m38.324624564s ago: executing program 3 (id=1048): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}, {0x0}], 0x2, 0x1a, 0x20f5) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x192}}, 0x20}}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x6000001, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0xb9, &(0x7f0000000580)=ANY=[@ANYBLOB="12010003000000406b1d0101"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x2, &(0x7f00000001c0)=@string={0x2}}, {0x0, 0x0}]}) 1m38.32024005s ago: executing program 7 (id=1053): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002880)=""/247, 0xf7}], 0x1}, 0x80}], 0x1, 0x162, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f00000001c0)=0x6, 0x4) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(r0, &(0x7f0000000480)='net/mcfilter\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0, 0x20044000}, 0xc000) preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) 1m6.757232066s ago: executing program 6 (id=1054): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) fcntl$getownex(r2, 0x10, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x3, 0x1, 0x0, "11010000030004080000000000001e00000000009dffffffffffffffa8f8d148", 0x20303159}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m6.753655919s ago: executing program 8 (id=1055): syz_open_dev$radio(0x0, 0x1, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x18}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c808) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="5488fa25ba61", 0x0, 0x100004, 0x10026, 0xffffffffffffffff, 0x0}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335", 0xab}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xf}], 0x3}, 0x4009800) 1m6.736348304s ago: executing program 2 (id=1056): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000180)="0912f7b179d91aebdd36958c70", 0xd}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="ac2032d95fa30d76efd223848bb74a174682c1816c8d1e10209d95f1eec34f520023d0bc0f1f41aeb00a7cc375ff368441dc0f389683b198b0e7080f791292aad935fde5a325365277753f77c88f30318189f27edfa0e6f438b6ff486eddbde81087c7ca13369b6d3d8972fdde9de5560297f8", 0x73}, {&(0x7f0000000400)="fcea50680173131d5d451188b94e1cd1e64f3bbca06484be2509a5dbeed2631c2e256baea8b797b7220fc9fdeb513a986078e79cb96c5e09195f4f22c7b1d7805d1c0ae706582ee358416f31046d602805aeee7bd33eada48a61d413467290820fe82baab19fbe2b8547f0433a8a7139b8ad84cc3e8cc66745f8c98cd80bc77f35d96710ead4cbd59ff847b4eb33fd8a88f296e1715c3b0dbd5af99ac7ffcc6b8ed551bef240aec47ec135d167e7079b09a3b33e0215a9", 0xb7}, {&(0x7f0000000500)}, {&(0x7f0000000640)="5e4db21c69bfe929de9a26285a77f9228a8c404887a8c83811c670b0d074cce6b8cc438e4cd9caf25a6f7385d6e21b869deecde1eeb35409a43d677778d16efed00b496b168caf8b5cdfffebd01b8ec910ec35c536b2c04c96f56d42a92d926b6fde9f70f744a2f6c911b3b15962a0d68246506c9d0094073d11608b6ba79e3ac495b36b2d85", 0x86}], 0x9, &(0x7f00000007c0)=[{0xf8, 0x114, 0xffff, "4fb5095e1e0e4b4ee1d53343541bd86221f0636fc07f534576a79efb779b2bf5ba90c5a1c231fe2b37259f35e161047e38fd9faf626b1793fa6d5457b3b605a81644851919f3c5676ddc21aec2bcf7e41dfef1aee53f5b0c3725352bf10fbda8c845f71b67c4550f291c95248b8d4af3caae2783325e86699b39fef4f5f90d8fd9d3cb36fd1cf8f77e2a51a159e771a6eccc8f53de82f43832bb9f7b0e992feff55373a1bc281eeb78dfc26d694aa43623ef447b5f5fb7ee066983fc847a1500c5140159f85ab4715d2e3ea6af5aebe7970f251a5cb0a86efdfc11316a033b6b4f7b77facff5bbd5"}, {0xc8, 0x117, 0xffff0000, "4c99e29437f4d64175c19c1d6926ce841cf3da2ef9fb61dc3922458b13e852520dacfba429d811f62697be049eb2e97ca359e9970cddfe89846d75057819c5831fd4f2372e6257d4c97559e97c6050cf7e77d80a71d1f3293d76237f2d2b442047c053e12cd8f6106a84d85294b1f8e686626b2076debd7799b55cdeab33558205901fd753a72a6c21687c8d40cfc4ffe94946510ddf387e946cf8328f0c3b7a4b293406cbaff0f3083d040b919a49ba4bd4525e72d8"}, {0x80, 0x6, 0x4, "034ee23293b07d5ff0976f9407114a06aac9d3af74e4d11c9f681a70b49608827cf83ec007697538fb0ab9f94919eddb287ec731dcb67489cdfc99efb2f8275943c72e4163105a6e45519c142ac788f5cc1b4c4ba77600ef89de7a07db6a7c22247c97536a692db1b41cb6dbcb"}, {0x10, 0x102, 0x8}, {0x48, 0x117, 0xffffffcb, "6a3a25da76bf30434677db446e625f45d347a55ab61bbaef87f058793cd7194526bc27183d68f61a4f4211ff43efba22c7e7"}], 0x298}, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TCXONC(r1, 0x4b3a, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) 1m6.730815373s ago: executing program 3 (id=1057): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a80000008500000011000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) 1m6.708122011s ago: executing program 7 (id=1058): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000180)="0912f7b179d91aebdd36958c70", 0xd}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="ac2032d95fa30d76efd223848bb74a174682c1816c8d1e10209d95f1eec34f520023d0bc0f1f41aeb00a7cc375ff368441dc0f389683b198b0e7080f791292aad935fde5a325365277753f77c88f30318189f27edfa0e6f438b6ff486eddbde81087c7ca13369b6d3d8972fdde9de5560297f8", 0x73}, {&(0x7f0000000400)="fcea50680173131d5d451188b94e1cd1e64f3bbca06484be2509a5dbeed2631c2e256baea8b797b7220fc9fdeb513a986078e79cb96c5e09195f4f22c7b1d7805d1c0ae706582ee358416f31046d602805aeee7bd33eada48a61d413467290820fe82baab19fbe2b8547f0433a8a7139b8ad84cc3e8cc66745f8c98cd80bc77f35d96710ead4cbd59ff847b4eb33fd8a88f296e1715c3b0dbd5af99ac7ffcc6b8ed551bef240aec47ec135d167e7079b09a3b33e0215a9", 0xb7}, {&(0x7f0000000500)}, {&(0x7f0000000640)="5e4db21c69bfe929de9a26285a77f9228a8c404887a8c83811c670b0d074cce6b8cc438e4cd9caf25a6f7385d6e21b869deecde1eeb35409a43d677778d16efed00b496b168caf8b5cdfffebd01b8ec910ec35c536b2c04c96f56d42a92d926b6fde9f70f744a2f6c911b3b15962a0d68246506c9d0094073d11608b6ba79e3ac495b36b2d85", 0x86}], 0x9, &(0x7f00000007c0)=[{0xf8, 0x114, 0xffff, "4fb5095e1e0e4b4ee1d53343541bd86221f0636fc07f534576a79efb779b2bf5ba90c5a1c231fe2b37259f35e161047e38fd9faf626b1793fa6d5457b3b605a81644851919f3c5676ddc21aec2bcf7e41dfef1aee53f5b0c3725352bf10fbda8c845f71b67c4550f291c95248b8d4af3caae2783325e86699b39fef4f5f90d8fd9d3cb36fd1cf8f77e2a51a159e771a6eccc8f53de82f43832bb9f7b0e992feff55373a1bc281eeb78dfc26d694aa43623ef447b5f5fb7ee066983fc847a1500c5140159f85ab4715d2e3ea6af5aebe7970f251a5cb0a86efdfc11316a033b6b4f7b77facff5bbd5"}, {0xc8, 0x117, 0xffff0000, "4c99e29437f4d64175c19c1d6926ce841cf3da2ef9fb61dc3922458b13e852520dacfba429d811f62697be049eb2e97ca359e9970cddfe89846d75057819c5831fd4f2372e6257d4c97559e97c6050cf7e77d80a71d1f3293d76237f2d2b442047c053e12cd8f6106a84d85294b1f8e686626b2076debd7799b55cdeab33558205901fd753a72a6c21687c8d40cfc4ffe94946510ddf387e946cf8328f0c3b7a4b293406cbaff0f3083d040b919a49ba4bd4525e72d8"}, {0x80, 0x6, 0x4, "034ee23293b07d5ff0976f9407114a06aac9d3af74e4d11c9f681a70b49608827cf83ec007697538fb0ab9f94919eddb287ec731dcb67489cdfc99efb2f8275943c72e4163105a6e45519c142ac788f5cc1b4c4ba77600ef89de7a07db6a7c22247c97536a692db1b41cb6dbcb"}, {0x10, 0x102, 0x8}, {0x48, 0x117, 0xffffffcb, "6a3a25da76bf30434677db446e625f45d347a55ab61bbaef87f058793cd7194526bc27183d68f61a4f4211ff43efba22c7e7"}], 0x298}, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000000)="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") ioctl$TCXONC(r1, 0x4b3a, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) 1m5.072067613s ago: executing program 7 (id=1059): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) accept4(r2, 0x0, 0x0, 0x80800) 3.274380016s ago: executing program 3 (id=1060): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000180)="0912f7b179d91aebdd36958c70", 0xd}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="ac2032d95fa30d76efd223848bb74a174682c1816c8d1e10209d95f1eec34f520023d0bc0f1f41aeb00a7cc375ff368441dc0f389683b198b0e7080f791292aad935fde5a325365277753f77c88f30318189f27edfa0e6f438b6ff486eddbde81087c7ca13369b6d3d8972fdde9de5560297f8", 0x73}, {&(0x7f0000000400)="fcea50680173131d5d451188b94e1cd1e64f3bbca06484be2509a5dbeed2631c2e256baea8b797b7220fc9fdeb513a986078e79cb96c5e09195f4f22c7b1d7805d1c0ae706582ee358416f31046d602805aeee7bd33eada48a61d413467290820fe82baab19fbe2b8547f0433a8a7139b8ad84cc3e8cc66745f8c98cd80bc77f35d96710ead4cbd59ff847b4eb33fd8a88f296e1715c3b0dbd5af99ac7ffcc6b8ed551bef240aec47ec135d167e7079b09a3b33e0215a9", 0xb7}, {&(0x7f0000000500)}, {&(0x7f0000000640)="5e4db21c69bfe929de9a26285a77f9228a8c404887a8c83811c670b0d074cce6b8cc438e4cd9caf25a6f7385d6e21b869deecde1eeb35409a43d677778d16efed00b496b168caf8b5cdfffebd01b8ec910ec35c536b2c04c96f56d42a92d926b6fde9f70f744a2f6c911b3b15962a0d68246506c9d0094073d11608b6ba79e3ac495b36b2d85", 0x86}], 0x9, &(0x7f00000007c0)=[{0xf8, 0x114, 0xffff, "4fb5095e1e0e4b4ee1d53343541bd86221f0636fc07f534576a79efb779b2bf5ba90c5a1c231fe2b37259f35e161047e38fd9faf626b1793fa6d5457b3b605a81644851919f3c5676ddc21aec2bcf7e41dfef1aee53f5b0c3725352bf10fbda8c845f71b67c4550f291c95248b8d4af3caae2783325e86699b39fef4f5f90d8fd9d3cb36fd1cf8f77e2a51a159e771a6eccc8f53de82f43832bb9f7b0e992feff55373a1bc281eeb78dfc26d694aa43623ef447b5f5fb7ee066983fc847a1500c5140159f85ab4715d2e3ea6af5aebe7970f251a5cb0a86efdfc11316a033b6b4f7b77facff5bbd5"}, {0xc8, 0x117, 0xffff0000, "4c99e29437f4d64175c19c1d6926ce841cf3da2ef9fb61dc3922458b13e852520dacfba429d811f62697be049eb2e97ca359e9970cddfe89846d75057819c5831fd4f2372e6257d4c97559e97c6050cf7e77d80a71d1f3293d76237f2d2b442047c053e12cd8f6106a84d85294b1f8e686626b2076debd7799b55cdeab33558205901fd753a72a6c21687c8d40cfc4ffe94946510ddf387e946cf8328f0c3b7a4b293406cbaff0f3083d040b919a49ba4bd4525e72d8"}, {0x80, 0x6, 0x4, "034ee23293b07d5ff0976f9407114a06aac9d3af74e4d11c9f681a70b49608827cf83ec007697538fb0ab9f94919eddb287ec731dcb67489cdfc99efb2f8275943c72e4163105a6e45519c142ac788f5cc1b4c4ba77600ef89de7a07db6a7c22247c97536a692db1b41cb6dbcb"}, {0x10, 0x102, 0x8}, {0x48, 0x117, 0xffffffcb, "6a3a25da76bf30434677db446e625f45d347a55ab61bbaef87f058793cd7194526bc27183d68f61a4f4211ff43efba22c7e7"}], 0x298}, 0x80) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x96}]}}}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) 3.269210593s ago: executing program 8 (id=1061): syz_open_dev$radio(0x0, 0x1, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x18}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c808) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0xa0, 0x71, 0x10, 0x1d}}, 0x0, 0x7fff, 0x53, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="5488fa25ba61", 0x0, 0x100004, 0x10026, 0xffffffffffffffff, 0x0}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/194, 0xc2}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xe8}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xf}], 0x3}, 0x4009800) 3.268250082s ago: executing program 7 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x1, 0x1800}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000800), 0x0, 0x4004c010) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) 3.267644822s ago: executing program 2 (id=1063): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket(0x2a, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x8, {0x6, 0x3, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.26710916s ago: executing program 7 (id=1064): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x0, 0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f00000002c0)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), 0x0}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0xff7f, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 3.266390949s ago: executing program 2 (id=1065): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x1, 0x1800}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) 3.265793904s ago: executing program 8 (id=1066): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) socket$inet6(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40c03) sched_setscheduler(0x0, 0x1, 0x0) io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x760, 0x80, 0x1, 0x14c}) socket$alg(0x26, 0x5, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=ANY=[], 0x0}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x208000, 0x0) r2 = syz_io_uring_setup(0x496, 0x0, &(0x7f0000000340), &(0x7f0000000080)) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r2}, &(0x7f0000000180), &(0x7f0000000100)) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000) write$dsp(r0, &(0x7f0000002000)='`', 0x88020) 3.264932623s ago: executing program 6 (id=1067): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x6, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000800), 0x0, 0x4004c010) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x7ffff004) 3.264154989s ago: executing program 3 (id=1068): syz_open_dev$radio(0x0, 0x1, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x2, &(0x7f0000391000/0x4000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x1000, 0x0, 0x0, 0x20002b5, 0x0, 0x0, 0x0, 0x18}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) setresuid(0x0, 0xee00, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000140)="5488fa25ba61", 0x0, 0x100004, 0x10026, 0xffffffffffffffff, 0x0}) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)="b9693e14ae39b9d4956589cd4383940ab3b40d07cb4c156f3ca6fc88de9cb8a4ecac59ed49fd2b216619907a0b6431db4058ea0fc81a8a2c0d90fe4a4d001cb9ee95d2753b07a7825250f7428fd1147c0143bfdaa681777e472c350000a1e49900194dc22df4c565e5e7dbf454da7e3171f9736ec5b31348bd11c559d531fc5ad17bb24275fe9a24f69f4c0d44458071aff8d3c4783a7f1ccd3442264f6416fda9da7fe6f999f956700335e3e6a034413af8c4ba7c00"/195, 0xc3}, {&(0x7f0000000380)="248d7ac09ae9afb8954f66838ae5bb401e1c656014c4c8af25db88b25065cb5a4c7073b230eb916c6ff171fd78611ff70f30b9e77db814a1d43c7fa7a70c0df21e728ed51b836e0ce6f3faf0e4817093867621b5e0c03cf4638bc53de55de11380d10ae2775154c1069ae25d99ff710f4bbf7b5e76282c2df5a2d1f289179a74a84d8aceef5d869e05cc5117f25cd1e4d2461a95237c2fa3ba38e181e3f23a3cde974dfa75aecc3b2ce33369ad52580a6cd143f10ac7e783955969b8bd05a524f919a2fd9d3cbd055b5d2f7f00ca58f6b770492f471dc3b6b3b101d10f157ec9f68dac9b8d18cf8b", 0xbf}, {&(0x7f0000000240)="a3df552cfd633a6742d5c27a9fc4f4", 0xffffff53}], 0x3}, 0x4009800) 3.263579356s ago: executing program 2 (id=1069): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket(0x2a, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000000)="f20000000000008508003e6e8f86a32c824a706b81acdfadc6d16ef4d5a280f4247ac655ac2b24b07b829ac6b4ef9c0ea296b7", 0x33, 0x4000053, &(0x7f0000000200)={0x11, 0x8, r6, 0x1, 0x40, 0x6, @broadcast}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x8, {0x6, 0x3, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) shutdown(r1, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.253126102s ago: executing program 6 (id=1070): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, 0x0, 0x2, 0x0) write$cgroup_type(r1, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) 3.24144925s ago: executing program 8 (id=1071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) 3.233986108s ago: executing program 2 (id=1072): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_io_uring_setup(0x4560, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x10000252}, &(0x7f0000000000), &(0x7f0000000040)) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8) 3.23326805s ago: executing program 3 (id=1073): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) accept4(r2, 0x0, 0x0, 0x80800) 3.215768236s ago: executing program 7 (id=1074): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000"], 0x68}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.071470016s ago: executing program 8 (id=1075): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_io_uring_setup(0x4560, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x10000252}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r4 = dup(0xffffffffffffffff) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x14}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x8) 2.963912419s ago: executing program 6 (id=1076): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8800) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="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") ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$TCXONC(r0, 0x4b3a, 0x0) 1.480617092s ago: executing program 3 (id=1077): r0 = io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket(0x2a, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000000)="f20000000000008508003e6e8f86a32c824a706b81acdfadc6d16ef4d5a280f4247ac655ac2b24b07b829ac6b4ef9c0ea296b7", 0x33, 0x4000053, &(0x7f0000000200)={0x11, 0x8, r7, 0x1, 0x40, 0x6, @broadcast}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) accept4(r1, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 1.430594555s ago: executing program 6 (id=1078): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 1.306107121s ago: executing program 8 (id=1079): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000700)=[{}, {&(0x7f0000000180)="0912f7b179d91aebdd36958c70", 0xd}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="ac2032d95fa30d76efd223848bb74a174682c1816c8d1e10209d95f1eec34f520023d0bc0f1f41aeb00a7cc375ff368441dc0f389683b198b0e7080f791292aad935fde5a325365277753f77c88f30318189f27edfa0e6f438b6ff486eddbde81087c7ca13369b6d3d8972fdde9de5560297f8", 0x73}, {&(0x7f0000000400)="fcea50680173131d5d451188b94e1cd1e64f3bbca06484be2509a5dbeed2631c2e256baea8b797b7220fc9fdeb513a986078e79cb96c5e09195f4f22c7b1d7805d1c0ae706582ee358416f31046d602805aeee7bd33eada48a61d413467290820fe82baab19fbe2b8547f0433a8a7139b8ad84cc3e8cc66745f8c98cd80bc77f35d96710ead4cbd59ff847b4eb33fd8a88f296e1715c3b0dbd5af99ac7ffcc6b8ed551bef240aec47ec135d167e7079b09a3b33e0215a9", 0xb7}, {&(0x7f0000000640)="5e4db21c69bfe929de9a26285a77f9228a8c404887a8c83811c670b0d074cce6b8cc438e4cd9caf25a6f7385d6e21b869deecde1eeb35409a43d677778d16efed00b496b168caf8b5cdfffebd01b8ec910ec35c536b2c04c96f56d42a92d926b6fde9f70f744a2f6c911b3b15962a0d68246506c9d0094073d11608b6ba79e3ac495b36b2d85", 0x86}], 0x8, &(0x7f00000007c0)=[{0xf8, 0x114, 0xffff, "4fb5095e1e0e4b4ee1d53343541bd86221f0636fc07f534576a79efb779b2bf5ba90c5a1c231fe2b37259f35e161047e38fd9faf626b1793fa6d5457b3b605a81644851919f3c5676ddc21aec2bcf7e41dfef1aee53f5b0c3725352bf10fbda8c845f71b67c4550f291c95248b8d4af3caae2783325e86699b39fef4f5f90d8fd9d3cb36fd1cf8f77e2a51a159e771a6eccc8f53de82f43832bb9f7b0e992feff55373a1bc281eeb78dfc26d694aa43623ef447b5f5fb7ee066983fc847a1500c5140159f85ab4715d2e3ea6af5aebe7970f251a5cb0a86efdfc11316a033b6b4f7b77facff5bbd5"}, {0xc8, 0x117, 0xffff0000, "4c99e29437f4d64175c19c1d6926ce841cf3da2ef9fb61dc3922458b13e852520dacfba429d811f62697be049eb2e97ca359e9970cddfe89846d75057819c5831fd4f2372e6257d4c97559e97c6050cf7e77d80a71d1f3293d76237f2d2b442047c053e12cd8f6106a84d85294b1f8e686626b2076debd7799b55cdeab33558205901fd753a72a6c21687c8d40cfc4ffe94946510ddf387e946cf8328f0c3b7a4b293406cbaff0f3083d040b919a49ba4bd4525e72d8"}, {0x80, 0x6, 0x4, "034ee23293b07d5ff0976f9407114a06aac9d3af74e4d11c9f681a70b49608827cf83ec007697538fb0ab9f94919eddb287ec731dcb67489cdfc99efb2f8275943c72e4163105a6e45519c142ac788f5cc1b4c4ba77600ef89de7a07db6a7c22247c97536a692db1b41cb6dbcb"}, {0x10, 0x102, 0x8}, {0x48, 0x117, 0xffffffcb, "6a3a25da76bf30434677db446e625f45d347a55ab61bbaef87f058793cd7194526bc27183d68f61a4f4211ff43efba22c7e7"}], 0x298}, 0x80) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$TCXONC(r1, 0x4b3a, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) 300.539809ms ago: executing program 6 (id=1080): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = userfaultfd(0x801) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x2}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(r1, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) sendmsg$nl_generic(r0, 0x0, 0xc010) 0s ago: executing program 2 (id=1081): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4000) kernel console output (not intermixed with test programs): 51.511:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 264.084827][ T36] audit: type=1326 audit(1773822651.511:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 264.084929][ T36] audit: type=1326 audit(1773822651.511:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 264.085049][ T36] audit: type=1326 audit(1773822651.511:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 264.085163][ T36] audit: type=1326 audit(1773822651.511:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 264.085282][ T36] audit: type=1326 audit(1773822651.511:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 264.232136][ T36] audit: type=1326 audit(1773822651.661:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6832 comm="syz.3.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 265.391317][ T6486] veth0_vlan: entered promiscuous mode [ 265.423489][ T6486] veth1_vlan: entered promiscuous mode [ 265.559218][ T6486] veth0_macvtap: entered promiscuous mode [ 266.525348][ T6486] veth1_macvtap: entered promiscuous mode [ 267.091242][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.554534][ T6486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.632838][ T90] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.636768][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.654613][ T1173] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.655783][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.923307][ T5800] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 269.926222][ T5800] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 269.937537][ T5800] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 269.939818][ T5800] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 269.948291][ T5800] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 270.019572][ T5802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 270.023247][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 270.060455][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 270.090485][ T5802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 270.091567][ T5802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 271.668585][ T6877] lo speed is unknown, defaulting to 1000 [ 271.736984][ T6878] lo speed is unknown, defaulting to 1000 [ 272.029182][ T5113] Bluetooth: hci5: command tx timeout [ 272.168645][ T5113] Bluetooth: hci6: command tx timeout [ 273.202867][ T6899] netlink: 'syz.2.214': attribute type 4 has an invalid length. [ 273.202886][ T6899] netlink: 152 bytes leftover after parsing attributes in process `syz.2.214'. [ 273.337578][ T6899] .`: renamed from bond0 (while UP) [ 274.086401][ T5113] Bluetooth: hci5: command tx timeout [ 274.246913][ T5113] Bluetooth: hci6: command tx timeout [ 275.153171][ T6926] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 275.344282][ T6927] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 275.344345][ T6927] overlayfs: failed to look up (tracing) for ino (-66) [ 275.376416][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 275.943206][ T6916] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.179350][ T5113] Bluetooth: hci5: command tx timeout [ 276.331229][ T5113] Bluetooth: hci6: command tx timeout [ 278.016553][ T6959] tipc: Enabling of bearer rejected, already enabled [ 278.017161][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 278.246538][ T5113] Bluetooth: hci5: command tx timeout [ 278.504555][ T5113] Bluetooth: hci6: command tx timeout [ 278.650747][ T6916] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.744811][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.225'. [ 279.240388][ T6916] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.829943][ T6982] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 279.859679][ T6916] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.953392][ T6985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.228'. [ 280.081439][ T6986] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 280.081497][ T6986] overlayfs: failed to look up (tracing) for ino (-66) [ 280.788403][ T6877] chnl_net:caif_netlink_parms(): no params data found [ 280.969059][ T6878] chnl_net:caif_netlink_parms(): no params data found [ 284.689010][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.692453][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.692688][ T6877] bridge_slave_0: entered allmulticast mode [ 284.724128][ T6877] bridge_slave_0: entered promiscuous mode [ 285.246905][ T6916] bridge_slave_1: left allmulticast mode [ 285.246934][ T6916] bridge_slave_1: left promiscuous mode [ 285.247176][ T6916] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.341783][ T6916] bridge_slave_0: left allmulticast mode [ 285.341808][ T6916] bridge_slave_0: left promiscuous mode [ 285.341990][ T6916] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.424685][ T7021] netlink: 'syz.2.234': attribute type 4 has an invalid length. [ 285.424702][ T7021] netlink: 152 bytes leftover after parsing attributes in process `syz.2.234'. [ 285.997138][ T6916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.077265][ T6916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.098770][ T6916] bond0 (unregistering): Released all slaves [ 286.144055][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.144219][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.144454][ T6877] bridge_slave_1: entered allmulticast mode [ 286.150932][ T6877] bridge_slave_1: entered promiscuous mode [ 286.321135][ T7028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 286.367379][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.367466][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.367651][ T6878] bridge_slave_0: entered allmulticast mode [ 286.369858][ T6878] bridge_slave_0: entered promiscuous mode [ 286.533882][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.534009][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.534257][ T6878] bridge_slave_1: entered allmulticast mode [ 286.571262][ T6878] bridge_slave_1: entered promiscuous mode [ 288.259518][ T6916] hsr_slave_0: left promiscuous mode [ 288.317321][ T6916] hsr_slave_1: left promiscuous mode [ 288.318539][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.318565][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.387337][ T6916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.387367][ T6916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.479530][ T6916] veth1_macvtap: left promiscuous mode [ 288.479622][ T6916] veth0_macvtap: left promiscuous mode [ 288.479800][ T6916] veth1_vlan: left promiscuous mode [ 288.479914][ T6916] veth0_vlan: left promiscuous mode [ 291.907244][ T6916] team0 (unregistering): Port device team_slave_1 removed [ 291.947109][ T6916] team0 (unregistering): Port device team_slave_0 removed [ 292.162489][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.270922][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.274606][ T6878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.593983][ T6878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.818410][ T6877] team0: Port device team_slave_0 added [ 293.637301][ T6878] team0: Port device team_slave_0 added [ 294.449499][ T6877] team0: Port device team_slave_1 added [ 294.535391][ T7074] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 294.589365][ T6878] team0: Port device team_slave_1 added [ 294.823632][ T7076] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 294.823718][ T7076] overlayfs: failed to look up (tracing) for ino (-66) [ 294.932871][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.932884][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.932903][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.934487][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.934503][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.934531][ T6878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.966531][ T5883] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 295.048169][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.048191][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.048210][ T6877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.049839][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.049850][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.049870][ T6878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.211666][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.211702][ T5883] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.211726][ T5883] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 295.211771][ T5883] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 295.211794][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.282050][ T5883] usb 4-1: config 0 descriptor?? [ 296.084115][ T6877] hsr_slave_0: entered promiscuous mode [ 296.085539][ T6877] hsr_slave_1: entered promiscuous mode [ 296.132999][ T6877] debugfs: 'hsr0' already exists in 'hsr' [ 296.133031][ T6877] Cannot create hsr debugfs directory [ 296.379499][ T6878] hsr_slave_0: entered promiscuous mode [ 296.380917][ T6878] hsr_slave_1: entered promiscuous mode [ 296.381959][ T6878] debugfs: 'hsr0' already exists in 'hsr' [ 296.381985][ T6878] Cannot create hsr debugfs directory [ 300.125695][ T6877] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.174871][ T6877] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.309993][ T6877] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.411707][ T5883] usbhid 4-1:0.0: can't add hid device: -32 [ 300.411864][ T5883] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 300.589744][ T6877] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 301.168489][ T10] usb 4-1: USB disconnect, device number 4 [ 301.296675][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 303.360586][ T6877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.443447][ T6877] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.478699][ T6916] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.478857][ T6916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.583769][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.598292][ T6916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.144964][ T6878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 304.329219][ T6878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 304.402587][ T6878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 304.686084][ T6878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 307.136472][ T5890] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 307.306630][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.306667][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.306692][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 307.306735][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.306761][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.381552][ T5890] usb 2-1: config 0 descriptor?? [ 311.259919][ T6878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.502835][ T5890] usbhid 2-1:0.0: can't add hid device: -32 [ 312.502966][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 312.771975][ T6878] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.812745][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.812905][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.885647][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.894010][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.632798][ T7215] netlink: 'syz.2.264': attribute type 4 has an invalid length. [ 313.632815][ T7215] netlink: 152 bytes leftover after parsing attributes in process `syz.2.264'. [ 313.719840][ T6877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.853181][ T7221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.266'. [ 315.359582][ T6877] veth0_vlan: entered promiscuous mode [ 315.364712][ T5883] usb 2-1: USB disconnect, device number 4 [ 317.302287][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.302361][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.437044][ T6877] veth1_vlan: entered promiscuous mode [ 317.637657][ T6878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.874939][ T6877] veth0_macvtap: entered promiscuous mode [ 317.890187][ T6877] veth1_macvtap: entered promiscuous mode [ 319.519323][ T6051] IPVS: starting estimator thread 0... [ 319.915504][ T7259] IPVS: using max 7 ests per chain, 16800 per kthread [ 319.971197][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.158651][ T6877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.197574][ T90] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.220939][ T90] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.235535][ T90] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.255682][ T5962] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.819396][ T7266] netlink: 'syz.1.274': attribute type 4 has an invalid length. [ 320.819417][ T7266] netlink: 152 bytes leftover after parsing attributes in process `syz.1.274'. [ 321.068086][ T7266] .`: renamed from bond0 (while UP) [ 322.872637][ T7283] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 323.749796][ T1408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.749819][ T1408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.887494][ T6878] veth0_vlan: entered promiscuous mode [ 323.910325][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.910346][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.943206][ T6878] veth1_vlan: entered promiscuous mode [ 324.068873][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 324.068946][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 324.110380][ T6878] veth0_macvtap: entered promiscuous mode [ 324.151066][ T6878] veth1_macvtap: entered promiscuous mode [ 324.245437][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.307566][ T6878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.383650][ T1336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.383890][ T1336] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.383949][ T1336] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.383989][ T1336] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.460013][ T7308] netlink: 180 bytes leftover after parsing attributes in process `syz.2.285'. [ 326.465104][ T7310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 326.522705][ T7311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 326.599402][ T7310] erspan0: entered promiscuous mode [ 326.599554][ T7310] macvtap1: entered promiscuous mode [ 326.599689][ T7310] macvtap1: entered allmulticast mode [ 326.599699][ T7310] erspan0: entered allmulticast mode [ 326.928464][ T7311] nbd: socks must be embedded in a SOCK_ITEM attr [ 326.976689][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 327.156432][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.156457][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.156474][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 327.156505][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.156521][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.160814][ T1408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.160830][ T1408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.260800][ T10] usb 7-1: config 0 descriptor?? [ 328.386907][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.386928][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.859291][ T7329] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 330.887328][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 330.887948][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 331.202454][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 331.217777][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 331.223304][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 331.231626][ T10] usb 7-1: USB disconnect, device number 2 [ 331.250116][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 331.250823][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.316809][ T7330] lo speed is unknown, defaulting to 1000 [ 332.384836][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.291'. [ 332.384858][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.291'. [ 332.538961][ T7335] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 332.539056][ T7335] overlayfs: failed to look up (tracing) for ino (-66) [ 333.290831][ T7330] chnl_net:caif_netlink_parms(): no params data found [ 334.186594][ T5113] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 334.341276][ T5113] Bluetooth: hci0: command tx timeout [ 334.856722][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 335.397869][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.397892][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.397906][ T5881] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 335.397935][ T5881] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.397950][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.403657][ T5881] usb 3-1: config 0 descriptor?? [ 335.706767][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.706919][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.709868][ T7330] bridge_slave_0: entered allmulticast mode [ 335.744503][ T7330] bridge_slave_0: entered promiscuous mode [ 336.419259][ T5113] Bluetooth: hci0: command tx timeout [ 336.905080][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.905236][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.905492][ T7330] bridge_slave_1: entered allmulticast mode [ 336.958807][ T7330] bridge_slave_1: entered promiscuous mode [ 337.400015][ T160] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.434425][ T7365] mmap: syz.1.298 (7365) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 337.713194][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 337.794373][ T7367] macvtap2: entered promiscuous mode [ 337.794557][ T7367] macvtap2: entered allmulticast mode [ 337.967282][ T5881] usbhid 3-1:0.0: can't add hid device: -71 [ 337.967416][ T5881] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 338.038164][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.043613][ T5881] usb 3-1: USB disconnect, device number 3 [ 338.380387][ T160] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.746725][ T5113] Bluetooth: hci0: command tx timeout [ 338.940073][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.966426][ T5890] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 339.134201][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.134243][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.134259][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.134291][ T5890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 339.134308][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.203923][ T5890] usb 4-1: config 0 descriptor?? [ 339.407901][ T7375] netlink: 180 bytes leftover after parsing attributes in process `syz.2.301'. [ 339.460738][ T160] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.302616][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 340.427828][ T7330] team0: Port device team_slave_0 added [ 340.806545][ T5113] Bluetooth: hci0: command tx timeout [ 341.393913][ T160] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.483065][ T5890] usbhid 4-1:0.0: can't add hid device: -71 [ 341.484745][ T5890] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 341.667732][ T7330] team0: Port device team_slave_1 added [ 341.670005][ T5890] usb 4-1: USB disconnect, device number 5 [ 342.772553][ T7379] nbd: socks must be embedded in a SOCK_ITEM attr [ 342.844554][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.844572][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.844601][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.957203][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.957217][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.957237][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.884311][ T7330] hsr_slave_0: entered promiscuous mode [ 344.885746][ T7330] hsr_slave_1: entered promiscuous mode [ 344.888322][ T7330] debugfs: 'hsr0' already exists in 'hsr' [ 344.888350][ T7330] Cannot create hsr debugfs directory [ 345.226392][ T5890] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 345.374200][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.309'. [ 345.389058][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.389088][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.389107][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 345.389144][ T5890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.389164][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.490950][ T5890] usb 4-1: config 0 descriptor?? [ 346.022186][ T160] bridge_slave_1: left allmulticast mode [ 346.022217][ T160] bridge_slave_1: left promiscuous mode [ 346.022571][ T160] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.065333][ T160] bridge_slave_0: left allmulticast mode [ 347.065355][ T160] bridge_slave_0: left promiscuous mode [ 347.065534][ T160] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.923137][ T7419] nfs: Unknown parameter 'ÿÿÿÿ' [ 348.230880][ T5890] usbhid 4-1:0.0: can't add hid device: -71 [ 348.230977][ T5890] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 348.304846][ T5890] usb 4-1: USB disconnect, device number 6 [ 348.688241][ T5890] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 348.840592][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.840635][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.840651][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 348.840683][ T5890] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.840700][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.846196][ T5890] usb 4-1: config 0 descriptor?? [ 348.947379][ T160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.008396][ T160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.029812][ T160] bond0 (unregistering): Released all slaves [ 349.066776][ T7408] wg2: entered promiscuous mode [ 349.066797][ T7408] wg2: entered allmulticast mode [ 350.141348][ T5890] usbhid 4-1:0.0: can't add hid device: -71 [ 350.141477][ T5890] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 350.177114][ T5890] usb 4-1: USB disconnect, device number 7 [ 350.992153][ T7437] netlink: 180 bytes leftover after parsing attributes in process `syz.3.316'. [ 351.086842][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 353.563829][ T7438] nbd: socks must be embedded in a SOCK_ITEM attr [ 354.416961][ T7455] netlink: 'syz.6.320': attribute type 4 has an invalid length. [ 354.417141][ T7455] netlink: 152 bytes leftover after parsing attributes in process `syz.6.320'. [ 354.843597][ T7444] nfs: Unknown parameter 'ÿÿÿÿ' [ 355.035200][ T5932] udevd[5932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 355.055635][ T5932] udevd[5932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 355.090505][ T7455] .`: renamed from bond0 (while UP) [ 356.396592][ T7327] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 356.552363][ T7327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.552415][ T7327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.552448][ T7327] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 356.552511][ T7327] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.552529][ T7327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.558759][ T7327] usb 4-1: config 0 descriptor?? [ 357.138913][ T160] hsr_slave_0: left promiscuous mode [ 357.187395][ T160] hsr_slave_1: left promiscuous mode [ 357.194465][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.194527][ T160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.259453][ T160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.259483][ T160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.343699][ T7327] usbhid 4-1:0.0: can't add hid device: -71 [ 357.343892][ T7327] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 357.391572][ T7327] usb 4-1: USB disconnect, device number 8 [ 357.414390][ T160] veth1_macvtap: left promiscuous mode [ 357.414497][ T160] veth0_macvtap: left promiscuous mode [ 357.414749][ T160] veth1_vlan: left promiscuous mode [ 357.445148][ T160] veth0_vlan: left promiscuous mode [ 359.696541][ T7489] netlink: 40 bytes leftover after parsing attributes in process `syz.6.330'. [ 359.730480][ T7489] netlink: 'syz.6.330': attribute type 6 has an invalid length. [ 360.012794][ T7496] netlink: 180 bytes leftover after parsing attributes in process `syz.3.332'. [ 361.489744][ T36] audit: type=1326 audit(1773822748.921:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7487 comm="syz.6.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd776c799 code=0x7ffc0000 [ 361.497248][ T36] audit: type=1326 audit(1773822748.931:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7487 comm="syz.6.330" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd776c799 code=0x7ffc0000 [ 361.497897][ T7501] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 365.522283][ T7518] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 365.760892][ T7521] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 365.760977][ T7521] overlayfs: failed to look up (tracing) for ino (-66) [ 365.851564][ T160] team0 (unregistering): Port device team_slave_1 removed [ 365.932885][ T160] team0 (unregistering): Port device team_slave_0 removed [ 366.218477][ T5932] udevd[5932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 366.266626][ T5883] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 366.456774][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.456800][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.456816][ T5883] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 366.456859][ T5883] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.456876][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.523398][ T5883] usb 2-1: config 0 descriptor?? [ 368.422463][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 368.422565][ T5883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 368.600396][ T5883] usb 2-1: USB disconnect, device number 5 [ 369.384134][ T7550] netlink: 180 bytes leftover after parsing attributes in process `syz.6.345'. [ 369.441471][ T7551] netlink: 20 bytes leftover after parsing attributes in process `syz.6.345'. [ 370.079369][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.346'. [ 370.264192][ T7556] macvtap3: entered promiscuous mode [ 370.264937][ T7556] macvtap3: entered allmulticast mode [ 373.776558][ T6035] udevd[6035]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 373.783616][ T5932] udevd[5932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 376.911999][ T7330] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.976424][ T7330] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 377.022522][ T7330] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 377.096403][ T6051] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 377.161955][ T7330] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 377.262902][ T6051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.262943][ T6051] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.262960][ T6051] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 377.262991][ T6051] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.263008][ T6051] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.412943][ T6051] usb 2-1: config 0 descriptor?? [ 378.867691][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.867771][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.256516][ T6051] usbhid 2-1:0.0: can't add hid device: -71 [ 380.256622][ T6051] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 380.277258][ T6051] usb 2-1: USB disconnect, device number 6 [ 380.308103][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.357744][ T7330] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.457420][ T5962] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.457570][ T5962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.460300][ T5962] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.460452][ T5962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.743099][ T7620] netlink: 180 bytes leftover after parsing attributes in process `syz.1.358'. [ 380.889487][ T7621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'. [ 387.323869][ T6038] udevd[6038]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 387.348094][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 387.418158][ T5932] udevd[5932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 388.356407][ T5849] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 388.363276][ T7663] netlink: 'syz.6.366': attribute type 4 has an invalid length. [ 388.363313][ T7663] netlink: 152 bytes leftover after parsing attributes in process `syz.6.366'. [ 388.659864][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.659900][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.659923][ T5849] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.659967][ T5849] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 388.659991][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.663649][ T5849] usb 2-1: config 0 descriptor?? [ 391.571207][ T5849] usbhid 2-1:0.0: can't add hid device: -71 [ 391.571336][ T5849] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 391.628905][ T5849] usb 2-1: USB disconnect, device number 7 [ 392.049322][ T7682] netlink: 180 bytes leftover after parsing attributes in process `syz.1.371'. [ 392.182195][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 392.783711][ T7684] nbd: socks must be embedded in a SOCK_ITEM attr [ 393.863041][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.061473][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.071646][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 395.911294][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 395.912073][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 396.083464][ T5932] udevd[5932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 396.139875][ T5932] udevd[5932]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 396.406351][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 398.016619][ T5802] Bluetooth: hci2: command tx timeout [ 400.086493][ T5802] Bluetooth: hci2: command tx timeout [ 401.157546][ T7719] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 401.157802][ T7719] overlayfs: overlapping lowerdir path [ 402.323681][ T5802] Bluetooth: hci2: command tx timeout [ 403.163451][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 403.683226][ T7732] macvtap2: entered promiscuous mode [ 403.683408][ T7732] macvtap2: entered allmulticast mode [ 404.201458][ T7686] lo speed is unknown, defaulting to 1000 [ 404.336110][ T7741] trusted_key: encrypted_key: master key parameter 'defaultBuser:syz' is invalid [ 404.365515][ T5802] Bluetooth: hci2: command tx timeout [ 405.165470][ T7742] netlink: 'syz.2.389': attribute type 4 has an invalid length. [ 405.165488][ T7742] netlink: 152 bytes leftover after parsing attributes in process `syz.2.389'. [ 407.042297][ T7686] chnl_net:caif_netlink_parms(): no params data found [ 409.077483][ T7761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.393'. [ 409.474206][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.474361][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.474562][ T7686] bridge_slave_0: entered allmulticast mode [ 409.502197][ T7686] bridge_slave_0: entered promiscuous mode [ 409.515547][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.515686][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.515991][ T7686] bridge_slave_1: entered allmulticast mode [ 409.546747][ T7686] bridge_slave_1: entered promiscuous mode [ 409.549834][ T1423] bridge_slave_1: left allmulticast mode [ 409.549862][ T1423] bridge_slave_1: left promiscuous mode [ 409.550194][ T1423] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.649466][ T1423] bridge_slave_0: left allmulticast mode [ 409.649498][ T1423] bridge_slave_0: left promiscuous mode [ 409.649757][ T1423] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.989298][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz.6.396'. [ 410.998882][ T1423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.787225][ T1423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.007270][ T1423] bond0 (unregistering): Released all slaves [ 414.239410][ T7775] erspan0: entered promiscuous mode [ 414.239646][ T7775] macvtap1: entered promiscuous mode [ 414.239811][ T7775] macvtap1: entered allmulticast mode [ 414.239826][ T7775] erspan0: entered allmulticast mode [ 414.989319][ T7803] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.990305][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.041945][ T7686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.047093][ T5881] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 415.086170][ T7686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.112865][ T7797] nfs: Unknown parameter 'ÿÿÿÿ' [ 415.248697][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 415.248722][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.248739][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 415.248769][ T5881] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 415.248785][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.252498][ T5881] usb 7-1: config 0 descriptor?? [ 415.334467][ T1423] hsr_slave_0: left promiscuous mode [ 415.376447][ T1423] hsr_slave_1: left promiscuous mode [ 415.383462][ T1423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.443171][ T1423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.640544][ T5881] usbhid 7-1:0.0: can't add hid device: -71 [ 415.640669][ T5881] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 415.696388][ T5881] usb 7-1: USB disconnect, device number 3 [ 419.004776][ T7826] netlink: 60 bytes leftover after parsing attributes in process `syz.6.410'. [ 420.847792][ T1423] team0 (unregistering): Port device team_slave_1 removed [ 421.926566][ T1423] team0 (unregistering): Port device team_slave_0 removed [ 423.413024][ T7843] netlink: 'syz.1.415': attribute type 4 has an invalid length. [ 423.413043][ T7843] netlink: 152 bytes leftover after parsing attributes in process `syz.1.415'. [ 423.476810][ T7686] team0: Port device team_slave_0 added [ 423.506869][ T7686] team0: Port device team_slave_1 added [ 423.719864][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.719885][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.719919][ T7686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.722778][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.722796][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.722827][ T7686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.536001][ T7686] hsr_slave_0: entered promiscuous mode [ 425.589805][ T7686] hsr_slave_1: entered promiscuous mode [ 425.592376][ T7686] debugfs: 'hsr0' already exists in 'hsr' [ 425.592451][ T7686] Cannot create hsr debugfs directory [ 430.745454][ T7901] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.762754][ T7901] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.093827][ T7686] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 434.161826][ T7686] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 434.326379][ T7686] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 434.435862][ T7686] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 435.306758][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.398650][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.427091][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.427193][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.573744][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.583888][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.326983][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.328488][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.328559][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.900890][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.912940][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.836871][ T7686] veth0_vlan: entered promiscuous mode [ 441.886141][ T7686] veth1_vlan: entered promiscuous mode [ 441.985876][ T7686] veth0_macvtap: entered promiscuous mode [ 442.006168][ T7686] veth1_macvtap: entered promiscuous mode [ 442.078052][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.085559][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.165911][ T7420] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.166201][ T7420] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.175749][ T1408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.176817][ T1408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.643434][ T6916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.643466][ T6916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.419134][ T7420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.419156][ T7420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.953278][ T8022] tipc: Started in network mode [ 447.953314][ T8022] tipc: Node identity ac14140f, cluster identity 4711 [ 447.953654][ T8022] tipc: New replicast peer: 255.255.255.255 [ 447.954906][ T8022] tipc: Enabled bearer , priority 10 [ 447.960513][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.453'. [ 449.602709][ T5849] tipc: Node number set to 2886997007 [ 451.557042][ T8038] netlink: 'syz.5.458': attribute type 4 has an invalid length. [ 451.557070][ T8038] netlink: 152 bytes leftover after parsing attributes in process `syz.5.458'. [ 451.571846][ T8038] .`: renamed from bond0 (while UP) [ 458.416319][ T6030] IPVS: starting estimator thread 0... [ 458.547738][ T8089] IPVS: using max 8 ests per chain, 19200 per kthread [ 461.286063][ T8095] nfs: Unknown parameter 'ÿÿÿÿ' [ 466.190725][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.478'. [ 470.752541][ T8147] netlink: 'syz.1.483': attribute type 4 has an invalid length. [ 470.756447][ T8147] netlink: 152 bytes leftover after parsing attributes in process `syz.1.483'. [ 471.811025][ T8152] netlink: 'syz.6.486': attribute type 4 has an invalid length. [ 471.811041][ T8152] netlink: 152 bytes leftover after parsing attributes in process `syz.6.486'. [ 474.240046][ T8167] netlink: 40 bytes leftover after parsing attributes in process `syz.2.492'. [ 474.270143][ T8167] netlink: 'syz.2.492': attribute type 6 has an invalid length. [ 475.226160][ T36] audit: type=1326 audit(1773822862.511:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db502c799 code=0x7ffc0000 [ 475.226257][ T36] audit: type=1326 audit(1773822862.511:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5db502c799 code=0x7ffc0000 [ 475.226306][ T36] audit: type=1326 audit(1773822862.511:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db502c799 code=0x7ffc0000 [ 475.226370][ T36] audit: type=1326 audit(1773822862.511:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db502c799 code=0x7ffc0000 [ 475.226401][ T36] audit: type=1326 audit(1773822862.511:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5db4fecfce code=0x7ffc0000 [ 475.226432][ T36] audit: type=1326 audit(1773822862.521:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5db4fecfce code=0x7ffc0000 [ 475.226463][ T36] audit: type=1326 audit(1773822862.521:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5db4fecfce code=0x7ffc0000 [ 475.226496][ T36] audit: type=1326 audit(1773822862.521:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5db4fecfce code=0x7ffc0000 [ 475.226527][ T36] audit: type=1326 audit(1773822862.521:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5db4fecfce code=0x7ffc0000 [ 475.226557][ T36] audit: type=1326 audit(1773822862.521:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8166 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5db4fecfce code=0x7ffc0000 [ 477.759901][ T8182] netlink: 40 bytes leftover after parsing attributes in process `syz.2.496'. [ 479.270725][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 479.284752][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 479.289547][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 479.326555][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 479.344135][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 479.980036][ T8186] lo speed is unknown, defaulting to 1000 [ 481.366475][ T5800] Bluetooth: hci0: command tx timeout [ 482.141592][ T8196] nfs: Unknown parameter 'ÿÿÿÿ' [ 482.996332][ T6030] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 483.338640][ T6030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.338666][ T6030] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.338682][ T6030] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 483.338712][ T6030] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 483.338729][ T6030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.344359][ T6030] usb 4-1: config 0 descriptor?? [ 483.446569][ T5800] Bluetooth: hci0: command tx timeout [ 484.868580][ T5962] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.144750][ T8186] chnl_net:caif_netlink_parms(): no params data found [ 485.527122][ T5800] Bluetooth: hci0: command tx timeout [ 485.563423][ T5962] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.848298][ T6030] usbhid 4-1:0.0: can't add hid device: -71 [ 485.848429][ T6030] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 485.856006][ T6030] usb 4-1: USB disconnect, device number 9 [ 488.326528][ T5800] Bluetooth: hci0: command tx timeout [ 488.380760][ T5962] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.057258][ T8236] netlink: 40 bytes leftover after parsing attributes in process `syz.6.508'. [ 492.166987][ T5962] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.272075][ T8186] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.272293][ T8186] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.272586][ T8186] bridge_slave_0: entered allmulticast mode [ 493.238380][ T8186] bridge_slave_0: entered promiscuous mode [ 493.456663][ T8186] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.456790][ T8186] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.457138][ T8186] bridge_slave_1: entered allmulticast mode [ 493.460657][ T8186] bridge_slave_1: entered promiscuous mode [ 495.194721][ T8186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.214495][ T8186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.767809][ T8186] team0: Port device team_slave_0 added [ 495.771742][ T8186] team0: Port device team_slave_1 added [ 498.115508][ T8277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.522'. [ 499.254557][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.254575][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.254605][ T8186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.327401][ T8186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.327418][ T8186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.327448][ T8186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.407740][ T8186] hsr_slave_0: entered promiscuous mode [ 501.411239][ T8186] hsr_slave_1: entered promiscuous mode [ 501.411878][ T8186] debugfs: 'hsr0' already exists in 'hsr' [ 501.411895][ T8186] Cannot create hsr debugfs directory [ 501.764065][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.764141][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.032012][ T5962] bridge_slave_1: left allmulticast mode [ 503.032041][ T5962] bridge_slave_1: left promiscuous mode [ 503.048846][ T5962] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.347945][ T5962] bridge_slave_0: left allmulticast mode [ 503.347976][ T5962] bridge_slave_0: left promiscuous mode [ 503.348224][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.377088][ T5962] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.437118][ T5962] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.457965][ T5962] .` (unregistering): Released all slaves [ 516.864575][ T8186] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 517.692079][ T8186] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 517.973111][ T8186] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 518.171418][ T8186] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 518.857345][ T5962] hsr_slave_0: left promiscuous mode [ 518.898478][ T5962] hsr_slave_1: left promiscuous mode [ 518.899431][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.899451][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.134531][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.134565][ T5962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.241067][ T5962] veth1_macvtap: left promiscuous mode [ 519.241140][ T5962] veth0_macvtap: left promiscuous mode [ 519.241367][ T5962] veth1_vlan: left promiscuous mode [ 519.241488][ T5962] veth0_vlan: left promiscuous mode [ 520.089978][ T8419] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 528.751852][ T5962] team0 (unregistering): Port device team_slave_1 removed [ 529.166484][ T5962] team0 (unregistering): Port device team_slave_0 removed [ 531.126119][ T8186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.275978][ T8186] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.362625][ T7511] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.384181][ T7511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.938385][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.938527][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.739568][ T8499] block nbd1: NBD_DISCONNECT [ 535.768793][ T5962] IPVS: stop unused estimator thread 0... [ 536.922903][ T8186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.241795][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 541.262471][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 541.263668][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 541.265122][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 541.265937][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 541.727699][ T8564] lo speed is unknown, defaulting to 1000 [ 543.367638][ T5802] Bluetooth: hci2: command tx timeout [ 544.152165][ T8564] chnl_net:caif_netlink_parms(): no params data found [ 546.629036][ T5802] Bluetooth: hci2: command tx timeout [ 547.127451][ T8598] netlink: 'syz.1.586': attribute type 4 has an invalid length. [ 547.127466][ T8598] netlink: 152 bytes leftover after parsing attributes in process `syz.1.586'. [ 547.432879][ T8608] tipc: Enabling of bearer rejected, already enabled [ 547.433005][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.6.587'. [ 548.285979][ T8631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.592'. [ 548.341916][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.592'. [ 548.663479][ T5802] Bluetooth: hci2: command tx timeout [ 549.707557][ T8564] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.707671][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.707919][ T8564] bridge_slave_0: entered allmulticast mode [ 549.711831][ T8564] bridge_slave_0: entered promiscuous mode [ 549.767304][ T8564] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.767484][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.767845][ T8564] bridge_slave_1: entered allmulticast mode [ 549.831748][ T8564] bridge_slave_1: entered promiscuous mode [ 550.226785][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 550.728122][ T5802] Bluetooth: hci2: command tx timeout [ 552.044316][ T8655] netlink: 'syz.3.596': attribute type 4 has an invalid length. [ 552.044334][ T8655] netlink: 152 bytes leftover after parsing attributes in process `syz.3.596'. [ 552.134115][ T8655] .`: renamed from bond0 (while UP) [ 552.342865][ T8650] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 552.383728][ T8564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 552.872385][ T8667] netlink: 'syz.3.598': attribute type 4 has an invalid length. [ 552.872433][ T8667] netlink: 152 bytes leftover after parsing attributes in process `syz.3.598'. [ 553.619729][ T8564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.367326][ T8564] team0: Port device team_slave_0 added [ 554.369887][ T8564] team0: Port device team_slave_1 added [ 555.302370][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.602'. [ 558.940007][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.940026][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.940066][ T8564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.061508][ T8564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.061526][ T8564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.061554][ T8564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.307416][ T8702] block nbd6: NBD_DISCONNECT [ 560.592836][ T8564] hsr_slave_0: entered promiscuous mode [ 560.594223][ T8564] hsr_slave_1: entered promiscuous mode [ 560.595162][ T8564] debugfs: 'hsr0' already exists in 'hsr' [ 560.595187][ T8564] Cannot create hsr debugfs directory [ 560.713652][ T8712] netlink: 180 bytes leftover after parsing attributes in process `syz.2.607'. [ 560.771334][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.607'. [ 561.161674][ T8713] nbd: socks must be embedded in a SOCK_ITEM attr [ 563.093598][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.094781][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.896436][ T7429] bridge_slave_1: left allmulticast mode [ 563.896468][ T7429] bridge_slave_1: left promiscuous mode [ 563.896640][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.991410][ T7429] bridge_slave_0: left allmulticast mode [ 563.991442][ T7429] bridge_slave_0: left promiscuous mode [ 564.001198][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.284183][ T8725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.612'. [ 564.959214][ T8098] udevd[8098]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 565.769874][ T8290] udevd[8290]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 566.614328][ T8730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 568.669098][ T7429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 568.903443][ T7429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.029880][ T7429] bond0 (unregistering): Released all slaves [ 570.542188][ T8730] macvtap0: entered promiscuous mode [ 570.542217][ T8730] virtio_net virtio1 eth0: entered promiscuous mode [ 570.542417][ T8730] macvtap0: entered allmulticast mode [ 570.542435][ T8730] virtio_net virtio1 eth0: entered allmulticast mode [ 571.081653][ T7429] hsr_slave_0: left promiscuous mode [ 571.120125][ T7429] hsr_slave_1: left promiscuous mode [ 571.120997][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.158145][ T7429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.148490][ T7429] team0 (unregistering): Port device team_slave_1 removed [ 574.204172][ T7429] team0 (unregistering): Port device team_slave_0 removed [ 574.420882][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.624'. [ 574.833682][ T8783] netlink: 'syz.3.627': attribute type 6 has an invalid length. [ 576.548743][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 576.548762][ T36] audit: type=1326 audit(1773822963.981:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8782 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 576.550183][ T36] audit: type=1326 audit(1773822963.981:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8782 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 576.550237][ T36] audit: type=1326 audit(1773822963.981:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8782 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 576.550285][ T36] audit: type=1326 audit(1773822963.981:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8782 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 576.550331][ T36] audit: type=1326 audit(1773822963.981:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8782 comm="syz.3.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 577.420745][ T8804] netlink: 'syz.3.632': attribute type 6 has an invalid length. [ 577.596751][ T5849] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 578.134901][ T5849] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 578.134938][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.134961][ T5849] usb 3-1: Product: syz [ 578.134977][ T5849] usb 3-1: Manufacturer: syz [ 578.135003][ T5849] usb 3-1: SerialNumber: syz [ 578.897129][ T5849] usb 3-1: config 0 descriptor?? [ 578.934380][ T36] audit: type=1326 audit(1773822966.361:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8803 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 578.934439][ T36] audit: type=1326 audit(1773822966.361:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8803 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 578.937753][ T36] audit: type=1326 audit(1773822966.371:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8803 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 578.937883][ T36] audit: type=1326 audit(1773822966.371:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8803 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 578.937920][ T36] audit: type=1326 audit(1773822966.371:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8803 comm="syz.3.632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cfa7cc799 code=0x7ffc0000 [ 579.441058][ T5849] usb 3-1: Firmware version (0.0) predates our first public release. [ 579.441086][ T5849] usb 3-1: Please update to version 0.2 or newer [ 579.441871][ T5849] usb 3-1: Firmware: build ¨ Þ”D* … [ 581.462526][ T8830] Invalid ELF header type: 3 != 1 [ 581.736377][ T5849] usb 3-1: USB disconnect, device number 4 [ 582.671063][ T5801] kernel read not supported for file /comedi4 (pid: 5801 comm: kworker/0:4) [ 586.249210][ T8861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.645'. [ 587.399223][ T8859] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 590.890124][ T8564] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 590.891952][ T8887] fuse: Unknown parameter 'grou00000000000000000000' [ 590.994064][ T8564] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 591.251973][ T8564] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 591.281372][ T8564] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 591.347816][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.652'. [ 592.811487][ T8915] bond0: Unable to set down delay as MII monitoring is disabled [ 593.515134][ T8915] bond0 (unregistering): Released all slaves [ 593.669317][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.658'. [ 595.995351][ T8564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.528434][ T8564] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.678524][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.686859][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.719967][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.735267][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.900267][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 599.926757][ T5801] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 599.927829][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 599.930066][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 599.934519][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 600.001088][ T8970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.668'. [ 600.289939][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 600.654355][ T8967] lo speed is unknown, defaulting to 1000 [ 600.672925][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.672960][ T5801] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.672984][ T5801] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 600.673029][ T5801] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 600.673054][ T5801] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.764240][ T5801] usb 4-1: config 0 descriptor?? [ 601.074872][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.670'. [ 602.577778][ T5800] Bluetooth: hci0: command tx timeout [ 604.646890][ T5802] Bluetooth: hci0: command tx timeout [ 604.948637][ T5801] usbhid 4-1:0.0: can't add hid device: -71 [ 604.956528][ T5801] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 604.998694][ T5801] usb 4-1: USB disconnect, device number 10 [ 606.731873][ T5802] Bluetooth: hci0: command tx timeout [ 607.850562][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 609.353573][ T5802] Bluetooth: hci0: command tx timeout [ 612.998637][ T5881] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 615.150585][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 615.153843][ T5881] usb 2-1: too many configurations: 186, using maximum allowed: 8 [ 615.234833][ T5881] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 615.235071][ T5881] usb 2-1: can't read configurations, error -71 [ 620.309465][ T9077] netlink: 'syz.6.691': attribute type 6 has an invalid length. [ 621.828048][ T8967] chnl_net:caif_netlink_parms(): no params data found [ 622.192766][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 623.132062][ T9098] block nbd6: NBD_DISCONNECT [ 623.720627][ T9106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 624.666524][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.666577][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.735015][ T9106] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 624.786860][ T9112] netlink: 'syz.6.696': attribute type 6 has an invalid length. [ 625.336279][ T36] audit: type=1326 audit(1773823012.761:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9110 comm="syz.6.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd776c799 code=0x7ffc0000 [ 625.336347][ T36] audit: type=1326 audit(1773823012.761:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9110 comm="syz.6.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedd776c799 code=0x7ffc0000 [ 625.569960][ T8967] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.570159][ T8967] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.570447][ T8967] bridge_slave_0: entered allmulticast mode [ 625.573313][ T8967] bridge_slave_0: entered promiscuous mode [ 626.100307][ T8967] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.100778][ T8967] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.109137][ T8967] bridge_slave_1: entered allmulticast mode [ 626.163142][ T8967] bridge_slave_1: entered promiscuous mode [ 627.098957][ T5801] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 627.749272][ T5801] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 627.749307][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.749322][ T5801] usb 3-1: Product: syz [ 627.749333][ T5801] usb 3-1: Manufacturer: syz [ 627.749344][ T5801] usb 3-1: SerialNumber: syz [ 627.803527][ T5801] usb 3-1: config 0 descriptor?? [ 628.227095][ T5801] usb 3-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85) [ 628.356399][ T8967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.387705][ T8967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.428791][ T5801] usb 3-1: no permanent extended address found, random address set [ 628.428814][ T5801] usb 3-1: atusb_probe: initialization failed, error = -524 [ 628.429034][ T5801] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 629.027742][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.700'. [ 630.490672][ T8967] team0: Port device team_slave_0 added [ 630.494861][ T8967] team0: Port device team_slave_1 added [ 631.664603][ T903] usb 3-1: USB disconnect, device number 5 [ 631.693121][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.693142][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 631.693175][ T8967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.743598][ T42] bridge_slave_1: left allmulticast mode [ 631.743630][ T42] bridge_slave_1: left promiscuous mode [ 632.083149][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.285655][ T9160] blktrace: Concurrent blktraces are not allowed on loop12 [ 633.696359][ T903] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 633.849038][ T903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 633.849074][ T903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.849099][ T903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 633.849155][ T903] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 633.849179][ T903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.865629][ T903] usb 3-1: config 0 descriptor?? [ 633.869645][ T42] bridge_slave_0: left allmulticast mode [ 633.869721][ T42] bridge_slave_0: left promiscuous mode [ 633.870379][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.390010][ T9174] block nbd6: NBD_DISCONNECT [ 636.118204][ T903] usbhid 3-1:0.0: can't add hid device: -71 [ 636.118336][ T903] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 637.174341][ T903] usb 3-1: USB disconnect, device number 6 [ 637.412114][ T9182] block nbd3: NBD_DISCONNECT [ 639.059468][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.159233][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.207599][ T42] bond0 (unregistering): Released all slaves [ 639.282501][ T8967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.282516][ T8967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.282538][ T8967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.299257][ T9203] block nbd6: NBD_DISCONNECT [ 640.938983][ T8967] hsr_slave_0: entered promiscuous mode [ 640.940338][ T8967] hsr_slave_1: entered promiscuous mode [ 640.941267][ T8967] debugfs: 'hsr0' already exists in 'hsr' [ 640.941292][ T8967] Cannot create hsr debugfs directory [ 642.846861][ T9222] block nbd2: NBD_DISCONNECT [ 643.183940][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 644.689838][ T42] hsr_slave_0: left promiscuous mode [ 644.720862][ T42] hsr_slave_1: left promiscuous mode [ 644.721884][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 644.802869][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.281360][ T9238] block nbd1: NBD_DISCONNECT [ 646.686424][ T9249] block nbd6: NBD_DISCONNECT [ 647.035296][ T42] team0 (unregistering): Port device team_slave_1 removed [ 647.087398][ T42] team0 (unregistering): Port device team_slave_0 removed [ 647.355165][ T9223] bond0: Unable to set down delay as MII monitoring is disabled [ 647.658866][ T9223] bond0 (unregistering): Released all slaves [ 650.005993][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 650.678343][ T9269] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 652.356321][ T6051] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 653.583261][ T6051] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 653.583296][ T6051] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.583317][ T6051] usb 3-1: Product: syz [ 653.583333][ T6051] usb 3-1: Manufacturer: syz [ 653.583348][ T6051] usb 3-1: SerialNumber: syz [ 653.589936][ T6051] usb 3-1: config 0 descriptor?? [ 653.849266][ T36] audit: type=1326 audit(1773823041.281:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9277 comm="syz.6.732" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fedd776c799 code=0x0 [ 654.216679][ T9292] block nbd3: NBD_DISCONNECT [ 654.251411][ T6051] usb 3-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85) [ 654.545433][ T6051] usb 3-1: no permanent extended address found, random address set [ 654.545466][ T6051] usb 3-1: atusb_probe: initialization failed, error = -524 [ 654.545731][ T6051] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 654.834055][ T6051] usb 3-1: USB disconnect, device number 7 [ 658.676498][ T9322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.738'. [ 660.165707][ T9322] bond0: Unable to set down delay as MII monitoring is disabled [ 660.256777][ T9322] bond0 (unregistering): Released all slaves [ 660.580317][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 661.267925][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 661.435043][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 661.497223][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 661.498453][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 662.890105][ T9336] lo speed is unknown, defaulting to 1000 [ 663.346628][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'. [ 663.606331][ T5800] Bluetooth: hci2: command tx timeout [ 663.746392][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 664.819184][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 664.819468][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.819563][ T10] usb 3-1: Product: syz [ 664.819582][ T10] usb 3-1: Manufacturer: syz [ 664.819599][ T10] usb 3-1: SerialNumber: syz [ 665.354179][ T10] usb 3-1: config 0 descriptor?? [ 665.701566][ T5800] Bluetooth: hci2: command tx timeout [ 665.822041][ T10] usb 3-1: Firmware: major: 50, minor: 195, hardware type: UNKNOWN (85) [ 666.047166][ T10] usb 3-1: Read permanent extended address 00:00:00:00:00:00:00:a8 from device [ 666.047193][ T10] usb 3-1: atusb_probe: initialization failed, error = -524 [ 666.047444][ T10] atusb 3-1:0.0: probe with driver atusb failed with error -524 [ 666.263157][ T8755] usb 3-1: USB disconnect, device number 8 [ 666.270386][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 666.280606][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 666.282377][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 666.283574][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 666.284430][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 666.460716][ T9336] chnl_net:caif_netlink_parms(): no params data found [ 667.158125][ T42] bridge_slave_1: left allmulticast mode [ 667.158156][ T42] bridge_slave_1: left promiscuous mode [ 667.158420][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.297922][ T42] bridge_slave_0: left allmulticast mode [ 667.297956][ T42] bridge_slave_0: left promiscuous mode [ 667.298241][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.306263][ T6030] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 667.777889][ T5800] Bluetooth: hci2: command tx timeout [ 671.492825][ T6030] usb 7-1: unable to get BOS descriptor or descriptor too short [ 671.495628][ T6030] usb 7-1: too many configurations: 186, using maximum allowed: 8 [ 671.498502][ T6030] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 671.498540][ T6030] usb 7-1: can't read configurations, error -71 [ 671.536921][ T5800] Bluetooth: hci0: command tx timeout [ 671.537409][ T5800] Bluetooth: hci2: command tx timeout [ 673.333913][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 673.450288][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 673.521846][ T42] bond0 (unregistering): Released all slaves [ 673.606423][ T5802] Bluetooth: hci0: command tx timeout [ 673.936513][ T42] hsr_slave_0: left promiscuous mode [ 673.986498][ T42] hsr_slave_1: left promiscuous mode [ 673.987410][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.018407][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.439603][ T42] team0 (unregistering): Port device team_slave_1 removed [ 674.489286][ T42] team0 (unregistering): Port device team_slave_0 removed [ 674.701872][ T9376] lo speed is unknown, defaulting to 1000 [ 674.785458][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.785585][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.785762][ T9336] bridge_slave_0: entered allmulticast mode [ 674.793618][ T9336] bridge_slave_0: entered promiscuous mode [ 674.819918][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.820075][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.820393][ T9336] bridge_slave_1: entered allmulticast mode [ 674.822225][ T9336] bridge_slave_1: entered promiscuous mode [ 674.909445][ T9336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.945286][ T9336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.021886][ T9336] team0: Port device team_slave_0 added [ 675.028143][ T9336] team0: Port device team_slave_1 added [ 675.146994][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.147008][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.147030][ T9336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.155335][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.155353][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.155383][ T9336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.379550][ T9336] hsr_slave_0: entered promiscuous mode [ 675.380950][ T9336] hsr_slave_1: entered promiscuous mode [ 675.381998][ T9336] debugfs: 'hsr0' already exists in 'hsr' [ 675.382025][ T9336] Cannot create hsr debugfs directory [ 675.506560][ T9376] chnl_net:caif_netlink_parms(): no params data found [ 675.691737][ T5802] Bluetooth: hci0: command tx timeout [ 675.723811][ T9376] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.723942][ T9376] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.724545][ T9376] bridge_slave_0: entered allmulticast mode [ 675.730386][ T9376] bridge_slave_0: entered promiscuous mode [ 675.784875][ T9376] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.784963][ T9376] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.785400][ T9376] bridge_slave_1: entered allmulticast mode [ 675.812656][ T9376] bridge_slave_1: entered promiscuous mode [ 676.106713][ T9376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.148403][ T9376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.213847][ T9376] team0: Port device team_slave_0 added [ 676.223375][ T9376] team0: Port device team_slave_1 added [ 676.284511][ T9376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.284528][ T9376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.284553][ T9376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.290263][ T9376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.290281][ T9376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.290310][ T9376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.394524][ T9336] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 676.443609][ T9336] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 676.476059][ T9376] hsr_slave_0: entered promiscuous mode [ 676.481355][ T9376] hsr_slave_1: entered promiscuous mode [ 676.483808][ T9376] debugfs: 'hsr0' already exists in 'hsr' [ 676.483876][ T9376] Cannot create hsr debugfs directory [ 676.499261][ T9336] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 676.534342][ T9336] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 677.054419][ T9376] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 677.075142][ T9376] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 677.128476][ T9376] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 677.161756][ T9376] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 677.265983][ T9336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.334097][ T9336] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.361312][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.361523][ T7429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.392932][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.393211][ T7429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.579970][ T9376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.621641][ T9376] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.657734][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.657874][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.689315][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.689949][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.766501][ T5802] Bluetooth: hci0: command tx timeout [ 677.855191][ T9336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.103878][ T9376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.319361][ T9336] veth0_vlan: entered promiscuous mode [ 678.345315][ T9336] veth1_vlan: entered promiscuous mode [ 678.401500][ T9336] veth0_macvtap: entered promiscuous mode [ 678.423443][ T9336] veth1_macvtap: entered promiscuous mode [ 678.461595][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.485582][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.509032][ T7429] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.510151][ T7429] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.510889][ T7429] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.511859][ T7429] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.672282][ T9376] veth0_vlan: entered promiscuous mode [ 678.769105][ T9376] veth1_vlan: entered promiscuous mode [ 678.855577][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.855601][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.950000][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.950022][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.954497][ T9376] veth0_macvtap: entered promiscuous mode [ 678.998838][ T9376] veth1_macvtap: entered promiscuous mode [ 679.036351][ T9376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.063436][ T9376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.085644][ T1423] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.098056][ T1423] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.100453][ T1423] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.105727][ T1423] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.341198][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.341219][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.452115][ T7429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.452138][ T7429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.937491][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.937568][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.525074][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 697.421724][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.765'. [ 729.319333][ T9694] IPv6: sit1: Disabled Multicast RS [ 729.337230][ T9694] sit1: entered allmulticast mode [ 735.830602][ T9715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.782'. [ 737.301149][ T9737] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 738.282597][ T9721] bond0: Unable to set down delay as MII monitoring is disabled [ 738.316280][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 738.466336][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 738.469993][ T10] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 738.470023][ T10] usb 8-1: config 0 has no interface number 0 [ 738.470072][ T10] usb 8-1: config 0 interface 12 has no altsetting 0 [ 738.477337][ T10] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 738.477421][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.477482][ T10] usb 8-1: Product: syz [ 738.477510][ T10] usb 8-1: Manufacturer: syz [ 738.477552][ T10] usb 8-1: SerialNumber: syz [ 739.554129][ T10] usb 8-1: config 0 descriptor?? [ 739.554461][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 739.568211][ T10] usb 8-1: can't set config #0, error -32 [ 739.584394][ T9721] bond0 (unregistering): Released all slaves [ 739.604068][ T10] usb 8-1: USB disconnect, device number 2 [ 739.822742][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.8.789'. [ 739.822763][ T9748] netlink: 12 bytes leftover after parsing attributes in process `syz.8.789'. [ 739.822848][ T9748] netlink: 'syz.8.789': attribute type 20 has an invalid length. [ 747.374368][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.374464][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.048235][ T67] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.282862][ T67] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.559665][ T67] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.823112][ T67] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.193948][ T67] bridge_slave_1: left allmulticast mode [ 759.193982][ T67] bridge_slave_1: left promiscuous mode [ 759.194244][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.277965][ T67] bridge_slave_0: left allmulticast mode [ 759.277996][ T67] bridge_slave_0: left promiscuous mode [ 759.278278][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.987937][ T67] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.067004][ T67] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.098387][ T67] .` (unregistering): Released all slaves [ 763.458085][ T67] hsr_slave_0: left promiscuous mode [ 763.496350][ T67] hsr_slave_1: left promiscuous mode [ 763.498187][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 763.498208][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.547176][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 763.547211][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 763.628084][ T67] veth1_macvtap: left promiscuous mode [ 763.628198][ T67] veth0_macvtap: left promiscuous mode [ 763.628464][ T67] veth1_vlan: left promiscuous mode [ 763.628646][ T67] veth0_vlan: left promiscuous mode [ 764.358182][ T67] team0 (unregistering): Port device team_slave_1 removed [ 764.413706][ T67] team0 (unregistering): Port device team_slave_0 removed [ 765.523293][ T67] IPVS: stop unused estimator thread 0... [ 785.288651][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 808.828245][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.828319][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 845.346634][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.7.794'. [ 845.346652][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz.7.794'. [ 845.346673][T10137] netlink: 'syz.7.794': attribute type 20 has an invalid length. [ 847.432638][T10148] netlink: 8 bytes leftover after parsing attributes in process `syz.6.798'. [ 847.434774][T10148] netlink: 12 bytes leftover after parsing attributes in process `syz.6.798'. [ 847.434934][T10148] netlink: 'syz.6.798': attribute type 20 has an invalid length. [ 848.621166][T10147] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 849.242766][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 849.242917][T10169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.803'. [ 851.695173][T10190] netlink: 52 bytes leftover after parsing attributes in process `syz.2.809'. [ 862.097618][ T5802] Bluetooth: hci0: command 0x0406 tx timeout [ 867.615504][T10259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.813'. [ 867.615522][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.6.813'. [ 867.615543][T10259] netlink: 'syz.6.813': attribute type 20 has an invalid length. [ 867.687340][T10247] netlink: 4 bytes leftover after parsing attributes in process `syz.8.814'. [ 870.250717][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.250818][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.782734][T10247] nbd: socks must be embedded in a SOCK_ITEM attr [ 876.375695][T10295] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 877.877146][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz.7.826'. [ 877.877165][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.7.826'. [ 877.877185][T10307] netlink: 'syz.7.826': attribute type 20 has an invalid length. [ 878.624634][T10281] udevd[10281]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 901.306324][ T5890] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 901.397660][T10407] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(16) [ 901.397692][T10407] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 901.427050][T10407] vhci_hcd vhci_hcd.0: Device attached [ 901.430390][T10407] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 901.437510][T10407] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(20) [ 901.437538][T10407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 901.437603][T10407] vhci_hcd vhci_hcd.0: Device attached [ 901.462189][T10407] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 901.462265][T10407] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 901.464916][T10407] vhci_hcd vhci_hcd.0: Device attached [ 901.472119][ T5890] usb 9-1: Using ep0 maxpacket: 32 [ 901.504629][ T5890] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 901.504661][ T5890] usb 9-1: config 0 has no interface number 0 [ 901.504711][ T5890] usb 9-1: config 0 interface 12 has no altsetting 0 [ 901.535496][ T5890] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 901.535530][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.535553][ T5890] usb 9-1: Product: syz [ 901.535568][ T5890] usb 9-1: Manufacturer: syz [ 901.535584][ T5890] usb 9-1: SerialNumber: syz [ 901.583739][ T5890] usb 9-1: config 0 descriptor?? [ 901.597930][T10407] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(24) [ 901.597962][T10407] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 901.625383][T10416] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 901.638548][T10407] vhci_hcd vhci_hcd.0: Device attached [ 901.676582][ T8755] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 901.684650][T10414] vhci_hcd: connection closed [ 901.702219][T10410] vhci_hcd: connection closed [ 901.704827][T10412] vhci_hcd: connection closed [ 901.709495][T10408] vhci_hcd: connection closed [ 901.739899][T10409] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 901.750879][ T67] vhci_hcd vhci_hcd.2: stop threads [ 901.760716][ T67] vhci_hcd vhci_hcd.2: release socket [ 901.782273][ T67] vhci_hcd vhci_hcd.2: disconnect device [ 901.782651][ T67] vhci_hcd vhci_hcd.2: stop threads [ 901.782675][ T67] vhci_hcd vhci_hcd.2: release socket [ 901.784793][ T67] vhci_hcd vhci_hcd.2: disconnect device [ 901.785201][ T67] vhci_hcd vhci_hcd.2: stop threads [ 901.785218][ T67] vhci_hcd vhci_hcd.2: release socket [ 901.785510][ T67] vhci_hcd vhci_hcd.2: disconnect device [ 901.785687][ T67] vhci_hcd vhci_hcd.2: stop threads [ 901.785703][ T67] vhci_hcd vhci_hcd.2: release socket [ 901.821206][ T67] vhci_hcd vhci_hcd.2: disconnect device [ 902.215926][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.842'. [ 902.215954][T10424] netlink: 24 bytes leftover after parsing attributes in process `syz.6.842'. [ 903.444096][ T5890] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 903.444157][ T5890] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 903.444177][ T5890] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 903.444408][ T5890] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 903.530814][ T5890] usb 9-1: USB disconnect, device number 2 [ 903.812208][T10437] loop2: detected capacity change from 0 to 7 [ 903.946537][T10437] Dev loop2: unable to read RDB block 7 [ 903.946655][T10437] loop2: AHDI p1 p2 p3 [ 903.946690][T10437] loop2: partition table partially beyond EOD, truncated [ 904.003251][T10437] loop2: p1 start 1601398130 is beyond EOD, truncated [ 904.003287][T10437] loop2: p2 start 1702059890 is beyond EOD, truncated [ 907.426530][ T8755] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 912.545428][ T6030] usb usb38-port1: attempt power cycle [ 913.866250][T10477] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 914.199857][T10478] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 915.139499][ T6030] usb usb38-port1: unable to enumerate USB device [ 931.693324][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.693416][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 970.409437][T10646] macvtap1: left promiscuous mode [ 970.425306][T10646] macvtap2: left promiscuous mode [ 970.439467][T10646] macvtap3: left promiscuous mode [ 976.962951][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'. [ 976.963037][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 976.963162][T10677] netlink: 'syz.2.874': attribute type 20 has an invalid length. [ 993.129971][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.130066][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1024.135284][T10815] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 1024.135316][T10815] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1024.146271][T10815] vhci_hcd vhci_hcd.0: Device attached [ 1024.211635][T10815] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(15) [ 1024.211665][T10815] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1024.211709][T10815] vhci_hcd vhci_hcd.0: Device attached [ 1024.256322][T10820] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1024.261892][T10815] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(17) [ 1024.261914][T10815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1024.261983][T10815] vhci_hcd vhci_hcd.0: Device attached [ 1024.282688][T10815] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(21) [ 1024.282718][T10815] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1024.282813][T10815] vhci_hcd vhci_hcd.0: Device attached [ 1024.333073][T10815] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(23) [ 1024.333103][T10815] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1024.333194][T10815] vhci_hcd vhci_hcd.0: Device attached [ 1024.358289][T10815] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1024.446102][ T6051] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1024.497197][T10825] vhci_hcd: connection closed [ 1024.498721][T10827] vhci_hcd: connection closed [ 1024.501105][T10823] vhci_hcd: connection closed [ 1024.505543][T10817] vhci_hcd: connection reset by peer [ 1024.505865][T10821] vhci_hcd: connection closed [ 1024.508436][ T7321] vhci_hcd vhci_hcd.3: stop threads [ 1024.508521][ T7321] vhci_hcd vhci_hcd.3: release socket [ 1024.508633][ T7321] vhci_hcd vhci_hcd.3: disconnect device [ 1024.547591][ T7321] vhci_hcd vhci_hcd.3: stop threads [ 1024.547614][ T7321] vhci_hcd vhci_hcd.3: release socket [ 1024.547841][ T7321] vhci_hcd vhci_hcd.3: disconnect device [ 1024.555539][ T7321] vhci_hcd vhci_hcd.3: stop threads [ 1024.555566][ T7321] vhci_hcd vhci_hcd.3: release socket [ 1024.555888][ T7321] vhci_hcd vhci_hcd.3: disconnect device [ 1024.589544][ T7321] vhci_hcd vhci_hcd.3: stop threads [ 1024.589562][ T7321] vhci_hcd vhci_hcd.3: release socket [ 1024.589761][ T7321] vhci_hcd vhci_hcd.3: disconnect device [ 1024.615230][ T7321] vhci_hcd vhci_hcd.3: stop threads [ 1024.615251][ T7321] vhci_hcd vhci_hcd.3: release socket [ 1024.615334][ T7321] vhci_hcd vhci_hcd.3: disconnect device [ 1025.149952][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.7.885'. [ 1025.149977][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.7.885'. [ 1025.150008][T10835] netlink: 'syz.7.885': attribute type 20 has an invalid length. [ 1025.921088][T10839] loop2: detected capacity change from 0 to 7 [ 1025.950415][T10829] Dev loop2: unable to read RDB block 7 [ 1025.950443][T10829] loop2: AHDI p1 p2 p3 [ 1025.950468][T10829] loop2: partition table partially beyond EOD, truncated [ 1025.951711][T10829] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1025.951733][T10829] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1026.026718][T10839] Dev loop2: unable to read RDB block 7 [ 1026.026746][T10839] loop2: AHDI p1 p2 p3 [ 1026.026799][T10839] loop2: partition table partially beyond EOD, truncated [ 1026.027066][T10839] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1026.027087][T10839] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1026.442249][T10853] netlink: 8 bytes leftover after parsing attributes in process `syz.8.889'. [ 1026.442404][T10853] netlink: 12 bytes leftover after parsing attributes in process `syz.8.889'. [ 1026.442606][T10853] netlink: 'syz.8.889': attribute type 20 has an invalid length. [ 1029.461822][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.8.895'. [ 1029.617406][ T6051] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1032.996126][T10900] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1044.814114][T10950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'. [ 1046.601020][T10967] netlink: 8 bytes leftover after parsing attributes in process `syz.7.913'. [ 1046.601046][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.7.913'. [ 1046.601075][T10967] netlink: 'syz.7.913': attribute type 20 has an invalid length. [ 1047.256914][T10978] loop2: detected capacity change from 0 to 7 [ 1047.285363][T10978] Dev loop2: unable to read RDB block 7 [ 1047.285398][T10978] loop2: AHDI p1 p2 p3 [ 1047.285430][T10978] loop2: partition table partially beyond EOD, truncated [ 1047.285686][T10978] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1047.285708][T10978] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1047.466298][ T5990] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1047.619016][ T5990] usb 4-1: Using ep0 maxpacket: 32 [ 1047.621491][ T5990] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1047.621522][ T5990] usb 4-1: config 0 has no interface number 0 [ 1047.621573][ T5990] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1047.655689][ T5990] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1047.655723][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.655746][ T5990] usb 4-1: Product: syz [ 1047.655762][ T5990] usb 4-1: Manufacturer: syz [ 1047.655778][ T5990] usb 4-1: SerialNumber: syz [ 1047.717063][ T5990] usb 4-1: config 0 descriptor?? [ 1048.084360][T10992] macvtap1: left promiscuous mode [ 1048.085772][T10992] macvtap2: left promiscuous mode [ 1051.558591][ T5990] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1051.558654][ T5990] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1051.558674][ T5990] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1051.558777][ T5990] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1051.877136][ T5990] usb 4-1: USB disconnect, device number 11 [ 1052.329576][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.924'. [ 1055.406956][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.407038][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.078967][T11051] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1057.106574][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.7.933'. [ 1059.037803][T11052] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1067.016764][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.938'. [ 1067.016783][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.8.938'. [ 1067.016804][T11095] netlink: 'syz.8.938': attribute type 20 has an invalid length. [ 1067.092317][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.6.937'. [ 1067.092404][T11097] netlink: 12 bytes leftover after parsing attributes in process `syz.6.937'. [ 1067.092806][T11097] netlink: 'syz.6.937': attribute type 20 has an invalid length. [ 1067.963467][T11103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.939'. [ 1067.963518][T11103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.939'. [ 1067.963598][T11103] netlink: 'syz.2.939': attribute type 20 has an invalid length. [ 1068.945271][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.7.942'. [ 1069.036856][T11098] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1071.567690][T11150] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1072.647456][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 1072.647483][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.951'. [ 1072.647515][T11153] netlink: 'syz.3.951': attribute type 20 has an invalid length. [ 1076.868889][T11166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.954'. [ 1076.868970][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.2.954'. [ 1076.869098][T11166] netlink: 'syz.2.954': attribute type 20 has an invalid length. [ 1078.018863][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.7.957'. [ 1078.018932][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz.7.957'. [ 1078.019056][T11176] netlink: 'syz.7.957': attribute type 20 has an invalid length. [ 1079.268590][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.8.955'. [ 1079.353331][T11185] trusted_key: encrypted_key: insufficient parameters specified [ 1079.944288][ T9971] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1086.898703][T11222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.959'. [ 1086.898722][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.959'. [ 1086.898742][T11222] netlink: 'syz.6.959': attribute type 20 has an invalid length. [ 1087.671768][T11209] netlink: 8 bytes leftover after parsing attributes in process `syz.7.963'. [ 1089.450036][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 1089.450055][T11240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.964'. [ 1089.450076][T11240] netlink: 'syz.2.964': attribute type 20 has an invalid length. [ 1090.028742][T11247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 1090.028780][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 1090.029107][T11247] netlink: 'syz.3.966': attribute type 20 has an invalid length. [ 1090.998677][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.970'. [ 1095.378336][T11225] bond6: Unable to set down delay as MII monitoring is disabled [ 1095.418406][T11225] bond6 (unregistering): Released all slaves [ 1095.512078][T11239] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1095.559844][T11244] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1096.746159][ T5990] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1096.927030][ T5990] usb 4-1: Using ep0 maxpacket: 32 [ 1096.941262][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.941330][ T5990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.941388][ T5990] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1096.941517][ T5990] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1096.941577][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.363248][ T5990] usb 4-1: config 0 descriptor?? [ 1101.833768][ T5990] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input5 [ 1101.890225][ T5990] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input6 [ 1102.698338][T11305] netlink: 12 bytes leftover after parsing attributes in process `syz.8.982'. [ 1102.861764][ T5990] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 1103.031704][ T5990] usb 4-1: USB disconnect, device number 12 [ 1103.752377][T11314] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(15) [ 1103.752428][T11314] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1103.752603][T11314] vhci_hcd vhci_hcd.0: Device attached [ 1103.874382][T11318] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1103.894020][T11314] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(17) [ 1103.894054][T11314] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1103.894117][T11314] vhci_hcd vhci_hcd.0: Device attached [ 1103.985530][T11318] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(22) [ 1103.985554][T11318] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1104.029310][T11318] vhci_hcd vhci_hcd.0: Device attached [ 1104.029468][T11314] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(19) [ 1104.029484][T11314] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1104.029562][T11314] vhci_hcd vhci_hcd.0: Device attached [ 1104.078274][ T10] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1104.079445][T11314] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1104.131785][T11327] vhci_hcd vhci_hcd.0: pdev(8) rhport(4) sockfd(27) [ 1104.131818][T11327] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1104.132128][T11327] vhci_hcd vhci_hcd.0: Device attached [ 1104.839896][T11328] vhci_hcd: connection closed [ 1104.843291][ T49] vhci_hcd vhci_hcd.8: stop threads [ 1104.843315][ T49] vhci_hcd vhci_hcd.8: release socket [ 1104.843374][ T49] vhci_hcd vhci_hcd.8: disconnect device [ 1104.843504][T11324] vhci_hcd: connection closed [ 1104.843940][ T49] vhci_hcd vhci_hcd.8: stop threads [ 1104.843953][ T49] vhci_hcd vhci_hcd.8: release socket [ 1104.844005][ T49] vhci_hcd vhci_hcd.8: disconnect device [ 1104.876491][T11321] vhci_hcd: connection closed [ 1104.908704][T11319] vhci_hcd: connection closed [ 1104.938005][T11316] vhci_hcd: connection reset by peer [ 1104.966603][ T12] vhci_hcd vhci_hcd.8: stop threads [ 1104.966628][ T12] vhci_hcd vhci_hcd.8: release socket [ 1104.966702][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 1104.967091][ T12] vhci_hcd vhci_hcd.8: stop threads [ 1104.967109][ T12] vhci_hcd vhci_hcd.8: release socket [ 1104.967148][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 1104.967474][ T12] vhci_hcd vhci_hcd.8: stop threads [ 1104.967489][ T12] vhci_hcd vhci_hcd.8: release socket [ 1104.967528][ T12] vhci_hcd vhci_hcd.8: disconnect device [ 1105.209304][T11329] fido_id[11329]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1109.196627][ T10] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 1110.478144][T11295] usb usb50-port1: attempt power cycle [ 1111.038499][T11295] usb usb50-port1: unable to enumerate USB device [ 1116.014803][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.014876][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1152.711572][T11479] trusted_key: encrypted_key: insufficient parameters specified [ 1153.519175][ T9971] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1155.434321][T11494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.998'. [ 1155.468457][T11494] netlink: 'syz.3.998': attribute type 10 has an invalid length. [ 1155.596164][T11495] loop5: detected capacity change from 0 to 7 [ 1155.909208][T11494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1155.934260][T11494] .`: (slave batadv0): Enslaving as an active interface with an up link [ 1156.378933][T11495] Dev loop5: unable to read RDB block 7 [ 1156.378969][T11495] loop5: AHDI p1 [ 1156.379001][T11495] loop5: partition table partially beyond EOD, truncated [ 1156.414096][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.996'. [ 1160.178249][T11517] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 1160.178281][T11517] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1160.178368][T11517] vhci_hcd vhci_hcd.0: Device attached [ 1160.212991][T11517] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(16) [ 1160.213025][T11517] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1160.213078][T11517] vhci_hcd vhci_hcd.0: Device attached [ 1160.214802][T11517] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1160.231322][T11517] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(20) [ 1160.231395][T11517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1160.231530][T11517] vhci_hcd vhci_hcd.0: Device attached [ 1160.272985][T11517] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(22) [ 1160.273014][T11517] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1160.273112][T11517] vhci_hcd vhci_hcd.0: Device attached [ 1160.337871][T11517] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(24) [ 1160.337899][T11517] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1160.337960][T11517] vhci_hcd vhci_hcd.0: Device attached [ 1160.339914][T11530] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1160.456109][T11295] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1160.508511][T11528] vhci_hcd: connection closed [ 1160.511025][ T3566] vhci_hcd vhci_hcd.6: stop threads [ 1160.511046][ T3566] vhci_hcd vhci_hcd.6: release socket [ 1160.511103][ T3566] vhci_hcd vhci_hcd.6: disconnect device [ 1160.516992][T11526] vhci_hcd: connection closed [ 1160.518552][ T3566] vhci_hcd vhci_hcd.6: stop threads [ 1160.518604][ T3566] vhci_hcd vhci_hcd.6: release socket [ 1160.518806][ T3566] vhci_hcd vhci_hcd.6: disconnect device [ 1160.523346][T11524] vhci_hcd: connection closed [ 1160.544272][ T3566] vhci_hcd vhci_hcd.6: stop threads [ 1160.544348][ T3566] vhci_hcd vhci_hcd.6: release socket [ 1160.544568][ T3566] vhci_hcd vhci_hcd.6: disconnect device [ 1160.556267][ T10] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1160.574520][T11521] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1160.587900][T11519] vhci_hcd: connection closed [ 1160.593979][T11522] vhci_hcd: connection closed [ 1160.762975][T11295] usb 9-1: config 0 has no interfaces? [ 1160.764918][T11295] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1160.765437][T11295] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.171358][ T1423] vhci_hcd vhci_hcd.6: stop threads [ 1161.171389][ T1423] vhci_hcd vhci_hcd.6: release socket [ 1161.171496][ T1423] vhci_hcd vhci_hcd.6: disconnect device [ 1161.181939][ T1423] vhci_hcd vhci_hcd.6: stop threads [ 1161.182004][ T1423] vhci_hcd vhci_hcd.6: release socket [ 1161.182196][ T1423] vhci_hcd vhci_hcd.6: disconnect device [ 1161.218805][T11295] usb 9-1: config 0 descriptor?? [ 1161.569915][T11520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.570513][T11520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.576779][T11295] usb 9-1: USB disconnect, device number 3 [ 1161.801506][T11544] IPv6: sit1: Disabled Multicast RS [ 1161.816967][T11544] sit1: entered allmulticast mode [ 1162.671879][T11295] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1164.068370][ T5990] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1164.216556][ T5990] usb 4-1: Using ep0 maxpacket: 16 [ 1164.219427][ T5990] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1164.219468][ T5990] usb 4-1: config 0 has an invalid descriptor of length 185, skipping remainder of the config [ 1164.219491][ T5990] usb 4-1: config 0 has no interface number 0 [ 1164.223284][ T5990] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1164.223318][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.223396][ T5990] usb 4-1: Product: syz [ 1164.223413][ T5990] usb 4-1: Manufacturer: syz [ 1164.223430][ T5990] usb 4-1: SerialNumber: syz [ 1164.317834][ T5990] usb 4-1: config 0 descriptor?? [ 1164.342950][ T5990] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1164.343063][ T5990] uvcvideo 4-1:0.105: No valid video chain found. [ 1164.634709][ T5990] usb 4-1: USB disconnect, device number 13 [ 1165.676558][ T10] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1167.087317][ T9466] usb usb46-port1: attempt power cycle [ 1167.672824][ T9466] usb usb46-port1: unable to enumerate USB device [ 1173.839199][T11588] trusted_key: syz.7.1015 sent an empty control message without MSG_MORE. [ 1173.932816][T11591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1013'. [ 1173.936065][T11591] netlink: 'syz.2.1013': attribute type 10 has an invalid length. [ 1174.001020][T11592] loop5: detected capacity change from 0 to 7 [ 1175.442386][T11592] Dev loop5: unable to read RDB block 7 [ 1175.442422][T11592] loop5: AHDI p1 [ 1175.442464][T11592] loop5: partition table partially beyond EOD, truncated [ 1175.667582][T11591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1175.669064][T11591] .`: (slave batadv0): Enslaving as an active interface with an up link [ 1175.993568][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1011'. [ 1175.993880][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1011'. [ 1175.994221][T11597] netlink: 'syz.6.1011': attribute type 20 has an invalid length. [ 1176.180076][T11598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'. [ 1178.088396][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.088467][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.221905][T11599] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1179.901576][T11633] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1181.232255][T11637] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1022'. [ 1181.232273][T11637] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1022'. [ 1181.232294][T11637] netlink: 'syz.6.1022': attribute type 20 has an invalid length. [ 1184.256843][T11651] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1190.210133][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1031'. [ 1190.210158][T11680] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1031'. [ 1190.210189][T11680] netlink: 'syz.7.1031': attribute type 20 has an invalid length. [ 1192.196644][T11675] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1192.532631][T11690] fuse: Bad value for 'fd' [ 1238.891000][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.891097][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.717546][T11822] trusted_key: encrypted_key: insufficient parameters specified [ 1244.259951][ T9971] Bluetooth: hci3: ISO packet for unknown connection handle 0 [ 1244.538468][T11824] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1246.933997][T11840] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1044'. [ 1246.934024][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1044'. [ 1246.934057][T11840] netlink: 'syz.7.1044': attribute type 20 has an invalid length. [ 1249.988052][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1042'. [ 1249.988086][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1042'. [ 1249.988172][T11858] netlink: 'syz.2.1042': attribute type 20 has an invalid length. [ 1250.522211][T11857] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1251.227926][T11878] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1049'. [ 1251.254419][T11878] netlink: 'syz.8.1049': attribute type 10 has an invalid length. [ 1251.356709][T11879] loop5: detected capacity change from 0 to 7 [ 1251.553484][T11878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1251.626816][T11878] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1252.114917][T11879] Dev loop5: unable to read RDB block 7 [ 1252.114949][T11879] loop5: AHDI p1 [ 1252.114980][T11879] loop5: partition table partially beyond EOD, truncated [ 1253.435116][T11873] batman_adv: batadv0: Adding interface: dummy0 [ 1253.435136][T11873] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.435173][T11873] batman_adv: batadv0: Interface activated: dummy0 [ 1253.448198][T11883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.771802][T11883] batadv_slave_0: entered promiscuous mode [ 1254.021636][T11890] batman_adv: batadv0: Adding interface: dummy0 [ 1254.021662][T11890] batman_adv: batadv0: Interface activated: dummy0 [ 1254.977773][ T5990] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1255.130747][ T5990] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1255.130845][ T5990] usb 4-1: no configurations [ 1255.130860][ T5990] usb 4-1: can't read configurations, error -22 [ 1255.256067][ T5990] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1255.421671][ T5990] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1255.421762][ T5990] usb 4-1: no configurations [ 1255.421777][ T5990] usb 4-1: can't read configurations, error -22 [ 1255.422168][ T5990] usb usb4-port1: attempt power cycle [ 1255.806129][ T5990] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1256.016071][ T5990] usb 4-1: device not accepting address 16, error -71 [ 1293.007055][T11996] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1297.781454][T12011] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1300.586752][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.586830][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.312295][T12037] IPv6: sit1: Disabled Multicast RS [ 1301.313611][T12037] sit1: entered allmulticast mode [ 1302.297448][T12043] syz.2.1065 (12043) used greatest stack depth: 18664 bytes left [ 1355.885785][T12184] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1074'. [ 1362.187708][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.187761][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.928633][ T5881] ------------[ cut here ]------------ [ 1365.928648][ T5881] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1365.928673][ T5881] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:4/5881 [ 1365.928871][ T5881] Modules linked in: [ 1365.928907][ T5881] CPU: 1 UID: 0 PID: 5881 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1365.928938][ T5881] Tainted: [L]=SOFTLOCKUP [ 1365.928946][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1365.928960][ T5881] Workqueue: events drm_fb_helper_damage_work [ 1365.929020][ T5881] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1365.929049][ T5881] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 8a 47 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1365.929069][ T5881] RSP: 0018:ffffc9000514f8c0 EFLAGS: 00010246 [ 1365.929088][ T5881] RAX: 1ffff11004a54600 RBX: ffffffff8f752160 RCX: 0000000000000000 [ 1365.929105][ T5881] RDX: ffffffff8bbf5340 RSI: ffffffff8bc111a0 RDI: ffffffff8f752160 [ 1365.929122][ T5881] RBP: ffffc9000514f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1365.929136][ T5881] R10: dffffc0000000000 R11: fffffbfff1ed47b7 R12: ffffffff8bc111a0 [ 1365.929153][ T5881] R13: ffff8880252a3000 R14: 0000000000000000 R15: ffffffff8bbf5340 [ 1365.929169][ T5881] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 1365.929188][ T5881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1365.929203][ T5881] CR2: 00007f8cf8a1e990 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 1365.929227][ T5881] Call Trace: [ 1365.929236][ T5881] [ 1365.929252][ T5881] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1365.929280][ T5881] ? rt_spin_unlock+0x14f/0x200 [ 1365.929390][ T5881] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1365.929462][ T5881] ? rt_spin_unlock+0x160/0x200 [ 1365.929501][ T5881] ? drm_vblank_get+0x147/0x260 [ 1365.929530][ T5881] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1365.929599][ T5881] drm_fb_helper_damage_work+0x131/0x6f0 [ 1365.929639][ T5881] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1365.929673][ T5881] ? process_scheduled_works+0xa8d/0x18c0 [ 1365.929711][ T5881] ? process_scheduled_works+0xa8d/0x18c0 [ 1365.929745][ T5881] process_scheduled_works+0xb6e/0x18c0 [ 1365.929814][ T5881] ? __pfx_process_scheduled_works+0x10/0x10 [ 1365.929854][ T5881] ? assign_work+0x3d5/0x5e0 [ 1365.929893][ T5881] worker_thread+0xa53/0xfc0 [ 1365.929958][ T5881] kthread+0x388/0x470 [ 1365.929984][ T5881] ? __pfx_worker_thread+0x10/0x10 [ 1365.930016][ T5881] ? __pfx_kthread+0x10/0x10 [ 1365.930042][ T5881] ret_from_fork+0x51e/0xb90 [ 1365.930099][ T5881] ? __pfx_ret_from_fork+0x10/0x10 [ 1365.930135][ T5881] ? __switch_to+0xc7d/0x1450 [ 1365.930190][ T5881] ? __pfx_kthread+0x10/0x10 [ 1365.930217][ T5881] ret_from_fork_asm+0x1a/0x30 [ 1365.930272][ T5881] [ 1365.930294][ T5881] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1365.930313][ T5881] CPU: 1 UID: 0 PID: 5881 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1365.930344][ T5881] Tainted: [L]=SOFTLOCKUP [ 1365.930352][ T5881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1365.930367][ T5881] Workqueue: events drm_fb_helper_damage_work [ 1365.930394][ T5881] Call Trace: [ 1365.930404][ T5881] [ 1365.930413][ T5881] vpanic+0x56c/0xa60 [ 1365.930461][ T5881] ? __pfx__printk+0x10/0x10 [ 1365.930492][ T5881] ? __pfx_vpanic+0x10/0x10 [ 1365.930523][ T5881] ? is_bpf_text_address+0x292/0x2b0 [ 1365.930572][ T5881] ? is_bpf_text_address+0x26/0x2b0 [ 1365.930613][ T5881] panic+0xc5/0xd0 [ 1365.930647][ T5881] ? __pfx_panic+0x10/0x10 [ 1365.930693][ T5881] ? ret_from_fork_asm+0x1a/0x30 [ 1365.930722][ T5881] __warn+0x315/0x4f0 [ 1365.930753][ T5881] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1365.930782][ T5881] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1365.930811][ T5881] __report_bug+0x29a/0x540 [ 1365.930928][ T5881] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1365.930957][ T5881] ? __pfx___report_bug+0x10/0x10 [ 1365.931014][ T5881] report_bug_entry+0x19a/0x290 [ 1365.931048][ T5881] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1365.931074][ T5881] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1365.931101][ T5881] handle_bug+0xce/0x200 [ 1365.931181][ T5881] exc_invalid_op+0x1a/0x50 [ 1365.931206][ T5881] asm_exc_invalid_op+0x1a/0x20 [ 1365.931251][ T5881] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1365.931280][ T5881] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 8a 47 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1365.931299][ T5881] RSP: 0018:ffffc9000514f8c0 EFLAGS: 00010246 [ 1365.931319][ T5881] RAX: 1ffff11004a54600 RBX: ffffffff8f752160 RCX: 0000000000000000 [ 1365.931335][ T5881] RDX: ffffffff8bbf5340 RSI: ffffffff8bc111a0 RDI: ffffffff8f752160 [ 1365.931352][ T5881] RBP: ffffc9000514f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 1365.931367][ T5881] R10: dffffc0000000000 R11: fffffbfff1ed47b7 R12: ffffffff8bc111a0 [ 1365.931384][ T5881] R13: ffff8880252a3000 R14: 0000000000000000 R15: ffffffff8bbf5340 [ 1365.931425][ T5881] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1365.931453][ T5881] ? rt_spin_unlock+0x14f/0x200 [ 1365.931488][ T5881] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1365.931527][ T5881] ? rt_spin_unlock+0x160/0x200 [ 1365.931559][ T5881] ? drm_vblank_get+0x147/0x260 [ 1365.931588][ T5881] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1365.931626][ T5881] drm_fb_helper_damage_work+0x131/0x6f0 [ 1365.931666][ T5881] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1365.931699][ T5881] ? process_scheduled_works+0xa8d/0x18c0 [ 1365.931730][ T5881] ? process_scheduled_works+0xa8d/0x18c0 [ 1365.931765][ T5881] process_scheduled_works+0xb6e/0x18c0 [ 1365.931833][ T5881] ? __pfx_process_scheduled_works+0x10/0x10 [ 1365.931874][ T5881] ? assign_work+0x3d5/0x5e0 [ 1365.931913][ T5881] worker_thread+0xa53/0xfc0 [ 1365.931978][ T5881] kthread+0x388/0x470 [ 1365.932004][ T5881] ? __pfx_worker_thread+0x10/0x10 [ 1365.932061][ T5881] ? __pfx_kthread+0x10/0x10 [ 1365.932089][ T5881] ret_from_fork+0x51e/0xb90 [ 1365.932125][ T5881] ? __pfx_ret_from_fork+0x10/0x10 [ 1365.932156][ T5881] ? __switch_to+0xc7d/0x1450 [ 1365.932189][ T5881] ? __pfx_kthread+0x10/0x10 [ 1365.932229][ T5881] ret_from_fork_asm+0x1a/0x30 [ 1365.932288][ T5881] [ 1365.932906][ T5881] Kernel Offset: disabled