last executing test programs: 35m18.067695222s ago: executing program 1 (id=923): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}}) r2 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000000c0000f7bc8ad400020000738a00"], 0x0, 0x28}, 0x28) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x7d) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=r5) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x2, 0x80, 0x3, 0x2, 0xc, "479d74833d8a7e4678cae916fe04c8648ff270"}) 35m12.930803973s ago: executing program 1 (id=929): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000002d00), 0x0, 0x0) 35m11.769309683s ago: executing program 1 (id=932): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) preadv2(r0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0x0, 0xffffffff, 0x10) 34m58.71994454s ago: executing program 1 (id=945): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/resume_offset', 0x42, 0x80) write$tcp_mem(r2, &(0x7f00000003c0)={0xff, 0x2d, 0x0, 0x3a, 0x1, 0x2c}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) getpeername$packet(r2, 0x0, &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x0, 0x0}, 0x10) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r5, 0x402, 0x8000002d) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000000)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000080)='B', 0x1}], 0x1}}], 0x1, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x9}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x4) sendmmsg(r6, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)='&', 0x1}], 0x1}}], 0x1, 0x1000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xffff, 0xdd, &(0x7f0000000440)=""/221, 0x40f00, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x10, 0x80000001}, 0x94) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48840}, 0x20040080) read$FUSE(r3, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(0xffffffffffffffff, &(0x7f0000000380)={0x18, 0x0, r7}, 0x18) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1/file0\x00', 0x1e5003, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 34m57.388012067s ago: executing program 1 (id=949): socket$inet(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) fadvise64(r3, 0x2, 0x0, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x10, 0x0) 34m55.040050429s ago: executing program 1 (id=953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) preadv2(r0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0x0, 0xffffffff, 0x10) 34m39.404003437s ago: executing program 32 (id=953): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) preadv2(r0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2, 0x0, 0xffffffff, 0x10) 26m31.99880365s ago: executing program 0 (id=1715): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7}]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 26m30.119184457s ago: executing program 0 (id=1720): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8fffb) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x0, 0x6}}, 0x20) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 26m29.341715524s ago: executing program 0 (id=1722): write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000286000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000b26000/0x1000)=nil) socket$nl_generic(0x10, 0x3, 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) dup(0xffffffffffffffff) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) 26m28.224737564s ago: executing program 0 (id=1723): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x30, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x80000001}}, 0xb8}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000280), 0x105, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r0, &(0x7f0000000000), &(0x7f0000000000)=""/95}, 0x20) 26m28.020067011s ago: executing program 0 (id=1724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000020c0)=0x15) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f00000000c0)=[{0x17f, 0x81, 0x6, 0xfffff010}, {0x20, 0x0, 0x1, 0x7}, {0x3, 0x6, 0x10}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40), 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000002140)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCVHANGUP(r4, 0x5437, 0x200000000000000) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x804, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 26m26.763760566s ago: executing program 0 (id=1727): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8000aaaaaabb86dd6a"], 0x0) socket$packet(0x11, 0x2, 0x300) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x300, 0x0, 0x300, 0x320, 0x0, 0x6, 0x0, 0x1, {0xa, 0xff, 0x1}, {0x8000, 0x4}, {0x200, 0x5, 0x1}, {0x9, 0xd, 0x1}, 0x1, 0x80, 0x6, 0xa8000000, 0x0, 0x8, 0xfffff87e, 0x4, 0xb63, 0x2, 0x7, 0x4, 0x36, 0x0, 0x3, 0xb}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6fe82fc4e364653d3030b030303030303030302030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x1}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x62800, 0x4b) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 26m11.226435218s ago: executing program 33 (id=1727): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa8000aaaaaabb86dd6a"], 0x0) socket$packet(0x11, 0x2, 0x300) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7}]}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0x300, 0x0, 0x300, 0x320, 0x0, 0x6, 0x0, 0x1, {0xa, 0xff, 0x1}, {0x8000, 0x4}, {0x200, 0x5, 0x1}, {0x9, 0xd, 0x1}, 0x1, 0x80, 0x6, 0xa8000000, 0x0, 0x8, 0xfffff87e, 0x4, 0xb63, 0x2, 0x7, 0x4, 0x36, 0x0, 0x3, 0xb}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESHEX=r3, @ANYBLOB="2c726f6f746d6fe82fc4e364653d3030b030303030303030302030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x8001, 0x0, 0x0, 0x1}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x62800, 0x4b) syz_fuse_handle_req(r3, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 23m39.780510453s ago: executing program 2 (id=2038): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000000014000180080001000000000008000200e00000020800074000af3fe27e59a5000000140018800800024000000000080001400000000094c24caaf4898a078af711248b"], 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x4000}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4800) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x8de, 0x9, 0x36314752, 0x6, 0x3, [{0x1fb, 0x6}, {0xc00}, {0x7, 0x5de3}, {0x11, 0x9}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x9, 0xa}, {0x4, 0x80000017}], 0x7b, 0x3, 0x7, 0x1, 0x4}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = socket$inet6(0xa, 0x805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f00000000c0), 0x2, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000180), 0x12) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x94) socket$kcm(0x2, 0xa, 0x2) 23m39.195270184s ago: executing program 2 (id=2041): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x23}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) timer_create(0x3, 0x0, &(0x7f0000000080)=0x0) timer_gettime(r2, &(0x7f00000000c0)) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) 23m37.801889123s ago: executing program 2 (id=2044): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000040), 0xff, 0x57b, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2c8) fallocate(r0, 0x0, 0xeffb, 0xe396) r1 = open(0x0, 0x66842, 0x21) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 23m36.79267612s ago: executing program 2 (id=2047): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x818884, &(0x7f0000000480)=ANY=[@ANYBLOB='keep_last_dots,sys_tz,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',errors=continue,umask=00000000000000000000013,namecase=1,discard,time_offset=0x0000000000000008,discard,discard,iocharset=maccenteuro,utf8,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x81, 0x1534, &(0x7f0000000e40)="$eJzs3AucTtX6OPDnWWvtMSS9TXIZ1lrP5k0uiyTJJUkuSZIkSW4JSZMcSUgMuSUNSUguQ3IZQnKZmDTu9/slIUmaJAnJLVn/z8T8nU6d/znnd/odv/9vnu/nsz+znnftZ+2153nf/e6933fmu67DajWpXb0REcG/BS/9SASAWAAYBADXAUAAAOXjysdl9ueUmPjvbYT9uR5JudozYFcT1z974/pnb1z/7I3rn71x/bM3rn/2xvXP3rj+jGVnW2YUvJ6X7Lvw/f/sjN///xfJKD3uq3Wlb+wGEPPPpnD9//+H/0Yu1/9/reCfWYnrn71x/bOr2Ks9AfY/AL/+s4Mcf7eH65+9cf0Zy86y7gOfzlfw+li4+vej/9MLRLL3ZyBX+/nHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyx7OOuvUACQ1b7a82KMMcYYY4wxxtifx+e42jNgjDHGGGOMMcbYfz8EARIUBBADOSAWckIuEAAxWf3XQxzcAHnhRsgH+aEAFIR4KASFQYMBCwQhFIGiEIWboBjcDMWhBJSEUuCgNJSBW6As3Arl4DYoD7dDBbgDKkIlqAxV4E6oCndBNbgbqsM9UANqQi2oDfdCHbgP6sL9UA8egPrwIDSAh6AhPAyN4BFoDI9CE3gMmsLj0AyaQwtoCa3+S/kvQU94GXpBb0iEPtAXXoF+0B8GwEAYBK/CYHgNhsDrkARDYRi8AcPhTRgBb8FIGAWj4W0YA+/AWBgH42ECJMNEmATvwmR4D6bAVJgG0yEFZsBMeB9mwWyYAx/AXPgQ5sF8WAALIRU+gkWwGNLgY1gCn0A6LIVlsBxWwEpYBathDayFdbAeNsBG2ASbYQtshW2wHXbATtgFn8Ju+Az2wF7YB5/DfvjiX8w/8zf53RAQUKBAhQpjMAZzQizmwlyYG3NjHsyDEYxgHMZhXsyL+TAfFsACGI/xWBgLo0GDhIRFsAhGMYrFsBgWx+JYEkuiQ4dlsAyWxVuxHJbD8lgeK2AFrIiVsBJWwSpYFatiNayG1bE61sAaWAtr4b14L/bBulgX62E9rI/1s25PYSNshI2xMTbBJtgUm2IzbIYtsAW2wlbYGltjG2yD7bAdtsf22AE7YAImYEfsiJ2wE3bGztgFu2BX7IrdsDt2z3gpB+DL+DL2xhqiD/bFvtgPk3IMwIE4EF/FwfgavoavYxIOxWH4Br6Bb+IIPI0jcRSOxtFYVbyDY3EckpiAyZiMk3ASTsbJOAWn4lScjik4A2fiTJyFs3E2foBz8UP8EOfjfFyIqZiKi3AxpmEaLsEzmI5LcRkuxxW4ElfgalyDq3Edrsd1uBE34mbcjFtxK27H7bgTd+KnqADwM9yLezEJ9+N+PIAH8CAexEN4CDMwAw/jYTyCR/AoHsVjeAyP4wk8iSfwFJ7C03gGz+JZPI/n8QK+EP9N409LrE0CkUkJJWJEjIgVsSKXyCVyi9wij8gjIiIi4kScyCvyinwinyggCoh4ES8Ki8LCCCNIhJlHChEVUVFMFBPFRXFRUpQUTjhRRpQRZUVZUU6UE+XF7aKCuENUFJVEW1dFVBFVRTtXTdwtqovqooaoKWqJ2qK2qCPqiLqirqgn6on6or5oIB4SDUUfHICPiMzKNBFDsakYhs1EcyEvH6FaixHYRrQV7cRTYhSOxA6itUsQz4qOYix2En8R4/B50UVMwK7iRdFNdBc9xEuip2jjeoneYgr2EX3FdOwn+osBYqCYhTXFBzg3Zy3xukgSQ8Uw8YZYiG+KEeItMVKMEqPF22KMeEeMFePEeDFBJIuJYpJ4V0wW74kpYqqYJqaLFDFDzBTvi1litpgjPhBzxYdinpgvFoiFIlV8JBaJxSJNfCyWiE9EulgqlonlYoVYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH2Cl2iU/FbvGZ2CP2in3ic7FffCEOiC/FQfGVOCS+FhniG3FYfCuOiO/EUfG9OCZ+EMfFCXFS/ChOiZ/EaXFGnBXnxHnxs7ggfhEXhRcgUQoppZKBjJE5ZKzMKXPJa2RuGWQd/2WcvEHmlTfKfDK/LCALynhZSBaWWhppJclQFpFFZVTeJIvJm2VxWUKWlKWkk6VlGXmLLCtvleXkbbK8vF1WkHfIirKSrCyryDtlVXmXhMilbdSQNWUtWVveKxPhPllX3i/ryQdkffmgbCAfkg3lw7KRfEQ2lo/KJvIx2VQ+LpvJ5rKFbClbySdka/mkbCPbynbyKdlePi07yGdkgnxWdpT+8lPkedlFviC7yhdlN9ld9pC/yIvSy16yt4Q+IPvKV2Q/2V8OkAPlIPmqHCxfk0Pk6zJJDpXD5BtyuHxTjpBvyZFylBwt35Zj5DtyrBwnx8sJMllOlJPku3KyfE9OkVPlNDldpsgZcsDlkeZI+Q/z3/2D/CG/bn2z3CK3ym1yu9whd8pd8lO5W+6We+QeuU/uk/vlfnlAHpAH5UF5SB6SGTJDHpaH5RF5RB6VR+UxeUwelyfkOfmjPCV/kqflGXlGnpPn5Xl54fLvABQqoaRSKlAxKoeKVTlVLnWNyq2uVXnUdSqirldx6gaVV92o8qn8qoAqqOJVIVVYaWWUVaRCVUQVVVF1E15+wqiSqpRyqrQqo275V/JVMXWzKq5K/CY/a36Jf2d+rVQr1Vq1Vm1UG9VOtVPtVXvVQXVQCSpBdVQdVSfVSXVWnVUX1UV1VV1VN9VN9VA9VE/VU/VSvVSiSlR91Suqn+qvBqiBapB6VWTuwxA1RCWpJDVMDVPD1XA1Qo1QI9VINVqNVmPUGDVWjVXj1XiVrJLVJDVJTVaT1RQ1RU1T01SKSlEz1Uw1S81Sc9QcNVfNVfPUPLVALVCpKlUtUotUmkpTS9QSla6WqqVquVquVqqVarVardaqtWq9Wq82qo0qXW1RW9Q2tU3tUDvULrVL7Va71R61R+1T+9R+tV8dUAfUQXVQHVKHVIbKUIfVYXVEHVFH1VF1TB1Tx9VxdVKdVKfUKXVanVZn1Vl1Xp1XF9QFdVFdzDztC0QgAhWoICaICWKD2CBXkCvIHeQO8gR5gkgQCeKCuCBvcGOQL8gfFAgKBvFBoaBwoAMT2EBcLno0uCkoFtwcFA9KBCWDUoELSgdlgluCssGtQbngtqB8cHtQIbgjqBhUCioHVYI7g6rBXUG14O6genBPUCOoGdQKagf3BnWC+4K6wf1BveCBoH7wYNAgeChoGDwcNAoeCRoHjwZNgseCpsHjQbOgedAiaBm0+lPH9/50/iddL91bJ+o+uq9+RffT/fUAPVAP0q/qwfo1PUS/rpP0UD1Mv6GH6zf1CP2WHqlH6dH6bT1Gv6PH6nF6vJ6gk/VEPUm/qyfr9/QUPVVP09N1ip6hZ+r39Sw9W8/RH+i5+kM9T8/XC/RCnao/0ov0Yp2mP9ZL9Cc6XS/Vy/RyvUKv1Kv0ar1Gr9Xr9Hq9QW/Um/RmvUVv1dv0dr1D79S79Kd6t/5M79F79T79ud6vv9AH9Jf6oP5KH9Jf6wz9jT6sv9VH9Hf6qP5eH9M/6OP6hD6pf9Sn9E/6tD6jz+pz+rz+WV/Qv+iL2mee3Ge+vRtllIkxMSbWxJpcJpfJbXKbPCaPiZiIiTNxJq/Ja/KZfKaAKWDiTbwpbAqbTGTIFDFFTNRETTFTzBQ3xU1JU9I440wZU8aUNWVNOVPOlDflTQVTwVQ0FU1lU9ncae40d5m7zN3mbnOPucfUNDVNbVPb1DF1TF1T19Qz9Ux9U980MA1MQ9PQNDKNTGPT2DQxTUxT09Q0M81MC9PCtDKtTGvT2rQxbUw70860N+1NB9PBJJgE09F0NJ1MJ9PZdDZdTBfT1XQ13Uw308P0MD1NT9PL9DKJJtH0NX1NP9PPDDADzCAzyAw2g80QM8QkmSQzzAwzw81wM8KMMCPNKDM680TVvGPGmnFmvJlgkk2ymWQmmclmsplipphpZppJMSlmpplpZplZZo6ZY+aauWaemWcWmAUm1aSaRWaRSTNpZolZYtJNullmlpkVZoVZZVaZNWaNWWfWmQ2wwWwym8wWs8VsM9vMDrPD7DK7zG6z2+wxe8w+s8/sN/vNAXPAHDQHzSFzyGSYDHPYHDZHzBFz1Bw1x8wxc9wcNyfNSXPKnDKnzWlz1pw1503+y++X3sTanDaXvcbmttfaPPY6+7dxAVvQxttCtrDVNp/N/5vYWGuL2xK2pC1lnS1ty9hbfhdXtJVsZVvF3mmr2rtstd/Fdex9tq6939azD9ja9t7fxPXtg7aBfcw2RASwzW1j29I2sY/ZpvZx28w2ty1sS9vePm072Gdsgn3WdrTP/S5eZBfbNXatXWfX2z12rz1rz9kj9jt73v5se9nedpB91Q62r9kh9nWbZIf+Lh5t37Zj7Dt2rB1nx9sJv4un2ek2xc6wM+37dpad/bs41X5k59o0O8/Otwvswl/jzDml2Y/tEvuJTbcBLLPL7Qq70q6yq//vXJfbjXaT3Wx328/sNrvd7rA77a6sE2G71+6zn9v99gt72H5rD9qv7CF71GbYb36NM/fvqP3eHrM/2OP2hD1pf7Sn7E8qKztz33+0v9iL1lsgJCBJigKKoRwUSzkpF11DuelaykPXUYSupzi6gfLSjZSP8lMBKkjxVIgKkyZDlohCKkJFKUo3Udb0SlIpclSaytAtVJZupXJ0G5Wn26kC3UEVqRJVpip0J1Wlu6ga3U3V6R6qQTWpFtWme6kO3Ud16X6qRw9QfXqQGtBD1JAepkb0CDWmR6kJPUZN6XFqRs2pBbWkVvQEtaYnqQ21pXb0FLWnp6kDPUMJ9Cx1pOeoE/2FOtPz1IVeoK70InWj7tSDXqKe9DL1ot6USH2oL71C/ag/DaCBNIhepcH0Gg2h1ymJhtIweoOG05s0gt6ikTSKRtPbNIbeobE0jsbTBEqmiTSJ3qXJ9B5Noak0jaZTCs2gmfQ+zaLZNIc+oLn0Ic2j+bSAFlIqfUSLaDGl0ce0hD6hdFpKy2g5raCVtIpW0xpaS+toPW2gjbSJNtMW2krbaDvtoJ20iz6l3fQZ7aG9tI8+p/30BR2gL+kgfUWH6GvKoG/oMH1LR+g7Okrf+970Ax2nE3SSfqRT9BOdpjN0ls7RefqZLtAvdJE8QYihCGWowiCMCXOEsWHOMFd4TZg7vDbME14XRsLrw7jwhjBveGOYL8wfFggLhvFhobBwqEMT2pDCMCwSFg2j4U1hsfDmsHhYIiwZlgpdWDosE94Slg1vDcuFt4Xlw9vDCuEdYcWwUvjYA1XCO8Oq4V1htfDusHp4T1gjrBnWCmuH94Z1wvvCuuH9Yb3wgbBc+GDYIHwobBg+HDYKHwkbh4+GTcLHwqbh42GzsHnYImwZtgqfCFuHT4ZtwrZhu/CasH34dNghfCZMCJ8NO4bP/dr/4OKs/qd+158Y9gn7hq+Er4Te3y8XRBdGU6MfRRdFF0fToh9Hl0Q/iaZHl0aXRZdHV0RXRldFV0fXRNdG10XXRzdEN0Y3RTdHva+dAxw64aRTLnAxLoeLdTldLneNy+2udXncdS7irndx7gaX193o8rn8roAr6OJdIVfYaWecdeRCV8QVdVF3kyvmbnbFXQlX0pVyzpV2ZVxL18q1cq3dk66Na+vauafcU+5p97R7xj3jnnUd3XOuk/uL6+yed13cC+4F96Lr5rq7Hu4l19NNzHPpNZno+rq+rp/r5wa4AW6QG+QGu8FuiBviklySG+aGueFuuBvhRriRbqQb7Ua7MW6MG+vGuvFuvEt2yW6Sm+Qmu8luipviprlpLsWluJluppvlZrmqsy9tZZ6b5xa4BS7VpbpFLvOcMc0tcUtcukt3y9wyt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfD7XC73C632+12e/x1lwZ1+90Bd8AddAfdIfe1y3DfuMPuW3fEfeeOuu/dMfeDO+5OuJPuR3fK/eROuzPurDvnzruf3QX3i7vovEuOTIxMirwbmRx5LzIlMjUyLTI9khKZEZkZeT8yKzI7MifyQWRu5MPIvMj8yILIwkhq5KPIosjiSFrk48iSyCeR9MjSyLLI8siKyMqI94W2hb6IL+qj/iZfzN/si/sSvqQv5Z0v7cv4W3xZf6sv52/z5f3tvoK/w1f0lXxl/7hv5pv7Fr6lb+Wf8K39k76Nb+vb+ad8e/+07+Cf8Qn+Wd/RP+c7+b/4zv5538W/4Lv6F30339338C/5nv5l38v39om+j+/rX/H9fH8/wA/0g/yrfrB/zQ/xr/skP9QP82/44f5NP8K/5Uf6UX50zNt+TNYlMkzwyX6in+Tf9ZP9e36Kn+qn+ek+xc/wM/37fpaf7ef4D/xc/6Gf5+f7BX6hT/Uf+UV+sU/zH/sl/hOf7pdm3TT2q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/x2v8Pv9Lv8p363/8zv8Xv9Pv+53++/8Af8l/6g/8of8l/7DP+NP+y/9Uf8d/6o/94f8z/44/6EP+l/9Kf8T/60P+PP+nP+vP/ZX/C/+Iv8N2uMMcYYY/+UiVea4rc9l27n9/mDHPFXK/cFgGu3F8z46/7MM8oN+S61+4v49hEAeLZ310eylho1EhMTL6+bLiEoOh8g65OgTL9+9eByvBTawdOQAG2h7B/Ov7/ofp7+wfjR2wFy/VVOLFyJr4z/JQAm/sH4Tzw1elGF8Gzc/2P8+QDFi17JyQlX4qXQ7tf7K22h3N+Zf/7W/2D+Ob9KBmjzVzm54Up8Zf5l4El4DhJ+syZjjDHGGGOMMXZJf1G5c9b1Z9Y3Pv/o+jxeXcnJAVfif3R9zhhjjDHGGGOMsavv+e49nnkiIaFt53+9Ue2/lPVPN5rCf9fI3PjDhvcAWY8oAPg3BwTIbMj/5F5s/Y9sK+nyS+dvu1ac8wH8zyjln9G4ygcmxhhjjDHG2J/uykn/bx9XV2tCjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZYNvSf+HdiV3sfGWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsavt/wQAAP//pkz/nw==") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x189800, 0x9b) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000000c0)) 23m35.976115948s ago: executing program 2 (id=2051): r0 = socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x200a809, &(0x7f0000000000)=ANY=[], 0x1, 0x1a6, &(0x7f0000000600)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000050e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001240)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0xc, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x28}, @private0, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xff000000, 0xff000000], 'veth1_to_batadv\x00', 'bridge0\x00', {}, {}, 0x0, 0x0, 0x5, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0xd86, 0x6, 0x4, 0x0, 'syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x7fff, 0x8, 0x1ff, 'syz1\x00', 'syz1\x00', {0x4ef0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) 23m34.876154157s ago: executing program 2 (id=2054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socketpair(0x1, 0x2f40742f921817ae, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x4, 0x1, 0x7043}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}, {0x0}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYBLOB="d50633008000009effffffff"], 0x6f4}}, 0x0) 23m34.398991585s ago: executing program 34 (id=2054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) socketpair(0x1, 0x2f40742f921817ae, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x4, 0x1, 0x7043}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280), 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}, {0x0}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB, @ANYBLOB="d50633008000009effffffff"], 0x6f4}}, 0x0) 18.249603565s ago: executing program 5 (id=4671): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122442) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x34}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 16.867951293s ago: executing program 4 (id=4672): timer_create(0x3, 0x0, &(0x7f0000044000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x1324, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x12e0, 0x3, 0x0, 0x1, [{0xfb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xf6c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0xf04, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x41, 0x6, 0x1, 0x0, "e8145528aaee1a7735047af43de6230727f36f1baf9c6e90d611ffd73b368c9c8f3cabc8be7d0aed6593a6541020b2227f60b7b1f2083d884b5274833d"}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "8c2f5bcb7a74b035183f3e1f78381fa0482beb4a05569596ecbe86abf55bfccfb81a73a6f80dd59701"}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}]}, {0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x43, 0x1, "90017b0006fd60f962c07ac970ecc35a323c43623fe1174c4bace1fcb5dac545dad1f6781bacd5548b9962d83fc3c49c3c2e24d7958f39056b6e57c814b66a"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x83, 0x1, "d593e3882daa008634636ff1a96e4b9c120dc4c1a61e9a0c3f1937268df6f02a8fe12750636f35a53930c2d7c50798d203d01f115264e3f3b06c0a9cb4c00e01a78004b025d5c10c71ed0f9039975572c61b9e6e367541230891d4139dff87517f2e481081b772881cef9be505a81cbb62e20eb481e7891919658f8404ca8a"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xbf}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1388}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)=ANY=[@ANYBLOB="6400000043000701fefffffffcdbdf25027c0000040045804c0001804500f3804d6162970056486ad90a0246c5165918226c866b5293728dc5ee01e07823881f0c272b3301cc958ee776688d2b276c1c7f5cdf30e827f21e"], 0x64}}, 0xc000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x2, 0x7) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x10000, 0x8, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f00000001c0)={0x0, r6}) fcntl$getownex(r5, 0x10, &(0x7f00000003c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0) 15.955549565s ago: executing program 5 (id=4673): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x2, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000001340)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003548000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r8, 0x8b2c, &(0x7f0000000040)) 14.340093061s ago: executing program 4 (id=4676): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$char_usb(0xc, 0xb4, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 14.339604331s ago: executing program 6 (id=4677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x40000010) 13.185981231s ago: executing program 6 (id=4679): fanotify_init(0x4, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000"], 0x64}}, 0x0) r4 = add_key(&(0x7f0000003300)='cifs.spnego\x00', &(0x7f0000003340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r6, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r7, r6, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000040)={0x18, r6}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000d00)={0x2d8, r8, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x979e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x89d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46ba}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9000}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffffb}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa9fb}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9cf}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xaca}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfe71}, @TIPC_NLA_PUBL_TYPE={0x8}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x21}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x20004004}, 0x80) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f00000000c0)={0x28, 0x1, 0x0, r6, 0x0, 0x0, 0x0, 0x81, &(0x7f0000000400)="830c509e70841c83d438df92f0e8b9ea667426af83c9e0f6a33a8ebe6be8917c983515943a6685be68077c8537e697e648f8eaaa61453a9b554ebb0ef87049a9c6f9124ebccbdd2395e3a6089afa99bdacdbb1fcdd9421a7b15626779aaf43630c0653362af6080678cb7a8e5c99b7fced8195a1f6836b7f30c235b402dea1672c"}) socket$nl_netfilter(0x10, 0x3, 0xc) 12.150445657s ago: executing program 6 (id=4680): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @private1, 0x3dd}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4004, &(0x7f0000000840)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}], [{@euid_gt}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x63, 0x38, 0x66, 0x30, 0x32, 0x63], 0x2d, [0x62, 0x33, 0x36, 0x35], 0x2d, [0x6c, 0x61, 0x31, 0x38], 0x2d, [0x36, 0x35, 0x30, 0x30], 0x2d, [0x62, 0x6, 0x63, 0x30, 0x34, 0x34, 0x34, 0x37]}}}]}, 0x0, 0x260, &(0x7f0000000bc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fchmod(0xffffffffffffffff, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000040)={[{@orlov}, {@norecovery}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@resuid}]}, 0x0, 0x617, &(0x7f0000001100)="$eJzs3c9vVNUeAPDvnf6kfe9NIS/viQtpYgwkSksLGGJMhD0h+GPnqtJCkEIJrdEiiSXBjYlx48LElQvxv1ASt/4DLty4MiTEGBZiiIy5M3PL7XSmP6admTLz+SRXz7mXOefcyXz7vXPm3JkAetZ4+p9CxMGIuJ5EFHPH+qN6cLzy7x7+cetCuiVRKr39exK3PklW8m0l1f+PVh/8dzGSdOeBvvX9Li7fvDIzPz93o1qfXLp6fXJx+ebRy1dnLs1dmrs2/er0qZMnTp6aOraj8yvkymfvvP9h8bNz73779eNk6rtfziVxOp5Ux5aeV+1jh3bUc/qcjUep4lF+f/q8ntph23vFn8XsdfJUUrsj0y0n3UUuVl+PAxHx/yhGX+5VX4xP3+zo4ICWKiWrObIE9JqkqcAf3v2BAG2WXQdk7+3rvQ9er9DKSxKgTR6cqUwAVGJ/ICKy+O+vzA3GcHluYORhsmaeJ4mInc3MVaR9/PTjuTvpFg3m4YDWWLmdzffV5v+kHJtjMVyujTwsrIn/Qm5L97/VZP+VvzFP5xzFP7TPyu2IeK6a/wdjW/E/nov/9+q2vvknaOM1dfEPAAAAAAAAzbt3JiJeqbf+r7C6/mewzvqf0Yg4vQv9b/75X+F+tZDsQndAzoMzEa/XXf+7usZ3rK9a+3d5PcBAcvHy/NyxiPhPRByJgaG0PlXTbn6F8NHPD3zVqP/8+r90S/vP1gJWW7rfX7OMYHZmaWan5w1EPLgd8Xx5/e+h6p6163/S/J/Uyf9pfF/fYh8HXrp7vtGxzeMfaJXSNxGH6+b/p5fbycbfzzFZvh6YzK4K1nvh4y++b9S/+IfOSfP/yMbxP5Tkv69ncXvtD0bE8eX+UqPjzV7/Dybv9GXtpz6aWVq6MRUxmJxdv396e2OGbpXFQxYvafwfeXHj+b/V6/9cHO6LiJUt9vm/J6O/Njom/0PnpPE/u3H+H1ub/7dfmL479kOj/s9vKf+fKOf0I9U95v8gb/33cWw1QDsyXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4xhUi4l+RFCZWy4XCxETEaET8N0YK8wuLSy9fXPjg2mx6rPz7/4Xsl36LlXqS/f7/WK4+XVM/HhH7I+LLvn3l+sSFhfnZTp88AAAAAAAAAAAAAAAAAAAA7BGj5Xv+S0O19/+nfuvr9OiAVkpjPvqrFfEOvae/6UeWhnZ1IEDbNR//wLOucfzXpveBlo8FaK/G8f/ocamsrcMB2sj1P/SuJuPfxwXQBeR/6FVbnNMbbvU4gE6Q/wEAAAAAoKvsP3Tv5yQiVl7bV95Sg9VjFvtDdyt0egBAx1jDC72rf6HTIwA6xXt8IFkt/VX3Zv/Gq/+T1gwIAAAAAAAAAAAAAFjn8EH3/0Ov2vj+f2v7oZttcP9/veD3dQHQRRr/9IfcD93Oe3zoaaXiFrK9+/8BAAAAAAAAAAAAYA8YvnllZn5+7sbi8rNXeGPXW85uh27h4Fdm9sJTt7uFJ61peSAi9sYJtrsw2PrX4WaFDv5NAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1vgnAAD//48wHak=") chmod(&(0x7f0000000380)='./file1\x00', 0x122) truncate(0x0, 0x2fffffd) sendfile(r0, r1, 0x0, 0xe3aa6e6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) 10.607899401s ago: executing program 6 (id=4682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x26, 0x0, &(0x7f0000000600)="56ad340dbe3163a6b5c4bc4cb3f6da3913b520da900c31578b9abc02cb6faec78f78c4e41f32"}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r5, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40110) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 9.919874585s ago: executing program 5 (id=4685): syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2281) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) recvfrom$inet6(r1, 0x0, 0x0, 0x40000102, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r1) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x8042, 0x0) sendfile(r5, r5, 0x0, 0xb) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000340)={0x0, 0x0, 0x400000001ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x109, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8.857174862s ago: executing program 4 (id=4687): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) socket$inet_mptcp(0x2, 0x1, 0x106) 7.995439102s ago: executing program 5 (id=4688): syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') epoll_create1(0x0) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 7.932035524s ago: executing program 3 (id=4689): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresgid(0x0, 0x0, &(0x7f00000016c0)) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000380), 0x4) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x4f]}, 0x75) getpid() r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r5}) shutdown(0xffffffffffffffff, 0x1) poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x84}], 0x1, 0x3ff) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ec0)={0xffffffffffffffff, 0x0, 0x8c, 0x40, &(0x7f0000000c80)="79942462c3b37221a855b2b9c8cde656d88bb7dc39135547012c492b2906abf6c7f1685684a54217d2d6cdab07a8aceffee5e9226d781658ed4b97088e8bb86c43fc7954496490fdd08cc6664a93738772a36dabe05151b591a9f4bf5369c45704902d789783f43151d89f9c02e94487ed9a062297f71d6fbe830fae7b78b71b7046ab34d34592e948000379", &(0x7f00000000c0)=""/64, 0x2, 0x0, 0x9f, 0xa3, &(0x7f0000000d40)="7ee7f5e39c710edde2285551c59826165268836379d2a28004666038f194f4424fb29908ab63000ed7aa045aa6dabefd3cb2a2478c7336312865722a9b7f8c143ffd27caa8f6e2f1fae634dfd3fef7a0a40878a3b9c3091299c47021d8ebed2f1f3cd541f4ade2c1b921172416b2bead623cf39774918911340fc3982343ce2125a43e43c75124eaac6e15e47ac33ff68cd68580fdb6a178e3277c798b4082", &(0x7f0000000e00)="0c14015393a3087754153efde967331d788649944f6a4e251a124b5ffaf947e02328fccab967510ac660dec8369b02c6475b7c9c6ae7b77f9d2187a01c9b4b58645917013315e266e6e4076c7ed787a1e7ec9a624e150f85900bc9ea37bebc635c8120712bc844b3957817b9f522e1b8744e9733ccd70aedec0e72feeaa3d8601032c4afcc34141ae12ab3ed0a828e6ceaf9162ed65cd58434b0bb43318d08330ceb66", 0x6, 0x0, 0x6}, 0x50) listen(0xffffffffffffffff, 0xda90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4811}, 0x4008094) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 5.717435311s ago: executing program 5 (id=4690): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @private1, 0x3dd}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4004, &(0x7f0000000840)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}], [{@euid_gt}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x63, 0x38, 0x66, 0x30, 0x32, 0x63], 0x2d, [0x62, 0x33, 0x36, 0x35], 0x2d, [0x6c, 0x61, 0x31, 0x38], 0x2d, [0x36, 0x35, 0x30, 0x30], 0x2d, [0x62, 0x6, 0x63, 0x30, 0x34, 0x34, 0x34, 0x37]}}}]}, 0x0, 0x260, &(0x7f0000000bc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fchmod(0xffffffffffffffff, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000040)={[{@orlov}, {@norecovery}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@resuid}]}, 0x0, 0x617, &(0x7f0000001100)="$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") chmod(&(0x7f0000000380)='./file1\x00', 0x122) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r1, 0x0, 0xe3aa6e6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) 5.717104791s ago: executing program 3 (id=4691): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x34}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 5.315528885s ago: executing program 6 (id=4692): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x2, 0x4, &(0x7f0000000240)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000001340)='GPL\x00'}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) 3.375461013s ago: executing program 5 (id=4693): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x2, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000001340)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000001600), 0x4) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f000000e000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="440f78bdb20000003e64460f78b49d0060000065400f841b000000650fc77674dd0166baf80cb85cb2f38cefb800000000efc442a3f5f0c44105d3a100400000b9800000c00f3235000100000f3066baf80cb84a88638aef66bafc0cb017ee", 0x5f}], 0x1, 0x30, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xf000}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003548000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a5f2000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe00"}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r8, 0x8b2c, &(0x7f0000000040)) 3.374876212s ago: executing program 3 (id=4694): timer_create(0x3, 0x0, &(0x7f0000044000)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, @NFT_MSG_NEWSETELEM={0x1324, 0xc, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x12e0, 0x3, 0x0, 0x1, [{0xfb4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xf6c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFTA_DATA_VALUE={0xf04, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x41, 0x6, 0x1, 0x0, "e8145528aaee1a7735047af43de6230727f36f1baf9c6e90d611ffd73b368c9c8f3cabc8be7d0aed6593a6541020b2227f60b7b1f2083d884b5274833d"}]}, {0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_USERDATA={0x2d, 0x6, 0x1, 0x0, "8c2f5bcb7a74b035183f3e1f78381fa0482beb4a05569596ecbe86abf55bfccfb81a73a6f80dd59701"}]}, {0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @log={{0x8}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}]}, {0x1c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x43, 0x1, "90017b0006fd60f962c07ac970ecc35a323c43623fe1174c4bace1fcb5dac545dad1f6781bacd5548b9962d83fc3c49c3c2e24d7958f39056b6e57c814b66a"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x83, 0x1, "d593e3882daa008634636ff1a96e4b9c120dc4c1a61e9a0c3f1937268df6f02a8fe12750636f35a53930c2d7c50798d203d01f115264e3f3b06c0a9cb4c00e01a78004b025d5c10c71ed0f9039975572c61b9e6e367541230891d4139dff87517f2e481081b772881cef9be505a81cbb62e20eb481e7891919658f8404ca8a"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x6c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7fffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xff}, @NFTA_SET_ELEM_EXPRESSIONS={0xc8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}]}}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xbf}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xf8}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @payload={{0xc}, @void}}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x4}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1388}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004080) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000006080)=ANY=[@ANYBLOB="6400000043000701fefffffffcdbdf25027c0000040045804c0001804500f3804d6162970056486ad90a0246c5165918226c866b5293728dc5ee01e07823881f0c272b3301cc958ee776688d2b276c1c7f5cdf30e827f21e"], 0x64}}, 0xc000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x2, 0x7) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000009c0)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @any, 0x0, 0x1, 0x9, 0xfffffffffffffffd, 0x10000, 0x8, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpgid(0x0) fcntl$setownex(r5, 0xf, &(0x7f00000001c0)={0x0, r6}) fcntl$getownex(r5, 0x10, &(0x7f00000003c0)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}], 0x0) 3.252429447s ago: executing program 6 (id=4695): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$char_usb(0xc, 0xb4, 0x1) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 2.183948214s ago: executing program 3 (id=4696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x32, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x698, 0x5, 0x360, 0x0, 0x228, 0xffffffff, 0x2e8, 0x3d0, 0x478, 0x478, 0xffffffff, 0x478, 0x478, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8, 0x48}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2f, @rand_addr=0x64010100, @empty, @gre_key=0x1, @icmp_id=0x67}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "89ce", 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x16, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@private1, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @rand_addr, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000009c0)={0xc8, 0x0, 0xa00, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "9af2467f9357f0ee7dd1a3629a"}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x7, 0x4, "5c3aa4"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "69c477953d"}]}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY={0x5c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0x12, 0x4, "c4523aa2aa3e7617cc981c930552"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7755be5d4f957b89da74f681a1"}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x3e6fa10af027f2a4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4c014}, 0x1) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b70300000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00200000b5080000010000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf91000000000000b5020000000000002800000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004}, 0x94) write$rfkill(r7, &(0x7f0000000340)={0x6, 0x2, 0x3, 0x0, 0x1}, 0x8) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040003000000fbdbdf253d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x20000814) 1.059654993s ago: executing program 4 (id=4697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x2, 0x6}, 0x64}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cd", 0x37}], 0x1}, 0x8bb3a321ef809a) 559.989771ms ago: executing program 4 (id=4698): pselect6(0x40, &(0x7f0000000340)={0x0, 0x0, 0x400000001ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x109, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 515.887352ms ago: executing program 3 (id=4699): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) 323.528849ms ago: executing program 4 (id=4700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x26, 0x0, &(0x7f0000000600)="56ad340dbe3163a6b5c4bc4cb3f6da3913b520da900c31578b9abc02cb6faec78f78c4e41f32"}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r5, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40110) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 0s ago: executing program 3 (id=4701): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x20) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @private1, 0x3dd}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4004, &(0x7f0000000840)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}], [{@euid_gt}, {@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x63, 0x38, 0x66, 0x30, 0x32, 0x63], 0x2d, [0x62, 0x33, 0x36, 0x35], 0x2d, [0x6c, 0x61, 0x31, 0x38], 0x2d, [0x36, 0x35, 0x30, 0x30], 0x2d, [0x62, 0x6, 0x63, 0x30, 0x34, 0x34, 0x34, 0x37]}}}]}, 0x0, 0x260, &(0x7f0000000bc0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fchmod(0xffffffffffffffff, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000040)={[{@orlov}, {@norecovery}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@resuid}]}, 0x0, 0x617, &(0x7f0000001100)="$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") chmod(&(0x7f0000000380)='./file1\x00', 0x122) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r1, 0x0, 0xe3aa6e6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): quested (1) [ 1887.522011][ T9768] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1887.555521][ T9768] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1887.670879][ T9768] usb 7-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1887.736594][ T9768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.814845][ T9768] usb 7-1: config 0 descriptor?? [ 1887.874477][ T9768] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1888.025708][T19198] syzkaller0: entered promiscuous mode [ 1888.755404][T13041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1889.753136][T19214] syz.5.3181: attempt to access beyond end of device [ 1889.753136][T19214] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1889.890178][T18374] usb 7-1: USB disconnect, device number 5 [ 1890.216717][T19220] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1890.225809][T19220] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1890.234600][T19220] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1890.243398][T19220] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1890.287541][T19221] ubi: mtd0 is already attached to ubi31 [ 1891.220107][T19220] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1891.229134][T19220] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1891.238112][T19220] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1891.247123][T19220] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1891.823090][T19222] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1891.832500][T19222] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1891.841289][T19222] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1891.850093][T19222] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1892.288226][T19222] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.297593][T19222] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.307480][T19222] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.316554][T19222] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1894.830422][T19235] loop4: detected capacity change from 0 to 128 [ 1895.722947][T19240] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3188'. [ 1895.958621][T19244] loop3: detected capacity change from 0 to 512 [ 1896.106026][T19244] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.3190: corrupted in-inode xattr: invalid size in ea xattr [ 1896.129642][T19244] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.3190: couldn't read orphan inode 15 (err -117) [ 1896.175437][T19244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1896.219074][T19244] EXT4-fs (loop3): shut down requested (1) [ 1897.054828][T19257] loop4: detected capacity change from 0 to 1024 [ 1897.093879][T19257] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1897.258158][T19260] ubi: mtd0 is already attached to ubi31 [ 1897.483401][T19257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1898.737965][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1899.660940][ T9485] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1899.819820][T19265] loop5: detected capacity change from 0 to 32768 [ 1899.922792][T19274] syz.3.3196: attempt to access beyond end of device [ 1899.922792][T19274] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1900.495584][T19283] loop6: detected capacity change from 0 to 128 [ 1901.540607][T19288] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1901.549719][T19288] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1901.558537][T19288] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1901.567433][T19288] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1901.639377][T19288] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1901.648414][T19288] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1901.657379][T19288] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1901.666371][T19288] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1902.725547][T19289] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1902.734556][T19289] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1902.743476][T19289] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1902.753287][T19289] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1903.002739][T19289] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1903.012056][T19289] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1903.021042][T19289] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1903.030153][T19289] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1903.585152][T19296] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3200'. [ 1907.832739][T19310] loop4: detected capacity change from 0 to 512 [ 1907.922160][T19310] EXT4-fs error (device loop4): ext4_iget_extra_inode:4732: inode #15: comm syz.4.3204: corrupted in-inode xattr: invalid size in ea xattr [ 1907.981565][T19310] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.3204: couldn't read orphan inode 15 (err -117) [ 1908.051154][T19310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1908.156309][T19310] EXT4-fs (loop4): shut down requested (1) [ 1908.720240][T19323] ubi: mtd0 is already attached to ubi31 [ 1909.961486][ T9485] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1910.241584][T19343] loop3: detected capacity change from 0 to 128 [ 1910.768927][T19347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3211'. [ 1912.117467][T19360] loop6: detected capacity change from 0 to 4096 [ 1912.293769][T19360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1912.351007][T19367] loop5: detected capacity change from 0 to 1024 [ 1912.374116][T19367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1912.376458][T19369] loop3: detected capacity change from 0 to 512 [ 1912.426602][T19369] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.3218: corrupted in-inode xattr: invalid size in ea xattr [ 1912.473379][T19371] syz.4.3216: attempt to access beyond end of device [ 1912.473379][T19371] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1912.531414][T19367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1912.549339][T19369] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.3218: couldn't read orphan inode 15 (err -117) [ 1912.570298][T19369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1912.572508][T14491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1912.614984][T19369] EXT4-fs (loop3): shut down requested (1) [ 1913.928832][T13041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1914.398025][T19387] loop6: detected capacity change from 0 to 128 [ 1914.935008][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.047243][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.025072][T19392] loop6: detected capacity change from 0 to 1024 [ 1916.033160][T19392] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1916.076697][T19392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1916.097672][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1919.152032][T19404] ubi: mtd0 is already attached to ubi31 [ 1919.540990][T14491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1920.745852][T19417] loop6: detected capacity change from 0 to 1024 [ 1920.789326][T19417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1920.889617][T19417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1921.032946][T15681] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1921.181055][T19426] loop4: detected capacity change from 0 to 4096 [ 1921.328241][T19428] loop5: detected capacity change from 0 to 128 [ 1922.438528][T15681] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1922.647039][T15681] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1922.657740][T15681] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1922.684538][T15681] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1922.732101][T15681] usb 4-1: Product: syz [ 1922.752402][T19426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1922.765468][T14491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1922.778804][T15681] usb 4-1: Manufacturer: syz [ 1922.808734][T15681] usb 4-1: SerialNumber: syz [ 1922.845255][T15681] usb 4-1: config 0 descriptor?? [ 1922.935356][T15681] usb 4-1: selecting invalid altsetting 0 [ 1923.001339][T19434] netlink: 'syz.5.3232': attribute type 4 has an invalid length. [ 1923.011598][T19434] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3232'. [ 1923.059861][ T9485] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1923.063999][T19419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.105176][T19419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.123059][T19436] loop6: detected capacity change from 0 to 512 [ 1923.434640][T19436] EXT4-fs error (device loop6): ext4_iget_extra_inode:4732: inode #15: comm syz.6.3231: corrupted in-inode xattr: invalid size in ea xattr [ 1923.505868][T19436] EXT4-fs error (device loop6): ext4_orphan_get:1403: comm syz.6.3231: couldn't read orphan inode 15 (err -117) [ 1923.684704][T19436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1923.716838][T15681] usb 4-1: USB disconnect, device number 27 [ 1923.786901][T19442] loop4: detected capacity change from 0 to 1024 [ 1923.794134][T19436] EXT4-fs (loop6): shut down requested (1) [ 1923.823288][T19442] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1924.040410][T19442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1925.265964][ T9485] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1925.953106][T19457] syz.4.3235: attempt to access beyond end of device [ 1925.953106][T19457] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1926.556245][T19460] ubi: mtd0 is already attached to ubi31 [ 1927.090997][T14491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1928.479441][T19479] loop4: detected capacity change from 0 to 128 [ 1932.553375][T19496] syz.3.3246: attempt to access beyond end of device [ 1932.553375][T19496] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1934.061486][T19509] syz.6.3247: attempt to access beyond end of device [ 1934.061486][T19509] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1934.100886][T19510] ubi: mtd0 is already attached to ubi31 [ 1934.902305][T19509] netlink: 'syz.6.3247': attribute type 2 has an invalid length. [ 1934.932125][T19509] netlink: 'syz.6.3247': attribute type 1 has an invalid length. [ 1934.992397][T19509] netlink: 'syz.6.3247': attribute type 1 has an invalid length. [ 1935.475233][T19520] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1936.569797][T19531] loop3: detected capacity change from 0 to 128 [ 1937.652054][T19541] syz.3.3257: attempt to access beyond end of device [ 1937.652054][T19541] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1938.652067][T19558] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1939.794973][T19564] syz.6.3263: attempt to access beyond end of device [ 1939.794973][T19564] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1939.811144][T19564] netlink: 'syz.6.3263': attribute type 2 has an invalid length. [ 1939.819072][T19564] netlink: 'syz.6.3263': attribute type 1 has an invalid length. [ 1939.827884][T19564] netlink: 'syz.6.3263': attribute type 1 has an invalid length. [ 1940.131836][T19567] ubi: mtd0 is already attached to ubi31 [ 1941.270267][T19574] loop5: detected capacity change from 0 to 128 [ 1943.407079][T19592] syz.5.3268: attempt to access beyond end of device [ 1943.407079][T19592] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1944.182117][T19600] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1944.991201][T19607] syz.4.3274: attempt to access beyond end of device [ 1944.991201][T19607] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1945.007021][T19607] netlink: 'syz.4.3274': attribute type 2 has an invalid length. [ 1945.015027][T19607] netlink: 'syz.4.3274': attribute type 1 has an invalid length. [ 1945.022999][T19607] netlink: 'syz.4.3274': attribute type 1 has an invalid length. [ 1947.110114][ T5839] kernel read not supported for file /dsp1 (pid: 5839 comm: kworker/1:8) [ 1947.406077][T19614] loop4: detected capacity change from 0 to 32768 [ 1947.893241][T19634] syz.3.3283: attempt to access beyond end of device [ 1947.893241][T19634] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1948.095300][T19636] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1949.389550][T19647] syz.6.3286: attempt to access beyond end of device [ 1949.389550][T19647] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1949.405971][T19647] netlink: 'syz.6.3286': attribute type 2 has an invalid length. [ 1949.414046][T19647] netlink: 'syz.6.3286': attribute type 1 has an invalid length. [ 1949.422233][T19647] netlink: 'syz.6.3286': attribute type 1 has an invalid length. [ 1952.747896][T19675] syz.3.3295: attempt to access beyond end of device [ 1952.747896][T19675] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1952.943576][T19677] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1954.530452][T19686] syz.6.3299: attempt to access beyond end of device [ 1954.530452][T19686] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1954.546862][T19686] netlink: 'syz.6.3299': attribute type 2 has an invalid length. [ 1954.554869][T19686] netlink: 'syz.6.3299': attribute type 1 has an invalid length. [ 1954.562927][T19686] netlink: 'syz.6.3299': attribute type 1 has an invalid length. [ 1956.165366][T19704] syz.4.3305: attempt to access beyond end of device [ 1956.165366][T19704] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1956.455987][T19708] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1957.630431][T19717] syz.5.3310: attempt to access beyond end of device [ 1957.630431][T19717] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1957.647719][T19717] netlink: 'syz.5.3310': attribute type 2 has an invalid length. [ 1957.655804][T19717] netlink: 'syz.5.3310': attribute type 1 has an invalid length. [ 1957.663814][T19717] netlink: 'syz.5.3310': attribute type 1 has an invalid length. [ 1959.431045][T19738] syz.4.3317: attempt to access beyond end of device [ 1959.431045][T19738] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1959.508360][T19731] loop3: detected capacity change from 0 to 4096 [ 1959.562765][T19731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1959.852751][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1960.295400][ T5810] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1961.004338][T19758] syz.6.3322: attempt to access beyond end of device [ 1961.004338][T19758] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1961.019759][T19758] netlink: 'syz.6.3322': attribute type 2 has an invalid length. [ 1961.027711][T19758] netlink: 'syz.6.3322': attribute type 1 has an invalid length. [ 1961.035582][T19758] netlink: 'syz.6.3322': attribute type 1 has an invalid length. [ 1961.650189][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1961.674663][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1961.701545][T19760] loop4: detected capacity change from 0 to 1024 [ 1961.710018][ T5810] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1961.730636][T19760] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1961.748030][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.794584][ T5810] usb 6-1: config 0 descriptor?? [ 1961.825756][T19760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1963.286449][ T9485] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1963.465902][ T5810] usbhid 6-1:0.0: can't add hid device: -71 [ 1963.480810][ T5810] usbhid: probe of 6-1:0.0 failed with error -71 [ 1963.489852][ T5810] usb 6-1: USB disconnect, device number 15 [ 1964.978100][T19779] syzkaller0: entered promiscuous mode [ 1965.092997][T19787] syz.4.3329: attempt to access beyond end of device [ 1965.092997][T19787] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1969.833026][T19807] loop3: detected capacity change from 0 to 512 [ 1969.881413][T19807] EXT4-fs error (device loop3): ext4_iget_extra_inode:4732: inode #15: comm syz.3.3333: corrupted in-inode xattr: invalid size in ea xattr [ 1969.908749][T19807] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.3333: couldn't read orphan inode 15 (err -117) [ 1969.963846][T19807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1970.126626][T19807] EXT4-fs (loop3): shut down requested (1) [ 1971.534006][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1971.580560][T19821] syz.4.3339: attempt to access beyond end of device [ 1971.580560][T19821] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1971.738201][T19825] syzkaller0: entered promiscuous mode [ 1972.362234][ T5810] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1972.567182][ T5810] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1972.579527][ T5810] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1972.591371][ T5810] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1972.606837][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1972.615573][ T5810] usb 4-1: Product: syz [ 1972.629148][ T5810] usb 4-1: Manufacturer: syz [ 1972.634270][ T5810] usb 4-1: SerialNumber: syz [ 1972.650188][ T5810] usb 4-1: config 0 descriptor?? [ 1972.664555][ T5810] usb 4-1: selecting invalid altsetting 0 [ 1972.928192][T19837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1972.940970][T19837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.673805][T19857] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1975.484282][T18537] usb 4-1: USB disconnect, device number 28 [ 1976.100297][T19867] syz.6.3354: attempt to access beyond end of device [ 1976.100297][T19867] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1976.392734][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.399234][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.347066][T19902] syz.6.3365: attempt to access beyond end of device [ 1980.347066][T19902] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1980.869166][T19910] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3368'. [ 1980.874783][T19911] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1980.886063][T19910] nbd: must specify at least one socket [ 1981.641340][T16318] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1981.655641][T16318] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1981.665866][T16318] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1981.675709][T16318] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1981.683926][T16318] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1981.693679][T16318] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1982.995522][ T3538] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1983.115215][T19932] syzkaller0: entered promiscuous mode [ 1983.171014][ T3538] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1984.472599][ T9768] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1984.610354][T16318] Bluetooth: hci3: command tx timeout [ 1984.801237][ T9768] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1984.842512][ T9768] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1984.863499][ T9768] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1984.873266][ T9768] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.896162][ T9768] usb 6-1: config 0 descriptor?? [ 1985.355221][ T9768] usbhid 6-1:0.0: can't add hid device: -71 [ 1985.361259][ T9768] usbhid: probe of 6-1:0.0 failed with error -71 [ 1985.382358][ T9768] usb 6-1: USB disconnect, device number 16 [ 1986.854671][T16318] Bluetooth: hci3: command tx timeout [ 1987.471034][T19964] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1989.331966][T16318] Bluetooth: hci3: command tx timeout [ 1990.193352][ T3538] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.448010][ T3538] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1991.075937][T19986] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1991.085137][T19986] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1991.094014][T19986] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1991.103333][T19986] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1991.402648][T16318] Bluetooth: hci3: command tx timeout [ 1991.432726][T19986] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1991.441940][T19986] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1991.451032][T19986] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1991.460387][T19986] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1993.327674][T19987] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1993.336672][T19987] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1993.345593][T19987] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1993.354420][T19987] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1993.368342][T19987] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1993.378435][T19987] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1993.388225][T19987] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1993.397474][T19987] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1993.531889][T19919] chnl_net:caif_netlink_parms(): no params data found [ 1993.786004][T19919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1993.798967][T19919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1993.810066][T19919] bridge_slave_0: entered allmulticast mode [ 1993.829623][T19919] bridge_slave_0: entered promiscuous mode [ 1993.849667][T19919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1993.858842][T19919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1993.871486][T19919] bridge_slave_1: entered allmulticast mode [ 1993.880890][T19919] bridge_slave_1: entered promiscuous mode [ 1994.024383][T19919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1994.040881][T19919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1994.086892][T20007] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1994.487691][T19919] team0: Port device team_slave_0 added [ 1995.365690][T19919] team0: Port device team_slave_1 added [ 1996.322223][ T9768] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1996.397297][T20018] syzkaller0: entered promiscuous mode [ 1996.562615][ T9768] usb 4-1: Using ep0 maxpacket: 8 [ 1996.577225][ T9768] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1996.621119][ T9768] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 1996.642072][ T9768] usb 4-1: config 0 has no interface number 0 [ 1996.648257][ T9768] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1996.684966][ T9768] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1996.704780][ T9768] usb 4-1: config 0 interface 88 has no altsetting 0 [ 1996.719144][ T9768] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1996.730302][ T9768] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1996.739354][ T9768] usb 4-1: Product: syz [ 1996.744192][ T9768] usb 4-1: SerialNumber: syz [ 1996.973795][ T9768] usb 4-1: config 0 descriptor?? [ 2001.066190][T19919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2001.073835][T19919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.107129][T19919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2001.292537][ T9768] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input10 [ 2001.292612][T19919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2001.357977][T19919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.394957][T19919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2001.650437][ T9768] usb 4-1: USB disconnect, device number 29 [ 2002.527220][T20046] udevd[20046]: Error opening device "/dev/input/event4": No such file or directory [ 2002.538398][T20046] udevd[20046]: Unable to EVIOCGABS device "/dev/input/event4" [ 2002.572856][T20046] udevd[20046]: Unable to EVIOCGABS device "/dev/input/event4" [ 2002.833735][T20060] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 2003.274052][T19919] hsr_slave_0: entered promiscuous mode [ 2003.300483][T19919] hsr_slave_1: entered promiscuous mode [ 2003.362799][T19919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2003.389677][T19919] Cannot create hsr debugfs directory [ 2004.397558][ T3538] hsr_slave_0: left promiscuous mode [ 2004.409385][ T3538] hsr_slave_1: left promiscuous mode [ 2004.418426][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2004.428754][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2004.449227][ T3538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2004.467205][ T3538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2004.485260][ T3538] bridge_slave_1: left allmulticast mode [ 2004.496930][ T3538] bridge_slave_1: left promiscuous mode [ 2004.503664][ T3538] bridge0: port 2(bridge_slave_1) entered disabled state [ 2004.518048][ T3538] bridge_slave_0: left allmulticast mode [ 2004.525138][ T3538] bridge_slave_0: left promiscuous mode [ 2004.531055][ T3538] bridge0: port 1(bridge_slave_0) entered disabled state [ 2004.602177][T20081] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2004.658667][ T3538] veth1_macvtap: left promiscuous mode [ 2004.842370][T16318] Bluetooth: hci0: command tx timeout [ 2004.855074][ T3538] veth0_macvtap: left promiscuous mode [ 2004.877839][ T3538] veth1_vlan: left promiscuous mode [ 2004.885756][ T3538] veth0_vlan: left promiscuous mode [ 2006.187458][ T3538] team0 (unregistering): Port device team_slave_1 removed [ 2006.253406][ T3538] team0 (unregistering): Port device team_slave_0 removed [ 2006.335778][ T3538] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2006.454852][ T3538] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2007.790451][ T3538] .` (unregistering): (slave dummy0): Releasing backup interface [ 2007.878352][ T3538] .` (unregistering): Released all slaves [ 2008.017425][T20076] netlink: 'syz.3.3402': attribute type 4 has an invalid length. [ 2008.026949][T20076] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3402'. [ 2011.073579][T19919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2011.089476][T19919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2011.139455][T19919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2011.159276][T19919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2011.632330][T19919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2011.722684][T19919] 8021q: adding VLAN 0 to HW filter on device team0 [ 2011.777318][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 2011.784577][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2012.048703][T14346] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.055949][T14346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2012.162660][T20163] netlink: 'syz.3.3413': attribute type 4 has an invalid length. [ 2012.211959][T20163] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3413'. [ 2012.595507][T20168] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 2012.874379][T20170] fuse: Bad value for 'fd' [ 2012.903016][T19919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2012.947810][T19919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2013.230584][T20177] syzkaller1: entered promiscuous mode [ 2013.249891][T20177] syzkaller1: entered allmulticast mode [ 2014.409756][T19919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2014.442271][T15681] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 2014.645021][T15681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2014.657509][T15681] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2014.687971][T15681] usb 6-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 2014.707932][T15681] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.733923][T15681] usb 6-1: config 0 descriptor?? [ 2014.940338][T19919] veth0_vlan: entered promiscuous mode [ 2014.967742][T19919] veth1_vlan: entered promiscuous mode [ 2015.040889][T19919] veth0_macvtap: entered promiscuous mode [ 2015.059612][T19919] veth1_macvtap: entered promiscuous mode [ 2015.101267][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2015.117796][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.130863][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2015.149148][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.159917][T15681] cypress 0003:04B4:DE64.0008: item fetching failed at offset 1/3 [ 2015.164788][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2015.175251][T15681] cypress 0003:04B4:DE64.0008: parse failed [ 2015.194075][T15681] cypress: probe of 0003:04B4:DE64.0008 failed with error -22 [ 2015.195900][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.239329][T19919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2015.297981][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2015.331908][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.351925][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2015.372010][T15681] usb 6-1: USB disconnect, device number 17 [ 2015.487808][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.518616][T19919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2015.549667][T19919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.605580][T19919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2015.628854][T19919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.619946][T19919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.636293][T19919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.652864][T19919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.886530][T14346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2016.925175][T14346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2017.137530][T14346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2017.158115][T14346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2018.412834][T20238] fuse: Bad value for 'fd' [ 2022.372475][T10579] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 2024.333856][T10579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2024.351909][T10579] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2024.659437][T10579] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 2024.894399][T10579] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.952890][T10579] usb 5-1: config 0 descriptor?? [ 2025.096703][T10579] usbhid 5-1:0.0: can't add hid device: -71 [ 2025.160177][T10579] usbhid: probe of 5-1:0.0 failed with error -71 [ 2026.152945][T10579] usb 5-1: USB disconnect, device number 30 [ 2031.678794][T15681] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 2031.884389][T15681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2031.936744][T15681] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2032.018166][T15681] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 2032.035413][T15681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2032.247726][T20363] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2032.283368][T20363] warning: `syz.6.3448' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 2032.344257][T16318] Bluetooth: hci1: Dropping invalid advertising data [ 2032.361500][T16318] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2032.909419][T15681] usb 5-1: config 0 descriptor?? [ 2033.107962][T20349] loop3: detected capacity change from 0 to 32768 [ 2033.409448][T15681] cypress 0003:04B4:DE64.0009: item fetching failed at offset 2/3 [ 2034.054669][T15681] cypress 0003:04B4:DE64.0009: parse failed [ 2034.060707][T15681] cypress: probe of 0003:04B4:DE64.0009 failed with error -22 [ 2034.075611][T15681] usb 5-1: USB disconnect, device number 31 [ 2035.211047][T20393] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2036.983351][T20415] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2037.201909][ T9768] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 2037.410404][ T9768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2037.462144][ T9768] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2037.535153][ T9768] usb 4-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 2037.588936][ T9768] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.689316][ T9768] usb 4-1: config 0 descriptor?? [ 2037.838312][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.948264][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.180158][T20404] loop6: detected capacity change from 0 to 32768 [ 2038.378101][ T9768] cypress 0003:04B4:DE64.000A: item fetching failed at offset 2/3 [ 2038.390600][ T9768] cypress 0003:04B4:DE64.000A: parse failed [ 2038.402248][ T9768] cypress: probe of 0003:04B4:DE64.000A failed with error -22 [ 2038.591034][ T9768] usb 4-1: USB disconnect, device number 30 [ 2039.052114][T20436] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2040.558747][T20444] loop5: detected capacity change from 0 to 1024 [ 2040.572156][T20444] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2040.683184][T20444] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2040.825196][T13041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2041.583316][T20467] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 2042.942120][ T5810] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 2043.183802][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2043.205291][ T5810] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2043.222101][ T5810] usb 7-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 2043.231422][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2043.293100][ T5810] usb 7-1: config 0 descriptor?? [ 2043.554003][T20482] loop3: detected capacity change from 0 to 1024 [ 2043.588949][T20482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2043.705952][T16318] Bluetooth: hci3: link tx timeout [ 2043.712208][T16318] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2043.758367][T20482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2043.832773][ T5773] Bluetooth: hci3: link tx timeout [ 2043.838100][ T5773] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2043.875772][ T5810] cypress 0003:04B4:DE64.000B: item fetching failed at offset 2/3 [ 2043.900816][ T5810] cypress 0003:04B4:DE64.000B: parse failed [ 2043.907393][ T5810] cypress: probe of 0003:04B4:DE64.000B failed with error -22 [ 2044.109881][T20494] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2044.568125][ T9768] usb 7-1: USB disconnect, device number 6 [ 2044.882169][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2045.892005][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 2047.898096][T20532] loop5: detected capacity change from 0 to 1024 [ 2047.935937][T20532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2048.138990][T20532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2049.475919][T20548] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2054.033694][T13041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2059.793454][T20616] loop5: detected capacity change from 0 to 1024 [ 2059.807600][T20616] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2059.882541][T20616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2063.907277][T13041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2066.152320][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3540'. [ 2067.041093][T20696] loop4: detected capacity change from 0 to 1024 [ 2067.154145][T20696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2067.558698][T20696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2067.622719][T20709] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2069.537881][T20720] syz.6.3547: attempt to access beyond end of device [ 2069.537881][T20720] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2069.552279][T20720] netlink: 'syz.6.3547': attribute type 2 has an invalid length. [ 2069.560041][T20720] netlink: 'syz.6.3547': attribute type 1 has an invalid length. [ 2069.569182][T20720] netlink: 'syz.6.3547': attribute type 1 has an invalid length. [ 2071.926507][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2074.642190][T20750] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2075.886190][T20767] syz.3.3558: attempt to access beyond end of device [ 2075.886190][T20767] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2075.900565][T20767] netlink: 'syz.3.3558': attribute type 2 has an invalid length. [ 2075.908526][T20767] netlink: 'syz.3.3558': attribute type 1 has an invalid length. [ 2075.917302][T20767] netlink: 'syz.3.3558': attribute type 1 has an invalid length. [ 2076.250505][T20770] loop6: detected capacity change from 0 to 1024 [ 2076.264785][T20770] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2076.314886][T20770] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2076.596158][T20753] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2078.237084][T14491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2082.068615][T20810] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2082.530818][T20813] syz.3.3569: attempt to access beyond end of device [ 2082.530818][T20813] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2082.545343][T20813] netlink: 'syz.3.3569': attribute type 2 has an invalid length. [ 2082.553205][T20813] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 2082.560977][T20813] netlink: 'syz.3.3569': attribute type 1 has an invalid length. [ 2082.706194][T20817] loop5: detected capacity change from 0 to 1024 [ 2082.724125][T20817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2082.778735][T20817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2084.821397][T20827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3572'. [ 2084.836222][T20827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3572'. [ 2084.919317][T13041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2086.664683][T20835] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2088.867871][T20855] syz.5.3580: attempt to access beyond end of device [ 2088.867871][T20855] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2088.883713][T20855] netlink: 'syz.5.3580': attribute type 2 has an invalid length. [ 2088.891639][T20855] netlink: 'syz.5.3580': attribute type 1 has an invalid length. [ 2088.900746][T20855] netlink: 'syz.5.3580': attribute type 1 has an invalid length. [ 2089.281398][T20857] loop4: detected capacity change from 0 to 1024 [ 2089.311298][T20857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2089.534593][T20857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2091.215177][T20874] bridge0: port 3(syz_tun) entered blocking state [ 2091.223765][T20874] bridge0: port 3(syz_tun) entered disabled state [ 2091.235228][T20874] syz_tun: entered allmulticast mode [ 2091.254596][T20874] syz_tun: entered promiscuous mode [ 2091.266932][T20874] bridge0: port 3(syz_tun) entered blocking state [ 2091.274052][T20874] bridge0: port 3(syz_tun) entered forwarding state [ 2091.299470][T20874] netlink: 'syz.5.3585': attribute type 10 has an invalid length. [ 2091.531007][T20874] bridge0: port 3(syz_tun) entered disabled state [ 2091.537793][T20874] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.545071][T20874] bridge0: port 1(bridge_slave_0) entered disabled state [ 2091.578625][T20874] bridge0: port 3(syz_tun) entered blocking state [ 2091.585291][T20874] bridge0: port 3(syz_tun) entered forwarding state [ 2091.592271][T20874] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.599465][T20874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2091.607075][T20874] bridge0: port 1(bridge_slave_0) entered blocking state [ 2091.614430][T20874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2091.632573][T20874] .`: (slave bridge0): Enslaving as an active interface with an up link [ 2092.183695][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2093.252907][T20888] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2094.123619][T16318] Bluetooth: hci3: Dropping invalid advertising data [ 2094.131192][T16318] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2095.232563][T20903] syz.4.3592: attempt to access beyond end of device [ 2095.232563][T20903] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2095.247474][T20903] netlink: 'syz.4.3592': attribute type 2 has an invalid length. [ 2095.255350][T20903] netlink: 'syz.4.3592': attribute type 1 has an invalid length. [ 2095.264397][T20903] netlink: 'syz.4.3592': attribute type 1 has an invalid length. [ 2095.825267][T20912] [U] VÔSÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 2096.467474][T20909] [U] J¹Ä¥Ø~NQD½Þ$ÛSÎ0UΧÀÑ· WKÈ"]$Ñ‚¶²H“ ÁÀÃÏÂZ¬›×UB ¯<_CÈ8L ²*IR€0MKCÐ&-!ÚL;X£…‚ÚÕ>2‘K|Y³Í_[Ï¿ÆRÜÆÔÎX”‘AÖ³&N³»&³—} [ 2098.211433][T20925] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2099.012298][T20926] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2099.382627][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.389053][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.461099][T16318] Bluetooth: hci3: Dropping invalid advertising data [ 2099.468328][T16318] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2099.686170][T20934] loop6: detected capacity change from 0 to 1024 [ 2099.702743][T20934] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2099.785739][T20934] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2103.766160][T20960] syz.5.3606: attempt to access beyond end of device [ 2103.766160][T20960] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2103.781128][T20960] netlink: 'syz.5.3606': attribute type 2 has an invalid length. [ 2103.789112][T20960] netlink: 'syz.5.3606': attribute type 1 has an invalid length. [ 2103.797011][T20960] netlink: 'syz.5.3606': attribute type 1 has an invalid length. [ 2104.830571][T14491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2105.313806][T20979] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2109.621615][T21003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3616'. [ 2110.467404][T21012] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2110.481859][ T5773] Bluetooth: hci2: Dropping invalid advertising data [ 2110.491363][ T5773] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2113.653218][T21042] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3626'. [ 2118.734817][T21065] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2118.798486][ T5773] Bluetooth: hci1: Dropping invalid advertising data [ 2118.805965][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2119.784757][T21071] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3636'. [ 2126.657080][T21114] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3647'. [ 2131.372410][T21149] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3657'. [ 2135.460946][T21165] comedi comedi4: bad chanlist[0]=0x04004007 chan=16391 range length=2 [ 2137.610142][T21179] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3666'. [ 2139.281031][T21194] syz.3.3667: attempt to access beyond end of device [ 2139.281031][T21194] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2139.296493][T21194] netlink: 'syz.3.3667': attribute type 2 has an invalid length. [ 2139.304386][T21194] netlink: 'syz.3.3667': attribute type 1 has an invalid length. [ 2139.312226][T21194] netlink: 'syz.3.3667': attribute type 1 has an invalid length. [ 2142.965728][T21163] udevd[21163]: inotify_add_watch(7, /dev/nbd4, 10) failed: No such file or directory [ 2144.481034][T21222] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3676'. [ 2149.675856][T21260] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3686'. [ 2150.071173][T21267] autofs4:pid:21267:autofs_fill_super: called with bogus options [ 2153.495343][T21285] loop4: detected capacity change from 0 to 1024 [ 2153.512364][T21285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2153.607973][T21285] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2153.907616][T21293] syzkaller1: entered promiscuous mode [ 2153.931903][T21293] syzkaller1: entered allmulticast mode [ 2154.307910][T21297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3696'. [ 2156.923228][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2160.712539][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.719034][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.817125][T21343] loop4: detected capacity change from 0 to 1024 [ 2160.865930][T21343] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2160.962520][T21343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2162.023609][T21351] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3706'. [ 2165.078364][T21163] udevd[21163]: inotify_add_watch(7, /dev/nbd8, 10) failed: No such file or directory [ 2165.243907][T21377] binder: 21376:21377 ioctl c0306201 0 returned -14 [ 2166.378776][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2166.468742][T21387] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3717'. [ 2168.702096][T16318] Bluetooth: hci3: command 0x0406 tx timeout [ 2169.404068][T21416] loop5: detected capacity change from 0 to 1024 [ 2169.433300][T21416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2169.473265][T21416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2172.288873][T21434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3729'. [ 2175.541310][T21464] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3739'. [ 2175.772743][T13041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2177.107324][T21475] netlink: 'syz.4.3737': attribute type 4 has an invalid length. [ 2177.116989][T21475] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3737'. [ 2177.790182][T21475] .`: renamed from bond0 (while UP) [ 2179.355847][T21491] loop3: detected capacity change from 0 to 1024 [ 2179.367930][T21495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3748'. [ 2179.388962][T21491] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2179.517635][T21491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2179.558829][T21163] udevd[21163]: inotify_add_watch(7, /dev/nbd11, 10) failed: No such file or directory [ 2181.970974][ T5773] Bluetooth: hci1: Dropping invalid advertising data [ 2181.978403][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2183.622119][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2184.521493][T21530] netlink: 'syz.5.3756': attribute type 4 has an invalid length. [ 2184.529895][T21530] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3756'. [ 2189.046173][T21551] autofs4:pid:21551:autofs_fill_super: called with bogus options [ 2189.501949][T18537] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 2189.696213][T18537] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2189.728285][T18537] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2189.756935][T18537] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2189.774036][T18537] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2189.785656][T18537] usb 6-1: Product: syz [ 2189.789948][T18537] usb 6-1: Manufacturer: syz [ 2189.797821][T18537] usb 6-1: SerialNumber: syz [ 2189.809692][T18537] usb 6-1: config 0 descriptor?? [ 2189.841199][T18537] usb 6-1: selecting invalid altsetting 0 [ 2189.965433][T21559] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2189.974483][T21559] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2189.984288][T21559] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2189.993241][T21559] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2190.035118][T21559] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2190.044416][T21559] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2190.053564][T21559] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2190.062719][T21559] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2190.115148][T21553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2190.172361][T21553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2190.261056][T18537] usb 6-1: USB disconnect, device number 18 [ 2192.705668][T21560] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2192.715019][T21560] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2192.724297][T21560] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2192.733493][T21560] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2193.851075][T21560] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2193.860068][T21560] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2193.869010][T21560] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2193.878496][T21560] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2194.001071][T21586] netlink: 'syz.4.3769': attribute type 4 has an invalid length. [ 2194.009304][T21586] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3769'. [ 2194.388013][T21592] autofs4:pid:21592:autofs_fill_super: called with bogus options [ 2197.375419][T15681] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 2198.509312][T15681] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2198.526949][T15681] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2198.538922][T21618] binder: 21616:21618 ioctl c0306201 0 returned -14 [ 2198.551081][T15681] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2198.577365][T15681] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2198.591843][T15681] usb 7-1: Product: syz [ 2198.596071][T15681] usb 7-1: Manufacturer: syz [ 2198.611024][T15681] usb 7-1: SerialNumber: syz [ 2198.633467][T15681] usb 7-1: config 0 descriptor?? [ 2198.666611][T15681] usb 7-1: selecting invalid altsetting 0 [ 2198.920855][T21623] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2198.930599][T21623] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2198.939683][T21623] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2198.948471][T21623] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2199.007127][T21623] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.016464][T21623] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.025433][T21623] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.034387][T21623] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.088340][T21606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.132724][T21606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.156800][ T9768] usb 7-1: USB disconnect, device number 7 [ 2199.434109][T21624] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2199.443057][T21624] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2199.451895][T21624] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2199.460624][T21624] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2199.508313][T21628] autofs4:pid:21628:autofs_fill_super: called with bogus options [ 2199.655624][T21624] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.664755][T21624] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.674152][T21624] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2199.683165][T21624] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2203.866694][ T5773] Bluetooth: hci1: Dropping invalid advertising data [ 2203.873751][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2204.520441][T21653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3789'. [ 2204.562800][T21653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3789'. [ 2204.583349][T21657] binder: 21654:21657 ioctl c0306201 0 returned -14 [ 2204.850861][T21664] autofs4:pid:21664:autofs_fill_super: called with bogus options [ 2206.081868][T15681] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 2206.284074][T15681] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2206.850929][T15681] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2206.984719][T15681] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2207.011817][T15681] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2207.020061][T15681] usb 5-1: Product: syz [ 2207.030159][T15681] usb 5-1: Manufacturer: syz [ 2207.035165][T15681] usb 5-1: SerialNumber: syz [ 2207.049774][T15681] usb 5-1: config 0 descriptor?? [ 2207.067785][T15681] usb 5-1: selecting invalid altsetting 0 [ 2207.668963][T21666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2207.802073][T21666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.846175][ T9768] usb 5-1: USB disconnect, device number 32 [ 2210.911874][T15681] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 2211.062077][T15681] usb 7-1: device descriptor read/64, error -71 [ 2211.342048][T15681] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 2211.501920][T15681] usb 7-1: device descriptor read/64, error -71 [ 2211.632624][T15681] usb usb7-port1: attempt power cycle [ 2212.521444][T21736] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2212.762102][T15681] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 2212.812677][T15681] usb 7-1: device descriptor read/8, error -71 [ 2214.154721][T15681] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 2214.391889][T15681] usb 7-1: device not accepting address 11, error -71 [ 2214.409850][T15681] usb usb7-port1: unable to enumerate USB device [ 2217.785465][T21779] netlink: 'syz.6.3825': attribute type 2 has an invalid length. [ 2217.793332][T21779] netlink: 'syz.6.3825': attribute type 1 has an invalid length. [ 2217.801622][T21779] netlink: 'syz.6.3825': attribute type 1 has an invalid length. [ 2218.437111][T21780] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2220.336557][T21785] loop6: detected capacity change from 0 to 1024 [ 2220.376390][T21785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2220.599491][T21785] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2221.557775][T14491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2222.126695][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.135233][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.362473][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 2222.869545][T21814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2224.244492][T21831] netlink: 'syz.6.3836': attribute type 2 has an invalid length. [ 2224.252655][T21831] netlink: 'syz.6.3836': attribute type 1 has an invalid length. [ 2224.260420][T21831] netlink: 'syz.6.3836': attribute type 1 has an invalid length. [ 2224.973919][T21826] loop4: detected capacity change from 0 to 1024 [ 2224.981718][T21826] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2225.059176][T21826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2226.907766][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2232.773021][T21873] netlink: 'syz.4.3848': attribute type 2 has an invalid length. [ 2232.780887][T21873] netlink: 'syz.4.3848': attribute type 1 has an invalid length. [ 2232.789604][T21873] netlink: 'syz.4.3848': attribute type 1 has an invalid length. [ 2233.784673][T21878] loop3: detected capacity change from 0 to 1024 [ 2235.352159][T21878] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2235.504442][T21878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2236.428197][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2238.744177][T21917] syz.6.3858: attempt to access beyond end of device [ 2238.744177][T21917] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2239.421459][T21924] loop4: detected capacity change from 0 to 1024 [ 2239.474138][T21924] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2239.579909][T21924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2240.724349][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2242.523218][T21964] syz.3.3870: attempt to access beyond end of device [ 2242.523218][T21964] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2243.446668][T21971] loop3: detected capacity change from 0 to 1024 [ 2243.476915][T21971] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2243.553501][T21971] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2244.765841][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2245.559158][T21997] syz.3.3879: attempt to access beyond end of device [ 2245.559158][T21997] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2247.330038][T22017] loop5: detected capacity change from 0 to 1024 [ 2247.365989][T22017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2247.645877][T22023] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2247.666320][ T5773] Bluetooth: hci1: Dropping invalid advertising data [ 2247.674893][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2247.900896][T22017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2249.225150][T13041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2249.579468][T22032] syz.3.3888: attempt to access beyond end of device [ 2249.579468][T22032] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2251.942928][T22059] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2252.011305][ T5773] Bluetooth: hci3: Dropping invalid advertising data [ 2252.018382][ T5773] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2254.583960][T22084] syz.4.3899: attempt to access beyond end of device [ 2254.583960][T22084] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2258.382022][T22109] syzkaller0: entered promiscuous mode [ 2259.582688][T22120] syz.4.3911: attempt to access beyond end of device [ 2259.582688][T22120] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2271.192050][ T5839] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 2271.371886][ T5839] usb 6-1: device descriptor read/64, error -71 [ 2271.881913][ T5839] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 2271.937276][T22197] loop3: detected capacity change from 0 to 1024 [ 2271.969794][T22197] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2272.015560][T22197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2272.140985][ T5839] usb 6-1: device descriptor read/64, error -71 [ 2275.552226][T22210] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2277.479817][ T5839] usb usb6-port1: attempt power cycle [ 2277.486701][T16318] Bluetooth: hci3: Dropping invalid advertising data [ 2277.489161][ T5773] Bluetooth: hci1: Dropping invalid advertising data [ 2277.496123][T16318] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2277.509817][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2277.772816][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2277.889530][T22213] syzkaller0: entered promiscuous mode [ 2282.971878][T20224] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2283.164347][T20224] usb 5-1: config 0 has no interfaces? [ 2283.176237][T20224] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2283.201997][T20224] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2283.210493][T20224] usb 5-1: Product: syz [ 2283.215069][T20224] usb 5-1: Manufacturer: syz [ 2283.219812][T20224] usb 5-1: SerialNumber: syz [ 2283.263451][T20224] usb 5-1: config 0 descriptor?? [ 2283.569198][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.575619][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.591969][T22243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2283.601291][T22243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2283.703672][ T9768] usb 5-1: USB disconnect, device number 33 [ 2283.751633][ T5773] Bluetooth: hci2: Dropping invalid advertising data [ 2283.759347][ T5773] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2284.768098][T22251] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2284.838787][ T5773] Bluetooth: hci2: Dropping invalid advertising data [ 2284.846530][ T5773] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2291.411835][ T9768] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 2292.380028][ T9768] usb 4-1: config 0 has no interfaces? [ 2292.408486][ T9768] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2292.505593][ T9768] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2292.548864][ T9768] usb 4-1: Product: syz [ 2292.557370][ T9768] usb 4-1: Manufacturer: syz [ 2292.575409][ T9768] usb 4-1: SerialNumber: syz [ 2292.640210][ T9768] usb 4-1: config 0 descriptor?? [ 2292.900307][T22285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2292.916369][T22285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2293.196929][ T9768] usb 4-1: USB disconnect, device number 31 [ 2295.313654][T22325] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2296.146138][T22328] syzkaller0: entered promiscuous mode [ 2296.175347][T22331] tmpfs: Bad value for 'mpol' [ 2297.527824][T22337] overlayfs: unescaped trailing colons in lowerdir mount option. [ 2297.636711][T22337] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 2298.083926][ T9768] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 2298.298104][ T9768] usb 4-1: config 0 has no interfaces? [ 2298.319657][ T9768] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2298.329758][ T9768] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2298.338592][ T9768] usb 4-1: Product: syz [ 2298.342979][ T9768] usb 4-1: Manufacturer: syz [ 2298.347934][ T9768] usb 4-1: SerialNumber: syz [ 2298.366371][ T9768] usb 4-1: config 0 descriptor?? [ 2298.649912][T22340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2298.682669][T22340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2298.734766][ T9768] usb 4-1: USB disconnect, device number 32 [ 2303.367167][T22375] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2303.452272][ T5773] Bluetooth: hci1: Dropping invalid advertising data [ 2303.459439][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2304.784888][T22386] fuse: Bad value for 'group_id' [ 2305.101849][T18374] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 2305.303966][T18374] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2305.331488][T18374] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2305.342681][T18374] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2305.350994][T18374] usb 4-1: Product: syz [ 2305.377322][T18374] usb 4-1: Manufacturer: syz [ 2305.390583][T18374] usb 4-1: SerialNumber: syz [ 2305.407765][T18374] usb 4-1: config 0 descriptor?? [ 2305.473242][T18374] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 2305.535109][T22302] udevd[22302]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2305.643346][T22388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2305.657856][T22388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2305.670601][T18537] usb 4-1: USB disconnect, device number 33 [ 2306.205286][T22398] syzkaller0: entered promiscuous mode [ 2306.468200][T22406] syz.5.3981: attempt to access beyond end of device [ 2306.468200][T22406] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2306.484240][T22406] netlink: 'syz.5.3981': attribute type 2 has an invalid length. [ 2306.492392][T22406] netlink: 'syz.5.3981': attribute type 1 has an invalid length. [ 2307.055115][T22409] autofs4:pid:22409:autofs_fill_super: called with bogus options [ 2308.138787][T22415] fuse: Bad value for 'group_id' [ 2312.949584][T22435] autofs4:pid:22435:autofs_fill_super: called with bogus options [ 2313.114010][T22439] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.3994' sets config #-60912 [ 2313.389592][ T9768] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 2313.942046][ T9768] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2313.957872][ T9768] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2313.981950][ T9768] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2314.007032][ T9768] usb 6-1: Product: syz [ 2314.011382][ T9768] usb 6-1: Manufacturer: syz [ 2314.016511][ T9768] usb 6-1: SerialNumber: syz [ 2314.037602][ T9768] usb 6-1: config 0 descriptor?? [ 2314.220434][ T9768] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 2314.308260][T22433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2314.323414][T22302] udevd[22302]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2314.339950][T22433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2314.362464][ T9768] usb 6-1: USB disconnect, device number 22 [ 2314.813557][T22454] syz.4.3998: attempt to access beyond end of device [ 2314.813557][T22454] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2314.829733][T22454] netlink: 'syz.4.3998': attribute type 2 has an invalid length. [ 2314.837727][T22454] netlink: 'syz.4.3998': attribute type 1 has an invalid length. [ 2315.744867][T22459] syzkaller0: entered promiscuous mode [ 2316.126207][T22463] autofs4:pid:22463:autofs_fill_super: called with bogus options [ 2318.180456][T20224] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 2318.392180][T20224] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2318.428715][T20224] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2318.449606][T20224] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2318.477400][T20224] usb 4-1: Product: syz [ 2318.489061][T20224] usb 4-1: Manufacturer: syz [ 2318.498546][T20224] usb 4-1: SerialNumber: syz [ 2318.729438][T20224] usb 4-1: config 0 descriptor?? [ 2318.793424][T20224] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 2318.862475][T22487] syz.6.4009: attempt to access beyond end of device [ 2318.862475][T22487] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2318.878318][T22487] netlink: 'syz.6.4009': attribute type 2 has an invalid length. [ 2318.886363][T22487] netlink: 'syz.6.4009': attribute type 1 has an invalid length. [ 2319.057386][T22483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2319.205584][T22483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2319.461469][T20224] usb 4-1: USB disconnect, device number 34 [ 2319.526015][T22490] udevd[22490]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2325.211827][T20224] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 2325.424491][T20224] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2325.453982][T20224] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2325.470186][T20224] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2325.479636][T20224] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2325.491181][T20224] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2325.500232][T20224] usb 4-1: Product: syz [ 2325.505408][T20224] usb 4-1: Manufacturer: syz [ 2325.511255][T20224] usb 4-1: SerialNumber: syz [ 2325.522495][T20224] usb 4-1: config 0 descriptor?? [ 2325.570068][T20224] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 2325.753538][T22490] udevd[22490]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2325.780005][T22516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2325.800605][T22516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2325.881095][T20224] usb 4-1: USB disconnect, device number 35 [ 2326.413043][T15681] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2326.819477][T15681] usb 5-1: Using ep0 maxpacket: 8 [ 2326.828546][T15681] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2326.840610][T15681] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2326.850975][T15681] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2326.861391][T15681] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2326.875277][T15681] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2326.884964][T15681] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2326.950838][T22532] syz.3.4022: attempt to access beyond end of device [ 2326.950838][T22532] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2327.471324][T22535] syzkaller0: entered promiscuous mode [ 2328.092319][T15681] usb 5-1: GET_CAPABILITIES returned 0 [ 2328.098003][T15681] usbtmc 5-1:16.0: can't read capabilities [ 2328.341540][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2328.395986][T15681] usb 5-1: USB disconnect, device number 34 [ 2329.361819][T18374] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 2329.705177][T18374] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2329.753423][T18374] usb 5-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2329.774505][T18374] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2329.823283][T18374] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2329.843338][T22565] syz.6.4032: attempt to access beyond end of device [ 2329.843338][T22565] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2329.900552][T18374] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2330.007467][T18374] usb 5-1: Product: syz [ 2330.076174][T18374] usb 5-1: Manufacturer: syz [ 2330.137338][T18374] usb 5-1: SerialNumber: syz [ 2330.371984][T18374] usb 5-1: config 0 descriptor?? [ 2330.397890][T22566] syzkaller0: entered promiscuous mode [ 2330.511339][T18374] snd-usb-audio: probe of 5-1:0.0 failed with error -22 [ 2330.638164][T22490] udevd[22490]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2330.661254][T22555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2330.702630][T22555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2330.760847][T18374] usb 5-1: USB disconnect, device number 35 [ 2334.442858][T22600] syzkaller0: entered promiscuous mode [ 2335.761832][T15681] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 2335.974998][T15681] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2335.990121][T15681] usb 4-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2336.011490][T15681] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2336.656192][T15681] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2336.703520][T15681] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2336.743690][T15681] usb 4-1: Product: syz [ 2336.747933][T15681] usb 4-1: Manufacturer: syz [ 2336.790875][T15681] usb 4-1: SerialNumber: syz [ 2336.817156][T15681] usb 4-1: config 0 descriptor?? [ 2336.912500][T15681] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 2337.010356][T22490] udevd[22490]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2337.080085][T22609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2337.099004][T22609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2337.118972][T18537] usb 4-1: USB disconnect, device number 36 [ 2337.364213][T22631] syz.4.4052: attempt to access beyond end of device [ 2337.364213][T22631] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2337.380316][T22631] netlink: 'syz.4.4052': attribute type 2 has an invalid length. [ 2338.212132][T22635] syzkaller0: entered promiscuous mode [ 2339.682297][ T5773] Bluetooth: hci2: Dropping invalid advertising data [ 2339.689211][ T5773] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2340.435050][T22662] netlink: 'syz.6.4063': attribute type 2 has an invalid length. [ 2341.062998][T22665] syzkaller0: entered promiscuous mode [ 2342.171355][T22673] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2342.193660][ T5773] Bluetooth: hci1: Dropping invalid advertising data [ 2342.201033][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2343.524095][ T5773] Bluetooth: hci3: Dropping invalid advertising data [ 2343.531216][ T5773] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2345.064938][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2345.071537][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.094911][T22706] syz.4.4074: attempt to access beyond end of device [ 2345.094911][T22706] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2345.115842][T22706] netlink: 'syz.4.4074': attribute type 2 has an invalid length. [ 2345.856702][T22724] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2345.866156][ T5773] Bluetooth: hci1: Dropping invalid advertising data [ 2345.873622][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2347.322535][ T5773] Bluetooth: hci1: Dropping invalid advertising data [ 2347.329392][ T5773] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2348.906832][T22749] syzkaller0: entered promiscuous mode [ 2352.757536][T22782] syzkaller0: entered promiscuous mode [ 2352.775634][T22786] autofs4:pid:22786:autofs_fill_super: called with bogus options [ 2364.981862][T22916] netlink: 'syz.5.4126': attribute type 4 has an invalid length. [ 2365.027635][T22916] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4126'. [ 2368.555981][T22941] bridge0: port 3(hsr0) entered blocking state [ 2368.562460][T22941] bridge0: port 3(hsr0) entered disabled state [ 2368.569936][T22941] hsr0: entered allmulticast mode [ 2368.575096][T22941] hsr_slave_0: entered allmulticast mode [ 2368.580860][T22941] hsr_slave_1: entered allmulticast mode [ 2368.588270][T22941] hsr0: entered promiscuous mode [ 2368.594482][T22941] bridge0: port 3(hsr0) entered blocking state [ 2368.600775][T22941] bridge0: port 3(hsr0) entered forwarding state [ 2371.564459][T22957] loop4: detected capacity change from 0 to 1024 [ 2371.668565][T22957] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2372.198252][T22957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2373.317245][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2373.768590][T22970] netlink: 'syz.4.4140': attribute type 4 has an invalid length. [ 2373.776630][T22970] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4140'. [ 2376.166841][T22976] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4143'. [ 2378.221896][T15681] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 2378.414225][T15681] usb 6-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x0, skipping [ 2378.437052][T15681] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2378.478816][T15681] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2378.506571][T15681] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2378.519915][T15681] usb 6-1: Product: syz [ 2378.525924][T15681] usb 6-1: Manufacturer: syz [ 2378.530870][T15681] usb 6-1: SerialNumber: syz [ 2378.548154][T15681] usb 6-1: config 0 descriptor?? [ 2378.629091][T15681] snd-usb-audio: probe of 6-1:0.0 failed with error -22 [ 2378.711431][T22490] udevd[22490]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2378.797408][T22994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2378.822701][T22994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2378.852780][T15681] usb 6-1: USB disconnect, device number 23 [ 2379.351366][T23006] netlink: 'syz.6.4149': attribute type 4 has an invalid length. [ 2379.359299][T23006] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4149'. [ 2384.642197][T23046] binder: 23045:23046 unknown command 1074553620 [ 2384.711814][T23046] binder: 23045:23046 ioctl c0306201 200000000480 returned -22 [ 2384.914860][T23051] netlink: 'syz.5.4163': attribute type 4 has an invalid length. [ 2384.923418][T23051] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4163'. [ 2387.043257][T23067] netlink: 'syz.6.4166': attribute type 39 has an invalid length. [ 2388.451269][T23085] netlink: 'syz.3.4176': attribute type 4 has an invalid length. [ 2388.459655][T23085] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4176'. [ 2390.294295][T23097] fuse: Bad value for 'fd' [ 2392.330451][T23118] netlink: 'syz.6.4185': attribute type 4 has an invalid length. [ 2392.338363][T23118] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4185'. [ 2392.669829][ T5773] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 2395.193526][T23140] fuse: Bad value for 'fd' [ 2396.682429][ T5773] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 2396.700836][ T5773] Bluetooth: hci1: Injecting HCI hardware error event [ 2396.714678][T20490] Bluetooth: hci1: hardware error 0x00 [ 2397.474637][T23162] netlink: 'syz.4.4199': attribute type 4 has an invalid length. [ 2397.484472][T23162] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4199'. [ 2398.706285][T23171] fuse: Bad value for 'fd' [ 2398.761865][T20490] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 2401.881302][T23202] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2402.145359][T23205] syz.3.4208: attempt to access beyond end of device [ 2402.145359][T23205] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2402.162795][T23205] netlink: 'syz.3.4208': attribute type 2 has an invalid length. [ 2402.170618][T23205] netlink: 'syz.3.4208': attribute type 1 has an invalid length. [ 2402.178646][T23205] netlink: 'syz.3.4208': attribute type 1 has an invalid length. [ 2402.920559][T23207] netlink: 'syz.6.4209': attribute type 4 has an invalid length. [ 2402.928393][T23207] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4209'. [ 2403.023389][T23209] fuse: Bad value for 'fd' [ 2406.374187][T23241] syz.4.4218: attempt to access beyond end of device [ 2406.374187][T23241] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2406.388584][T23241] netlink: 'syz.4.4218': attribute type 2 has an invalid length. [ 2406.396454][T23241] netlink: 'syz.4.4218': attribute type 1 has an invalid length. [ 2406.404550][T23241] netlink: 'syz.4.4218': attribute type 1 has an invalid length. [ 2406.606354][T23242] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2406.621278][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.630367][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.772105][T23246] netlink: 'syz.3.4219': attribute type 4 has an invalid length. [ 2406.780295][T23246] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4219'. [ 2407.499620][T23250] fuse: Bad value for 'fd' [ 2410.034579][T23273] netlink: 'syz.6.4228': attribute type 2 has an invalid length. [ 2410.043526][T23273] netlink: 'syz.6.4228': attribute type 1 has an invalid length. [ 2410.051987][T23273] netlink: 'syz.6.4228': attribute type 1 has an invalid length. [ 2410.751774][T20876] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2411.078541][T23281] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2411.441739][T20876] usb 4-1: Using ep0 maxpacket: 8 [ 2411.563996][T23284] netlink: 'syz.4.4230': attribute type 4 has an invalid length. [ 2411.565952][T20876] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2411.582480][T23284] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4230'. [ 2411.622356][T20876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2411.630736][T20876] usb 4-1: Product: syz [ 2411.642369][T20876] usb 4-1: Manufacturer: syz [ 2411.647098][T20876] usb 4-1: SerialNumber: syz [ 2411.752417][T20876] usb 4-1: config 0 descriptor?? [ 2412.000741][T20876] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2414.677743][T23302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4235'. [ 2414.691297][T23302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4235'. [ 2415.655036][T20876] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -32 [ 2415.873428][ T5839] usb 4-1: USB disconnect, device number 37 [ 2417.769058][T23314] syz.3.4237: attempt to access beyond end of device [ 2417.769058][T23314] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2417.785816][T23314] netlink: 'syz.3.4237': attribute type 2 has an invalid length. [ 2417.793870][T23314] netlink: 'syz.3.4237': attribute type 1 has an invalid length. [ 2417.802131][T23314] netlink: 'syz.3.4237': attribute type 1 has an invalid length. [ 2418.823113][T23321] fuse: Bad value for 'fd' [ 2418.852393][T23324] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2419.444076][T23326] netlink: 'syz.4.4241': attribute type 4 has an invalid length. [ 2419.454602][T23326] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4241'. [ 2423.183241][T23360] syz.3.4248: attempt to access beyond end of device [ 2423.183241][T23360] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2423.199578][T23360] netlink: 'syz.3.4248': attribute type 2 has an invalid length. [ 2423.207519][T23360] netlink: 'syz.3.4248': attribute type 1 has an invalid length. [ 2423.215690][T23360] netlink: 'syz.3.4248': attribute type 1 has an invalid length. [ 2425.194658][T23376] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2427.986275][T23388] netlink: 'syz.5.4254': attribute type 4 has an invalid length. [ 2427.994410][T23388] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4254'. [ 2431.168030][T23407] fuse: Bad value for 'fd' [ 2431.279657][T23408] syz.5.4258: attempt to access beyond end of device [ 2431.279657][T23408] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2431.295858][T23408] netlink: 'syz.5.4258': attribute type 2 has an invalid length. [ 2431.303744][T23408] netlink: 'syz.5.4258': attribute type 1 has an invalid length. [ 2431.311721][T23408] netlink: 'syz.5.4258': attribute type 1 has an invalid length. [ 2435.449659][T23432] netlink: 'syz.4.4264': attribute type 4 has an invalid length. [ 2435.458004][T23432] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4264'. [ 2436.763722][T23448] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2436.786986][T20490] Bluetooth: hci2: Dropping invalid advertising data [ 2436.794058][T20490] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2437.971929][T23455] syz.3.4269: attempt to access beyond end of device [ 2437.971929][T23455] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2437.987971][T23455] netlink: 'syz.3.4269': attribute type 2 has an invalid length. [ 2437.996981][T23455] netlink: 'syz.3.4269': attribute type 1 has an invalid length. [ 2438.005072][T23455] netlink: 'syz.3.4269': attribute type 1 has an invalid length. [ 2440.282908][T23466] fuse: Bad value for 'rootmode' [ 2440.456520][T23471] netlink: 'syz.6.4276': attribute type 4 has an invalid length. [ 2441.342808][T23471] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4276'. [ 2441.810706][T23482] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2444.275660][T23500] autofs4:pid:23500:autofs_fill_super: called with bogus options [ 2445.642656][ T5839] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 2445.966706][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2446.281978][ T5839] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2446.301842][ T5839] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2446.314324][T23525] netlink: 'syz.6.4289': attribute type 4 has an invalid length. [ 2446.322160][T23525] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4289'. [ 2446.341739][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2446.382661][ T5839] usb 4-1: config 0 descriptor?? [ 2446.404703][ T5839] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2446.412155][ T5839] dvb-usb: bulk message failed: -22 (3/0) [ 2446.442967][ T5839] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2446.456657][ T5839] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2446.473648][ T5839] usb 4-1: media controller created [ 2446.486582][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2446.544131][ T5839] dvb-usb: bulk message failed: -22 (6/0) [ 2446.550520][ T5839] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2446.609221][ T5839] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 2446.634277][T23521] dibusb: i2c wr: len=61 is too big! [ 2446.634277][T23521] [ 2446.657762][ T5839] dvb-usb: schedule remote query interval to 150 msecs. [ 2446.683532][ T5839] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2446.717750][ T5839] usb 4-1: USB disconnect, device number 38 [ 2446.791464][ T5839] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2449.363979][T23562] netlink: 'syz.4.4299': attribute type 4 has an invalid length. [ 2449.372642][T23562] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4299'. [ 2453.711881][T20876] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 2453.989128][T20876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2454.126280][T20876] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2454.268265][T20876] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2454.414105][T20876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2454.477760][T20876] usb 6-1: config 0 descriptor?? [ 2454.519715][T20876] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2454.532216][T20876] dvb-usb: bulk message failed: -22 (3/0) [ 2454.554147][T20876] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2454.565448][T20876] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2454.576172][T20876] usb 6-1: media controller created [ 2454.584118][T23610] netlink: 'syz.6.4309': attribute type 4 has an invalid length. [ 2454.592693][T23610] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4309'. [ 2454.618344][T20876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2454.640667][T20876] dvb-usb: bulk message failed: -22 (6/0) [ 2454.656920][T20876] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2454.668977][T20876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 2454.713935][T20876] dvb-usb: schedule remote query interval to 150 msecs. [ 2454.727451][T20876] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2454.755227][T20876] usb 6-1: USB disconnect, device number 24 [ 2454.798293][T20876] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2454.806991][T18374] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2455.002027][T18374] usb 4-1: Using ep0 maxpacket: 8 [ 2455.014050][T18374] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2455.034352][T18374] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2455.074936][T18374] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2455.120682][T18374] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2455.139391][T18374] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2455.149119][T18374] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2455.796459][T18374] usb 4-1: GET_CAPABILITIES returned 0 [ 2455.831206][T18374] usbtmc 4-1:16.0: can't read capabilities [ 2456.003209][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2456.014538][T18374] usb 4-1: USB disconnect, device number 39 [ 2459.961909][T18537] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 2460.164308][T18537] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2460.201111][T18537] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2460.265906][T18537] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2460.315428][T18537] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2460.438467][T18537] usb 4-1: config 0 descriptor?? [ 2460.461435][T18537] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2460.468814][T18537] dvb-usb: bulk message failed: -22 (3/0) [ 2460.490606][ T5773] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2460.511836][ T5773] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2460.539180][ T5773] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2460.552056][ T5773] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2460.565232][ T5773] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2460.599722][ T5773] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2460.912662][T18537] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2460.999551][T18537] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2461.066056][T18537] usb 4-1: media controller created [ 2461.116137][T18537] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2461.154629][T18537] dvb-usb: bulk message failed: -22 (6/0) [ 2461.172717][T18537] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2461.212959][T18537] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input14 [ 2461.273349][T18537] dvb-usb: schedule remote query interval to 150 msecs. [ 2461.280726][T18537] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2461.295556][T18537] usb 4-1: USB disconnect, device number 40 [ 2461.367081][T18537] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2461.501760][T20224] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2461.725976][T20224] usb 5-1: Using ep0 maxpacket: 8 [ 2461.741824][T20224] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2461.755947][T23661] chnl_net:caif_netlink_parms(): no params data found [ 2461.762347][T20224] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2461.790921][T20224] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2461.830890][T20224] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2461.887545][T20224] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2461.933143][T20224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.124988][T23661] bridge0: port 1(bridge_slave_0) entered blocking state [ 2462.133308][T23661] bridge0: port 1(bridge_slave_0) entered disabled state [ 2462.140812][T23661] bridge_slave_0: entered allmulticast mode [ 2462.151914][T23661] bridge_slave_0: entered promiscuous mode [ 2462.164675][T23661] bridge0: port 2(bridge_slave_1) entered blocking state [ 2462.182126][T23661] bridge0: port 2(bridge_slave_1) entered disabled state [ 2462.468250][T23661] bridge_slave_1: entered allmulticast mode [ 2462.700771][T23661] bridge_slave_1: entered promiscuous mode [ 2462.713843][ T5773] Bluetooth: hci4: command tx timeout [ 2463.094569][T20224] usb 5-1: GET_CAPABILITIES returned 0 [ 2463.100680][T20224] usbtmc 5-1:16.0: can't read capabilities [ 2463.112039][T20224] usb 5-1: USB disconnect, device number 36 [ 2463.152787][T23661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2463.190894][T23661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2463.500577][T23661] team0: Port device team_slave_0 added [ 2463.528570][T23684] fuse: Unknown parameter 'user_i00000000000000000000' [ 2463.562148][T23661] team0: Port device team_slave_1 added [ 2463.982329][T23338] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.084824][ T5773] Bluetooth: hci4: command tx timeout [ 2465.366572][T23338] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.432960][T23661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2465.461803][T23661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2465.503115][T23661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2465.599646][T23338] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2465.636844][T23661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2465.644930][T23661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2465.672050][T23661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2465.707885][T18374] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 2465.980050][T18374] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2466.048532][T18374] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2466.089865][T23338] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2466.169338][T18374] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2466.299491][T18374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2466.509323][T18374] usb 6-1: config 0 descriptor?? [ 2466.545976][T18374] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2466.565066][T18374] dvb-usb: bulk message failed: -22 (3/0) [ 2466.591478][T23661] hsr_slave_0: entered promiscuous mode [ 2466.614443][T18374] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2466.623803][T23661] hsr_slave_1: entered promiscuous mode [ 2466.644193][T18374] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2466.654155][T23661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2466.665044][T18374] usb 6-1: media controller created [ 2466.674943][T18374] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2466.679021][T23661] Cannot create hsr debugfs directory [ 2466.711080][T18374] dvb-usb: bulk message failed: -22 (6/0) [ 2466.735909][T18374] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2466.772209][T18374] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 2466.801174][T18374] dvb-usb: schedule remote query interval to 150 msecs. [ 2466.828796][T18374] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2466.872187][T18374] usb 6-1: USB disconnect, device number 25 [ 2466.882201][T10579] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2466.987067][T18374] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2467.072019][T10579] usb 4-1: Using ep0 maxpacket: 8 [ 2467.081974][T10579] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2467.096124][T10579] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2467.113893][T10579] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2467.137642][T10579] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2467.168497][ T5773] Bluetooth: hci4: command tx timeout [ 2467.169417][T23715] loop4: detected capacity change from 0 to 1024 [ 2467.191990][T10579] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2467.199314][T23715] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2467.201329][T10579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2467.282177][T23715] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2467.486146][T10579] usb 4-1: GET_CAPABILITIES returned 0 [ 2467.526692][T10579] usbtmc 4-1:16.0: can't read capabilities [ 2467.795813][T10579] usb 4-1: USB disconnect, device number 41 [ 2467.887663][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.894866][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2469.252162][ T5773] Bluetooth: hci4: command tx timeout [ 2470.690639][T23661] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2471.572465][T23661] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2471.793312][T23753] syzkaller0: entered promiscuous mode [ 2471.808609][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2473.194372][T18374] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2473.405000][T18374] usb 6-1: Using ep0 maxpacket: 8 [ 2473.438382][T18374] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2473.449786][T18374] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2473.460196][T18374] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2473.488186][T18374] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2473.518832][T18374] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2473.528426][T18374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2473.790601][T18374] usb 6-1: GET_CAPABILITIES returned 0 [ 2473.796581][T18374] usbtmc 6-1:16.0: can't read capabilities [ 2474.024298][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 2474.035284][T18374] usb 6-1: USB disconnect, device number 26 [ 2474.807060][T23770] SET target dimension over the limit! [ 2477.331029][T23661] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2477.446289][T23661] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2477.572891][T23338] hsr_slave_0: left promiscuous mode [ 2477.609215][T23338] hsr_slave_1: left promiscuous mode [ 2477.629998][T23338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2477.639693][T23338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2477.661252][T23338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2477.671273][T23338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2477.698370][T23338] hsr0: left allmulticast mode [ 2477.704210][T23338] hsr0: left promiscuous mode [ 2477.709583][T23338] bridge0: port 3(hsr0) entered disabled state [ 2477.730989][T23338] bridge_slave_1: left allmulticast mode [ 2477.736968][T23338] bridge_slave_1: left promiscuous mode [ 2477.745241][T23338] bridge0: port 2(bridge_slave_1) entered disabled state [ 2477.773374][T23338] bridge_slave_0: left allmulticast mode [ 2477.791939][T23338] bridge_slave_0: left promiscuous mode [ 2477.797859][T23338] bridge0: port 1(bridge_slave_0) entered disabled state [ 2477.850804][T23338] veth1_macvtap: left promiscuous mode [ 2477.854903][T23774] loop3: detected capacity change from 0 to 1024 [ 2477.857725][T23338] veth0_macvtap: left promiscuous mode [ 2477.868924][T23338] veth1_vlan: left promiscuous mode [ 2477.878412][T23774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2477.886145][T23338] veth0_vlan: left promiscuous mode [ 2477.957016][T23774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2480.162417][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2480.473016][T23338] team0 (unregistering): Port device team_slave_1 removed [ 2480.731162][T23338] team0 (unregistering): Port device team_slave_0 removed [ 2480.997053][T23338] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2481.365779][T23338] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2482.667458][T23338] .` (unregistering): (slave dummy0): Releasing backup interface [ 2482.829498][T23338] .` (unregistering): Released all slaves [ 2483.147634][T23797] syzkaller0: entered promiscuous mode [ 2484.928513][T23820] loop4: detected capacity change from 0 to 1024 [ 2484.936417][T23820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2485.086431][T23820] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2486.929433][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2491.158971][T23661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2491.248652][T23661] 8021q: adding VLAN 0 to HW filter on device team0 [ 2491.274804][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 2491.282123][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2491.463198][T12671] bridge0: port 2(bridge_slave_1) entered blocking state [ 2491.470395][T12671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2492.799894][T23872] loop3: detected capacity change from 0 to 1024 [ 2492.848917][T23872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2492.920690][T23872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2493.304999][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2493.370554][T23661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2494.584996][T23893] syzkaller0: entered promiscuous mode [ 2495.957791][T23661] veth0_vlan: entered promiscuous mode [ 2496.033298][T23661] veth1_vlan: entered promiscuous mode [ 2496.148285][T23661] veth0_macvtap: entered promiscuous mode [ 2496.178340][T23661] veth1_macvtap: entered promiscuous mode [ 2496.284323][T23661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2496.365537][T23661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2496.429050][T23661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2496.490194][T23661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2496.505694][T23661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2496.516983][T23661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2496.546573][T23661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2496.581675][T23661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2496.648645][T23661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2496.659354][T23661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2496.670119][T23661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2496.680842][T23661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2496.692928][T23661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2496.704612][T23661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2496.727498][T23661] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2496.738939][T23661] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2496.788278][T23661] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2496.811109][T23661] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2496.839507][T23921] loop5: detected capacity change from 0 to 1024 [ 2496.856013][T23921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2496.912380][T23921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2497.028897][ T9117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2497.071891][ T9117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2497.315180][T23338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2497.323617][T23338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2497.429880][T13041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2498.933423][T23937] syzkaller0: entered promiscuous mode [ 2499.721801][T10579] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2499.922640][T10579] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2499.947777][T10579] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2499.981341][T10579] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2500.028874][T10579] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2500.051303][T23941] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2500.079384][T10579] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 2501.823430][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4387'. [ 2501.905032][T23956] loop4: detected capacity change from 0 to 1024 [ 2501.930888][T23956] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2501.989818][T23956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2502.758315][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2502.812938][T23967] syzkaller0: entered promiscuous mode [ 2502.889792][T20876] usb 4-1: USB disconnect, device number 42 [ 2503.709859][T20490] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2503.723895][T20490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2503.733913][T20490] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2503.743271][T20490] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2503.754353][T20490] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2503.761878][T20490] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2506.094916][T20490] Bluetooth: hci1: command tx timeout [ 2506.305134][T23975] chnl_net:caif_netlink_parms(): no params data found [ 2506.508557][T23975] bridge0: port 1(bridge_slave_0) entered blocking state [ 2506.551051][T23975] bridge0: port 1(bridge_slave_0) entered disabled state [ 2506.604915][T23975] bridge_slave_0: entered allmulticast mode [ 2506.662607][T23975] bridge_slave_0: entered promiscuous mode [ 2506.693575][T23975] bridge0: port 2(bridge_slave_1) entered blocking state [ 2506.712697][T23975] bridge0: port 2(bridge_slave_1) entered disabled state [ 2506.720004][T23975] bridge_slave_1: entered allmulticast mode [ 2506.751807][T23975] bridge_slave_1: entered promiscuous mode [ 2506.855922][T23975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2506.894558][T23975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2507.049338][T13041] bridge0: port 3(syz_tun) entered disabled state [ 2507.195058][T13041] syz_tun (unregistering): left allmulticast mode [ 2507.220195][T13041] syz_tun (unregistering): left promiscuous mode [ 2507.252027][T13041] bridge0: port 3(syz_tun) entered disabled state [ 2507.325339][T23975] team0: Port device team_slave_0 added [ 2507.338342][T23975] team0: Port device team_slave_1 added [ 2507.449124][ T9117] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2507.513214][T23975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2507.520324][T23975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2507.566448][T23975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2507.597441][T23975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2507.605208][T23975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2507.643984][T23975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2507.709247][ T9117] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2507.835254][ T9117] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2507.957105][ T9117] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2507.985000][T24005] loop6: detected capacity change from 0 to 1024 [ 2507.996900][T24005] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2508.062930][T24005] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2508.122738][T20490] Bluetooth: hci1: command tx timeout [ 2508.561087][T23975] hsr_slave_0: entered promiscuous mode [ 2508.573060][T23975] hsr_slave_1: entered promiscuous mode [ 2508.878831][T23661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2509.024194][T24014] syzkaller0: entered promiscuous mode [ 2510.201800][T20490] Bluetooth: hci1: command tx timeout [ 2512.301756][T20490] Bluetooth: hci1: command tx timeout [ 2515.457582][T24053] loop6: detected capacity change from 0 to 1024 [ 2515.583334][T24053] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2516.029296][T24053] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2517.766791][T23661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2519.045180][T23975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2519.093971][T23975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2519.330384][T23975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2520.618039][T23975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2520.907846][ T9117] hsr_slave_0: left promiscuous mode [ 2520.932895][ T9117] hsr_slave_1: left promiscuous mode [ 2520.941417][ T9117] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2520.959956][ T9117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2520.982354][ T9117] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2521.000636][ T9117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2521.023235][ T9117] bridge_slave_1: left allmulticast mode [ 2521.035363][ T9117] bridge_slave_1: left promiscuous mode [ 2521.046028][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 2521.075655][ T9117] bridge_slave_0: left allmulticast mode [ 2521.081337][ T9117] bridge_slave_0: left promiscuous mode [ 2521.112534][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 2521.222415][ T9117] veth1_macvtap: left promiscuous mode [ 2521.227968][ T9117] veth0_macvtap: left promiscuous mode [ 2521.252361][ T9117] veth1_vlan: left promiscuous mode [ 2521.257809][ T9117] veth0_vlan: left promiscuous mode [ 2525.986806][T20490] Bluetooth: hci2: Dropping invalid advertising data [ 2525.994027][T20490] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2526.406108][ T9117] team0 (unregistering): Port device team_slave_1 removed [ 2526.568365][ T9117] team0 (unregistering): Port device team_slave_0 removed [ 2526.712871][ T9117] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2526.823773][ T9117] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2528.150171][ T9117] .` (unregistering): (slave dummy0): Releasing backup interface [ 2528.424806][ T9117] .` (unregistering): (slave bridge0): Releasing backup interface [ 2528.492466][ T9117] .` (unregistering): Released all slaves [ 2528.820385][T23975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2528.869483][T23975] 8021q: adding VLAN 0 to HW filter on device team0 [ 2528.880529][T24135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4425'. [ 2529.010824][T16536] bridge0: port 1(bridge_slave_0) entered blocking state [ 2529.018077][T16536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2529.100980][T16536] bridge0: port 2(bridge_slave_1) entered blocking state [ 2529.108229][T16536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2529.333148][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.340410][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.346694][T23975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2529.794363][ T9117] IPVS: stop unused estimator thread 0... [ 2531.877133][T23975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2533.207796][T20490] Bluetooth: hci4: Dropping invalid advertising data [ 2533.222426][T20490] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2533.563801][T23975] veth0_vlan: entered promiscuous mode [ 2533.583950][T23975] veth1_vlan: entered promiscuous mode [ 2533.787731][T23975] veth0_macvtap: entered promiscuous mode [ 2533.821974][T23975] veth1_macvtap: entered promiscuous mode [ 2533.902491][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2533.961333][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.049497][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2534.087533][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.118319][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2534.211431][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.279862][T23975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2534.346888][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.416072][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.481725][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.510272][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.551662][T23975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2534.581656][T23975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2534.610705][T23975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2534.637321][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4435'. [ 2534.649342][T23975] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2534.681731][T23975] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2534.690735][T23975] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2534.711819][T23975] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2534.956985][ T3566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2534.980195][ T3566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2535.038186][ T9117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2535.046832][ T9117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2538.477556][T24240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4447'. [ 2538.607064][T20490] Bluetooth: hci1: Dropping invalid advertising data [ 2538.614246][T20490] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2545.612848][T20490] Bluetooth: hci4: Dropping invalid advertising data [ 2545.620797][T20490] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2552.720588][T24348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4479'. [ 2554.722815][T24378] syz.5.4484: attempt to access beyond end of device [ 2554.722815][T24378] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2554.741253][T24378] netlink: 'syz.5.4484': attribute type 2 has an invalid length. [ 2554.749350][T24378] netlink: 'syz.5.4484': attribute type 1 has an invalid length. [ 2554.757472][T24378] netlink: 'syz.5.4484': attribute type 1 has an invalid length. [ 2554.775263][T24378] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4484'. [ 2555.593193][T24384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4489'. [ 2557.787482][T24416] syz.5.4496: attempt to access beyond end of device [ 2557.787482][T24416] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2557.803697][T24416] netlink: 'syz.5.4496': attribute type 2 has an invalid length. [ 2557.812309][T24416] netlink: 'syz.5.4496': attribute type 1 has an invalid length. [ 2557.820253][T24416] netlink: 'syz.5.4496': attribute type 1 has an invalid length. [ 2557.837052][T24416] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4496'. [ 2562.433161][T24460] netlink: 'syz.6.4510': attribute type 2 has an invalid length. [ 2564.507729][T24463] netlink: 'syz.6.4510': attribute type 2 has an invalid length. [ 2565.374302][T24474] syz.3.4508: attempt to access beyond end of device [ 2565.374302][T24474] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2565.391162][T24474] netlink: 'syz.3.4508': attribute type 2 has an invalid length. [ 2565.399115][T24474] netlink: 'syz.3.4508': attribute type 1 has an invalid length. [ 2565.407530][T24474] netlink: 'syz.3.4508': attribute type 1 has an invalid length. [ 2565.424275][T24474] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4508'. [ 2569.063580][T24508] syzkaller0: entered promiscuous mode [ 2569.241969][T24510] syz.3.4521: attempt to access beyond end of device [ 2569.241969][T24510] md34: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 2569.258085][T24510] netlink: 'syz.3.4521': attribute type 2 has an invalid length. [ 2569.266102][T24510] netlink: 'syz.3.4521': attribute type 1 has an invalid length. [ 2569.274826][T24510] netlink: 'syz.3.4521': attribute type 1 has an invalid length. [ 2569.291798][T24510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4521'. [ 2570.052936][T24513] netlink: 'syz.5.4523': attribute type 2 has an invalid length. [ 2570.557566][T24514] netlink: 'syz.5.4523': attribute type 2 has an invalid length. [ 2574.751761][ T9768] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2574.943384][ T9768] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2574.962844][ T9768] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2574.984652][ T9768] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2575.003662][ T9768] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2575.051256][T24551] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2575.085178][ T9768] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 2575.943653][ T9768] usb 5-1: USB disconnect, device number 37 [ 2576.048921][T24567] syzkaller0: entered promiscuous mode [ 2582.781001][T24597] syzkaller0: entered promiscuous mode [ 2586.820117][T24637] syzkaller0: entered promiscuous mode [ 2587.740156][T24626] Bluetooth: hci4: command 0x0406 tx timeout [ 2590.199615][T24666] syzkaller0: entered promiscuous mode [ 2591.877529][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2591.883995][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2595.925427][T24700] syzkaller0: entered promiscuous mode [ 2601.892397][T24766] SET target dimension over the limit! [ 2602.286314][T24771] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2602.306811][T20490] Bluetooth: hci1: Dropping invalid advertising data [ 2602.316550][T20490] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2604.391860][T20490] Bluetooth: hci1: Dropping invalid advertising data [ 2604.399615][T20490] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2604.419265][T24781] syzkaller0: entered promiscuous mode [ 2609.040738][T24807] syzkaller0: entered promiscuous mode [ 2609.601845][T20490] Bluetooth: hci1: Dropping invalid advertising data [ 2609.608816][T20490] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2610.090149][T24817] SET target dimension over the limit! [ 2610.497366][T24822] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2610.584174][T20490] Bluetooth: hci3: Dropping invalid advertising data [ 2610.593120][T20490] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2616.625943][T24850] syzkaller0: entered promiscuous mode [ 2617.662983][T20490] Bluetooth: hci2: Dropping invalid advertising data [ 2617.670054][T20490] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2618.143901][T24863] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2618.306434][T20490] Bluetooth: hci4: Dropping invalid advertising data [ 2618.313460][T20490] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2621.856063][T24884] syzkaller0: entered promiscuous mode [ 2624.156819][T20490] Bluetooth: hci2: Dropping invalid advertising data [ 2624.165420][T20490] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2627.151431][T24925] syzkaller0: entered promiscuous mode [ 2627.713962][T24929] hfs: can't find a HFS filesystem on dev nullb0 [ 2629.096879][T20490] Bluetooth: hci1: command 0x0406 tx timeout [ 2630.364011][T20490] Bluetooth: hci3: Dropping invalid advertising data [ 2630.371824][T20490] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2632.425047][T24967] syzkaller0: entered promiscuous mode [ 2635.980584][T20490] Bluetooth: hci1: Dropping invalid advertising data [ 2635.987507][T20490] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2636.865154][T25004] syzkaller0: entered promiscuous mode [ 2639.566842][T25021] loop6: detected capacity change from 0 to 1024 [ 2639.579335][T25021] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2639.635049][T25021] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2641.184331][T23661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2642.123767][T20490] Bluetooth: hci4: Dropping invalid advertising data [ 2642.130506][T20490] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2642.503177][T25048] syzkaller0: entered promiscuous mode [ 2644.089792][T25060] loop4: detected capacity change from 0 to 1024 [ 2644.101224][T25060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2644.191342][T25060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2646.251815][ T5810] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 2646.298712][T19919] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2646.652356][ T5810] usb 7-1: Using ep0 maxpacket: 8 [ 2646.685314][ T5810] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2646.699177][T20490] Bluetooth: hci2: Dropping invalid advertising data [ 2646.707840][T20490] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2646.723191][ T5810] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2646.733837][ T5810] usb 7-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 2646.745204][ T5810] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2646.759096][ T5810] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2646.768532][ T5810] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2646.815813][ T5810] usbtmc 7-1:16.0: bulk endpoints not found [ 2647.756005][ T5810] usb 7-1: USB disconnect, device number 12 [ 2647.831828][T25084] syzkaller0: entered promiscuous mode [ 2650.195566][T25109] loop6: detected capacity change from 0 to 1024 [ 2650.274221][T25109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2650.388576][T25109] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2651.571155][T23661] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2651.988365][T20490] Bluetooth: hci2: Dropping invalid advertising data [ 2651.995616][T20490] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2652.222728][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.229181][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2653.849365][T25133] syzkaller0: entered promiscuous mode [ 2654.198850][T25137] SET target dimension over the limit! [ 2656.653032][T25153] loop5: detected capacity change from 0 to 1024 [ 2656.671281][T25153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2656.780744][T25153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2658.488988][T20490] Bluetooth: hci4: Dropping invalid advertising data [ 2658.800884][T20490] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2658.965871][T23975] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2660.117008][ T9768] IPVS: starting estimator thread 0... [ 2660.211888][T25177] IPVS: using max 15 ests per chain, 36000 per kthread [ 2661.287109][T25193] syzkaller0: entered promiscuous mode [ 2662.366907][T25212] loop3: detected capacity change from 0 to 1024 [ 2662.410359][T25212] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2662.556710][T25212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2664.031018][T15449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2666.551493][T25238] SET target dimension over the limit! [ 2667.005443][T25240] syzkaller0: entered promiscuous mode [ 2667.940560][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2668.080828][T24626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2668.105508][T24626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2668.117215][T24626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2668.157790][T24626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2668.168263][T24626] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2668.171014][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2668.186249][T24626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2668.361312][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2668.528450][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2668.947439][T25257] chnl_net:caif_netlink_parms(): no params data found [ 2668.997072][T25280] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2669.101253][ T48] tipc: Disabling bearer [ 2669.107426][T24626] Bluetooth: hci4: Dropping invalid advertising data [ 2669.114287][T24626] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2669.141425][ T48] tipc: Left network mode [ 2669.589647][T25257] bridge0: port 1(bridge_slave_0) entered blocking state [ 2669.597446][T25257] bridge0: port 1(bridge_slave_0) entered disabled state [ 2669.614353][T25257] bridge_slave_0: entered allmulticast mode [ 2669.625920][T25257] bridge_slave_0: entered promiscuous mode [ 2669.719374][T25257] bridge0: port 2(bridge_slave_1) entered blocking state [ 2669.729848][T25257] bridge0: port 2(bridge_slave_1) entered disabled state [ 2669.741367][T25257] bridge_slave_1: entered allmulticast mode [ 2669.751505][T25257] bridge_slave_1: entered promiscuous mode [ 2669.835832][T25257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2669.858980][T25257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2670.068104][T25257] team0: Port device team_slave_0 added [ 2670.114151][T25257] team0: Port device team_slave_1 added [ 2670.190078][T25257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2670.198926][T25257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2670.226158][T25257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2670.284463][T24626] Bluetooth: hci0: command tx timeout [ 2670.301269][T25257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2670.311395][T25257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2670.347594][T25257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2670.508463][T25257] hsr_slave_0: entered promiscuous mode [ 2670.533455][T25257] hsr_slave_1: entered promiscuous mode [ 2670.540397][T25257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2670.548258][T25257] Cannot create hsr debugfs directory [ 2670.910823][ T48] hsr_slave_0: left promiscuous mode [ 2670.925022][ T48] hsr_slave_1: left promiscuous mode [ 2670.931358][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2670.941061][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2670.949727][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2670.964685][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2670.975644][ T48] bridge_slave_1: left allmulticast mode [ 2670.986088][ T48] bridge_slave_1: left promiscuous mode [ 2670.994947][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 2671.009193][ T48] bridge_slave_0: left allmulticast mode [ 2671.017820][ T48] bridge_slave_0: left promiscuous mode [ 2671.027960][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 2671.079815][ T48] veth1_macvtap: left promiscuous mode [ 2671.085740][ T48] veth0_macvtap: left promiscuous mode [ 2671.091388][ T48] veth1_vlan: left promiscuous mode [ 2671.097840][ T48] veth0_vlan: left promiscuous mode [ 2672.088058][ T48] team0 (unregistering): Port device team_slave_1 removed [ 2672.170896][ T48] team0 (unregistering): Port device team_slave_0 removed [ 2672.258550][ T48] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2672.339767][ T48] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2672.370523][T24626] Bluetooth: hci0: command tx timeout [ 2672.883135][ T48] .` (unregistering): (slave dummy0): Releasing backup interface [ 2672.973297][ T48] .` (unregistering): Released all slaves [ 2673.584556][ T48] IPVS: stop unused estimator thread 0... [ 2673.758390][T25257] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2673.778060][T25257] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2673.796302][T25257] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2673.819600][T25257] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2673.945803][T25257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2673.971137][T25257] 8021q: adding VLAN 0 to HW filter on device team0 [ 2673.990799][T16536] bridge0: port 1(bridge_slave_0) entered blocking state [ 2673.998059][T16536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2674.020794][T16536] bridge0: port 2(bridge_slave_1) entered blocking state [ 2674.028124][T16536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2674.096315][T25257] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2674.348821][T25257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2674.439127][T25257] veth0_vlan: entered promiscuous mode [ 2674.445059][T24626] Bluetooth: hci0: command tx timeout [ 2674.474294][T25257] veth1_vlan: entered promiscuous mode [ 2674.534426][T25257] veth0_macvtap: entered promiscuous mode [ 2674.556729][T25257] veth1_macvtap: entered promiscuous mode [ 2674.589904][T25257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2674.603711][T25257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2674.615696][T25257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2674.626375][T25257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2674.636320][T25257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2674.647098][T25257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2674.659657][T25257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2674.671308][T25257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2674.682816][T25257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2674.692963][T25257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2674.704263][T25257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2674.714239][T25257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2674.724909][T25257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2674.736658][T25257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2674.752262][T25257] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2674.761017][T25257] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2674.770639][T25257] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2674.779492][T25257] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2674.891886][T23338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2674.900602][T23338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2674.934675][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2674.942908][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2675.227221][T24626] Bluetooth: hci0: Dropping invalid advertising data [ 2675.236174][T24626] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2676.532140][T24626] Bluetooth: hci0: command tx timeout [ 2713.646396][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.653429][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.085810][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.092658][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2792.521714][T20490] Bluetooth: hci0: command 0x0406 tx timeout [ 2836.526052][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.533608][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.975148][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.981923][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.404863][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.411328][ T1288] ieee802154 phy1 wpan1: encryption failed: -22