last executing test programs: 22m13.137548479s ago: executing program 0 (id=127): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r5, 0x400442c8, &(0x7f00000002c0)=ANY=[@ANYRES32=r4]) sendmmsg$alg(r4, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000005}, {0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000600)="1835b1c0ab0a7ced0465268fbff5966088310bdf6979334125902c4054136a0fbd955617a904bfa7486e3cdc8051aa08affdd881c92b676660bbecd19094058d07037916beb1a448f453b11f7ee15fe3f2615086c45338c975f28105f57b4d48addbff113bd4d121b62d0858eb5ea5661eaf9ac54ef7dd1765ce41857bc4e23753c0a9346b9afe934292d58bbad5069aae9027e47d68f71309ca25fe5f", 0x9d}, {&(0x7f00000008c0)="3fd30c862027ede0b999ce7c86796418b8117b3089864219e4cf573c2cd27c4e701f9b3ef91b194d698939e9bcc1d78124daf8f3fe8359173d04c7d78ac7c60fca2a8aa02b1304a23b323f87e94371745aec0b040f4d052b7005a3ad2b33ae", 0x5f}, {&(0x7f0000000940)="14d119835b8768c9defd055fa46533d3db1731f941344ec9bbcd6ed8c9e481fdda7b92dba86c88a126b5b6ae8d489f9bc21059ff8ff2ae6f9f48cfebdb8732be2791eb2da19d324b7d98d92d0b6f2d5d495d1ce435b9e4eeafc09606eb281871c447fe35d5ae0bf384016295d8293d38d84a2ba79b3cd9363e851f54b24a80158cc7b450e5e53af20a63eaab8ed532c932b5666ab65b780d406be256be3b2c0600695f3d2c1138c456cd5f266c57d0c8652086536d6ed993fbbb3ee9ac588cc63f06dbd299abb31bfbcf7bf402f058ead5f53ecc829952a074e6baf86741bd5e899f63bf5ebbfde9bc63fc7947ad5dee2241", 0xf2}, {&(0x7f0000000a40)="0f8adcc448444b3ddfb277101851bcbb07b8008dbf46d49bd06a7d18a5b4be5de32321daf325ed4de432303e1edfcad6eb62ceb1a222f815bdc6d2232afbb91f029798fbb05881b4e0aa3c", 0x4b}, {&(0x7f0000002280)="f16cc76f3830ab7b40487dedbb559281aa4e3a6d1d75d2a89fcb24a5df1df468", 0x20}, {0x0}], 0x6}], 0x2, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil) 22m7.104180218s ago: executing program 0 (id=135): socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0xf1ba, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) symlinkat(&(0x7f0000002000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x400}, 0x8) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x37b9, 0xc000, 0x3, 0xce}) r3 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) syz_open_procfs(0x0, 0x0) readv(r3, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) fanotify_init(0x200, 0x0) 22m4.424054424s ago: executing program 0 (id=140): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_procs(r3, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) sendfile(r4, r4, 0x0, 0x10001) 22m2.032375585s ago: executing program 0 (id=147): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 21m58.167193045s ago: executing program 0 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$sndctrl(&(0x7f0000000580), 0xc290, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x10001) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x9, @local, 0x7}}, 0x0, 0x0, 0x15, 0x0, "a30b3b28ca4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00000000000000efffffff00"}, 0xd8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) 21m57.068813434s ago: executing program 0 (id=154): kexec_load(0x5, 0x0, 0x0, 0xa0000) socket$nl_generic(0x10, 0x3, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000080)) close(0xffffffffffffffff) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMKID={0x14, 0x55, "9bb7d1189aea22c96a834119f61cf921"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000910}, 0x8090) 4m33.767993393s ago: executing program 1 (id=3823): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4m32.176234223s ago: executing program 1 (id=3829): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x68}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x40, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bffc, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r3}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8840) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4m30.427983783s ago: executing program 1 (id=3837): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/189, 0x26, 0xbd, 0x1}, 0x28) setresgid(0xee00, 0xee01, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m18.563980768s ago: executing program 1 (id=3851): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@private0}}, {{@in6=@private1}, 0x0, @in=@dev}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 4m3.358937237s ago: executing program 33 (id=3851): sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@local, @in6=@private0}}, {{@in6=@private1}, 0x0, @in=@dev}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000780)=0x40) 12.605047086s ago: executing program 4 (id=4628): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x4, 0x901) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 12.444992952s ago: executing program 5 (id=4630): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) prlimit64(r1, 0xe, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setreuid(0xee01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) fallocate(0xffffffffffffffff, 0x3, 0x29c00000000000, 0x20000) 11.592402389s ago: executing program 4 (id=4631): socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000440)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100000000020000000008000000", @ANYRES32, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYRES8=r0], 0x30}], 0x1}, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24"], 0x0) 11.404973513s ago: executing program 3 (id=4633): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/189, 0x26, 0xbd, 0x1}, 0x28) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.440982964s ago: executing program 5 (id=4638): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/189, 0x0, 0xbd, 0x1}, 0x28) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.875617885s ago: executing program 2 (id=4640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 6.860221324s ago: executing program 4 (id=4641): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, 0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 6.358217992s ago: executing program 3 (id=4644): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000080)={0xfffffdfe, 0xe2ec0a7, 0x3, 0x7fff, 0xb0, "3d2b9809006e0000cd681ec267a000", 0x2, 0x10}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) 6.071388574s ago: executing program 6 (id=4646): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = io_uring_setup(0x1c6c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.003276836s ago: executing program 3 (id=4647): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.947570716s ago: executing program 6 (id=4648): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setreuid(0xee01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) fallocate(0xffffffffffffffff, 0x3, 0x29c00000000000, 0x20000) 5.872508141s ago: executing program 2 (id=4649): r0 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x800, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000180)="00fd", 0x2}], 0x1, &(0x7f0000000040)=[@init={0x18, 0x84, 0x0, {0x2800, 0x7f, 0x3, 0xfff7}}], 0x18, 0x4855}, 0x24000052) 5.368621209s ago: executing program 4 (id=4650): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x40, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bffc, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r3}}], 0x1, 0x0, 0x0) 4.715928899s ago: executing program 6 (id=4651): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 4.616047421s ago: executing program 2 (id=4652): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x170, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe9, 0x6, "3d842b6d1629c72c20e49c5995197844d16ac0cba1136fe66e751d48d61275b27f3b78c59f1f4add1c655e2c5fed2bc7a36cd97f957589f6d5274ec2f832829f561640eca1f8b90ac6b2eefffb77ae94cb86039f7166856b6eb39539eaae7a9727695742291b4f771374b4f6df7d926b8a35a8b79da065851b2c84e9252eb00b90576fce807a7f6ddb65c89e7b4130ce9bf3b264eeaa6894d3dfcca7baa4f7f54b778deb9466836838f7a4b1dab35f489ff8847bcdcd8bdcb24d21cf17725a5ab212c360409d4a6663032e19d82d6c6fbe32bf6cacedd3915aa70fbf2ff0fd3c810f54461a"}]}, @NFT_MSG_DELCHAIN={0x7c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x270}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x3caa}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 4.602825224s ago: executing program 3 (id=4653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "46c8"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.536475285s ago: executing program 5 (id=4654): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0x1000, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0x28}}, 0x0) 4.497466927s ago: executing program 4 (id=4655): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc082003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "46c8"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.41755544s ago: executing program 2 (id=4656): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000200000000100000008000100020000001c0004800500030001000000050003000100000005000300020000050800020003"], 0x40}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@dev}, {@in6=@private0, 0xfffffffc, 0x6c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff, 0x200000000000000}, 0x38) listen(r0, 0x402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYRES16, @ANYBLOB="0100000010651fbe347b322b00000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 4.398694042s ago: executing program 6 (id=4657): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000009b80)={0x40000012}) 4.381272132s ago: executing program 5 (id=4658): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = io_uring_setup(0x1c6c, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.207663413s ago: executing program 2 (id=4659): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 3.531427047s ago: executing program 5 (id=4660): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(&(0x7f0000000340)=""/243, 0xf3) setreuid(0xee01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) fallocate(0xffffffffffffffff, 0x3, 0x29c00000000000, 0x20000) 3.076878832s ago: executing program 3 (id=4661): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setreuid(0xee01, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) fallocate(0xffffffffffffffff, 0x3, 0x29c00000000000, 0x20000) 3.024592715s ago: executing program 6 (id=4662): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x4, 0x901) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 2.251402294s ago: executing program 2 (id=4663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) 2.238248098s ago: executing program 4 (id=4664): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=""/189, 0x0, 0xbd, 0x1}, 0x28) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.035823343s ago: executing program 5 (id=4665): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff000101"], 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.090307728s ago: executing program 6 (id=4666): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x40, 0x2, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bffc, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d, 0x0, r3}}], 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=4667): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x170, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe9, 0x6, "3d842b6d1629c72c20e49c5995197844d16ac0cba1136fe66e751d48d61275b27f3b78c59f1f4add1c655e2c5fed2bc7a36cd97f957589f6d5274ec2f832829f561640eca1f8b90ac6b2eefffb77ae94cb86039f7166856b6eb39539eaae7a9727695742291b4f771374b4f6df7d926b8a35a8b79da065851b2c84e9252eb00b90576fce807a7f6ddb65c89e7b4130ce9bf3b264eeaa6894d3dfcca7baa4f7f54b778deb9466836838f7a4b1dab35f489ff8847bcdcd8bdcb24d21cf17725a5ab212c360409d4a6663032e19d82d6c6fbe32bf6cacedd3915aa70fbf2ff0fd3c810f54461a"}]}, @NFT_MSG_DELCHAIN={0x7c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x10001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}]}]}, @NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x0, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4000023}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'virt_wifi0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x298}, 0x1, 0x0, 0x0, 0x80}, 0x20000085) r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x3caa}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) kernel console output (not intermixed with test programs): Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1016.607117][T16511] Call Trace: [ 1016.607126][T16511] [ 1016.607134][T16511] dump_stack_lvl+0xe8/0x150 [ 1016.607174][T16511] __get_user_pages+0x21e9/0x2590 [ 1016.607310][T16511] ? down_read_killable+0x14c/0x220 [ 1016.607391][T16511] get_user_pages_unlocked+0x1ee/0x6f0 [ 1016.607416][T16511] hva_to_pfn+0x365/0xf10 [ 1016.607462][T16511] ? arch_stack_walk+0xfb/0x150 [ 1016.607558][T16511] ? __lock_acquire+0x683/0x2ce0 [ 1016.607602][T16511] ? __pfx_hva_to_pfn+0x10/0x10 [ 1016.607619][T16511] ? register_lock_class+0x31/0x2e0 [ 1016.607642][T16511] ? xa_load+0x60/0x210 [ 1016.607672][T16511] ? kvm_follow_pfn+0x21a/0x3c0 [ 1016.607693][T16511] __kvm_faultin_pfn+0xaa/0x100 [ 1016.607723][T16511] kvm_mmu_faultin_pfn+0x73b/0x1610 [ 1016.607802][T16511] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 1016.607829][T16511] ? __kvm_memslots+0x127/0x210 [ 1016.607852][T16511] kvm_tdp_page_fault+0x273/0x370 [ 1016.607871][T16511] kvm_mmu_do_page_fault+0x338/0x660 [ 1016.607892][T16511] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1016.607913][T16511] ? vmx_vcpu_run+0x1035/0x2ee0 [ 1016.607982][T16511] ? kvm_requeue_exception+0xd0/0x280 [ 1016.608023][T16511] kvm_mmu_page_fault+0x1f2/0xaa0 [ 1016.608044][T16511] ? __pfx_handle_ept_violation+0x10/0x10 [ 1016.608063][T16511] vmx_handle_exit+0xfa4/0x16e0 [ 1016.608095][T16511] vcpu_run+0x4d45/0x7940 [ 1016.608184][T16511] ? vcpu_run+0x362a/0x7940 [ 1016.608241][T16511] ? __pfx_vcpu_run+0x10/0x10 [ 1016.608260][T16511] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 1016.608282][T16511] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 1016.608313][T16511] kvm_arch_vcpu_ioctl_run+0x13ed/0x2010 [ 1016.608344][T16511] ? kvm_arch_vcpu_ioctl_run+0x2ba/0x2010 [ 1016.608364][T16511] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1016.608383][T16511] ? do_raw_spin_lock+0x12b/0x2f0 [ 1016.608416][T16511] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1016.608463][T16511] ? lockdep_hardirqs_on+0x7a/0x110 [ 1016.608484][T16511] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1016.608505][T16511] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1016.608524][T16511] ? do_raw_spin_lock+0x12b/0x2f0 [ 1016.608546][T16511] ? lock_acquire+0x106/0x350 [ 1016.608563][T16511] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1016.608586][T16511] ? rt_write_unlock+0x19c/0x360 [ 1016.608607][T16511] ? rt_write_unlock+0x1a8/0x360 [ 1016.608627][T16511] kvm_vcpu_ioctl+0xa64/0xfe0 [ 1016.608672][T16511] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1016.608689][T16511] ? hook_file_ioctl+0x1f3/0x600 [ 1016.608742][T16511] ? __asan_memset+0x22/0x50 [ 1016.608767][T16511] ? smack_file_ioctl+0x331/0x360 [ 1016.608809][T16511] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1016.608833][T16511] ? __fget_files+0x2a/0x420 [ 1016.608850][T16511] ? __fget_files+0x3a8/0x420 [ 1016.608866][T16511] ? __fget_files+0x2a/0x420 [ 1016.608885][T16511] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1016.608901][T16511] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1016.608919][T16511] __se_sys_ioctl+0xff/0x170 [ 1016.608966][T16511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.608987][T16511] do_syscall_64+0x174/0x580 [ 1016.609009][T16511] ? trace_irq_disable+0x3b/0x140 [ 1016.609026][T16511] ? clear_bhb_loop+0x40/0x90 [ 1016.609045][T16511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.609061][T16511] RIP: 0033:0x7f94e43be0d9 [ 1016.609076][T16511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.609090][T16511] RSP: 002b:00007f94e2616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.609108][T16511] RAX: ffffffffffffffda RBX: 00007f94e4645fa0 RCX: 00007f94e43be0d9 [ 1016.609121][T16511] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1016.609131][T16511] RBP: 00007f94e4455024 R08: 0000000000000000 R09: 0000000000000000 [ 1016.609141][T16511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1016.609151][T16511] R13: 00007f94e4646038 R14: 00007f94e4645fa0 R15: 00007ffda2c22188 [ 1016.609176][T16511] [ 1017.287029][T16528] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3151'. [ 1017.294093][T16528] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3151'. [ 1017.826137][ T1174] bridge_slave_1: left allmulticast mode [ 1017.826169][ T1174] bridge_slave_1: left promiscuous mode [ 1017.826410][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.026277][ T1174] bridge_slave_0: left allmulticast mode [ 1018.026309][ T1174] bridge_slave_0: left promiscuous mode [ 1018.026546][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.121087][T16556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 1018.446198][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1019.685833][ T1174] bond0 (unregistering): left promiscuous mode [ 1019.685853][ T1174] bond_slave_0: left promiscuous mode [ 1019.686085][ T1174] bond_slave_1: left promiscuous mode [ 1019.737488][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.816483][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.874189][ T1174] bond0 (unregistering): Released all slaves [ 1020.091333][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1023.214548][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3180'. [ 1025.448103][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3190'. [ 1025.822381][T16678] netlink: 748 bytes leftover after parsing attributes in process `syz.5.3194'. [ 1025.822405][T16678] netlink: 748 bytes leftover after parsing attributes in process `syz.5.3194'. [ 1026.497589][ T1174] batadv0: left promiscuous mode [ 1026.711935][ T1174] hsr_slave_0: left promiscuous mode [ 1026.746777][ T1174] hsr_slave_1: left promiscuous mode [ 1026.748746][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.748770][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.793482][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.793515][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1027.040232][ T1174] veth1_macvtap: left promiscuous mode [ 1027.040332][ T1174] veth0_macvtap: left promiscuous mode [ 1027.057692][ T1174] veth1_vlan: left promiscuous mode [ 1027.057880][ T1174] veth0_vlan: left promiscuous mode [ 1032.947494][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 1033.912798][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 1034.272508][T16729] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1034.272549][T16729] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1034.272570][T16729] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1037.427160][T16784] fuse: Bad value for 'fd' [ 1037.668398][T16790] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1037.668424][T16790] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1037.668550][T16790] netlink: 584 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1038.188399][T16343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1038.356211][T16343] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1038.363745][T16343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1039.973091][T16343] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1040.938542][T16806] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1040.938585][T16806] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1040.938605][T16806] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1040.941153][T16343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1041.655494][T16343] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1041.785433][T16343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1042.215475][T16343] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1042.652277][T16850] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3230'. [ 1042.652302][T16850] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3230'. [ 1042.652317][T16850] netlink: 584 bytes leftover after parsing attributes in process `syz.3.3230'. [ 1042.743602][T16343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.801526][T16343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.830294][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.830494][ T5862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.940870][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.941988][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.996624][T16343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.425145][T16343] veth0_vlan: entered promiscuous mode [ 1044.444604][T16343] veth1_vlan: entered promiscuous mode [ 1045.241139][T16890] netlink: 'syz.2.3238': attribute type 1 has an invalid length. [ 1045.270710][T16343] veth0_macvtap: entered promiscuous mode [ 1045.282755][T16343] veth1_macvtap: entered promiscuous mode [ 1045.336238][T16343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.350371][T16343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.705194][T16900] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3238'. [ 1047.710013][ T5863] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.710228][ T5863] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.710447][ T5863] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.831099][ T93] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.029183][T16916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3245'. [ 1048.133530][T16919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3245'. [ 1048.138851][T16921] netlink: 'syz.1.3247': attribute type 1 has an invalid length. [ 1048.203634][T16924] netlink: 'syz.1.3247': attribute type 10 has an invalid length. [ 1048.203652][T16924] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3247'. [ 1048.349982][T16921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1048.510323][T16928] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3249'. [ 1048.510346][T16928] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3249'. [ 1048.510360][T16928] netlink: 584 bytes leftover after parsing attributes in process `syz.5.3249'. [ 1048.701926][T16936] netlink: 'syz.1.3251': attribute type 1 has an invalid length. [ 1049.106097][T16940] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3251'. [ 1051.060655][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.060676][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.204130][ T5959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1051.204149][ T5959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.198980][T16989] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3265'. [ 1053.199005][T16989] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3265'. [ 1053.199020][T16989] netlink: 584 bytes leftover after parsing attributes in process `syz.1.3265'. [ 1053.959346][ T4911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1053.996110][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1054.049579][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1054.053602][ T4911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1054.054837][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1054.139385][ T5733] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1054.331351][ T5733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.331419][ T5733] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 5376, setting to 1024 [ 1054.331446][ T5733] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1054.331469][ T5733] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1054.337553][ T5733] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1054.337582][ T5733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.337601][ T5733] usb 4-1: Product: syz [ 1054.337614][ T5733] usb 4-1: Manufacturer: syz [ 1054.337628][ T5733] usb 4-1: SerialNumber: syz [ 1054.437740][ T5733] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1054.773621][ T5733] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1054.812085][ T5733] scsi host1: usb-storage 4-1:1.0 [ 1055.048167][ T5733] usb 4-1: USB disconnect, device number 25 [ 1055.281893][T17032] netlink: 'syz.1.3277': attribute type 1 has an invalid length. [ 1055.509565][T16958] syz_tun (unregistering): left allmulticast mode [ 1055.590345][T17038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3277'. [ 1056.285853][ T5604] Bluetooth: hci3: command tx timeout [ 1058.365765][ T5604] Bluetooth: hci3: command tx timeout [ 1059.177488][T17079] binder: 17077:17079 ioctl c0306201 0 returned -14 [ 1060.445820][ T5604] Bluetooth: hci3: command tx timeout [ 1060.853872][T17002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.854892][T17002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.855062][T17002] bridge_slave_0: entered allmulticast mode [ 1060.870194][T17002] bridge_slave_0: entered promiscuous mode [ 1060.902564][T17002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.903475][T17002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.903638][T17002] bridge_slave_1: entered allmulticast mode [ 1060.913612][T17002] bridge_slave_1: entered promiscuous mode [ 1061.183126][T17002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1061.217503][T17002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.290673][T17002] team0: Port device team_slave_0 added [ 1061.302633][T17002] team0: Port device team_slave_1 added [ 1061.377834][T17002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.377848][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.377873][T17002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1061.381891][T17002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1061.381904][T17002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.381929][T17002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.525893][ T5604] Bluetooth: hci3: command tx timeout [ 1063.716914][T17002] hsr_slave_0: entered promiscuous mode [ 1063.719699][T17002] hsr_slave_1: entered promiscuous mode [ 1063.809239][T17125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1064.245466][T17133] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3305'. [ 1065.904151][T17002] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.016143][T17149] binder: 17148:17149 ioctl c0306201 0 returned -14 [ 1066.972924][T17157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3313'. [ 1067.494332][T17166] netlink: 136 bytes leftover after parsing attributes in process `syz.4.3317'. [ 1067.663901][T17002] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.341231][T17002] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.648322][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1069.648381][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.601893][T17002] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.725255][T17200] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3328'. [ 1070.832162][T17202] netlink: 'syz.4.3329': attribute type 1 has an invalid length. [ 1070.832182][T17202] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3329'. [ 1070.898116][T17198] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1070.898156][T17198] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1070.898176][T17198] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1073.973507][T17223] loop8: detected capacity change from 0 to 7 [ 1074.010673][T17223] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1074.010699][T17223] loop8: partition table partially beyond EOD, truncated [ 1074.011990][T17223] loop8: p1 size 4134591919 extends beyond EOD, truncated [ 1075.768363][T16301] udevd[16301]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1076.056361][ T5940] bridge_slave_1: left allmulticast mode [ 1076.056484][ T5940] bridge_slave_1: left promiscuous mode [ 1076.056727][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.060879][T17245] netlink: 'syz.5.3341': attribute type 1 has an invalid length. [ 1076.060890][T17245] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3341'. [ 1077.544257][ T4911] Bluetooth: hci0: command 0x0406 tx timeout [ 1078.056501][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.137016][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.158314][ T5940] bond0 (unregistering): Released all slaves [ 1078.164700][ T5940] bond1 (unregistering): Released all slaves [ 1078.181033][ T5940] bond2 (unregistering): Released all slaves [ 1078.194702][ T5940] bond3 (unregistering): Released all slaves [ 1078.212273][ T5940] bond4 (unregistering): Released all slaves [ 1078.258152][ T5940] bond5 (unregistering): (slave veth3): Releasing active interface [ 1078.317171][ T5940] bond5 (unregistering): Released all slaves [ 1078.814073][T17268] loop8: detected capacity change from 0 to 7 [ 1078.835870][T17274] netlink: 'syz.1.3350': attribute type 1 has an invalid length. [ 1078.946392][ T5940] tipc: Disabling bearer [ 1078.946962][ T5940] tipc: Left network mode [ 1079.058476][T17278] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3350'. [ 1079.224070][T17268] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1079.224098][T17268] loop8: partition table partially beyond EOD, truncated [ 1079.224335][T17268] loop8: p1 size 4134591919 extends beyond EOD, truncated [ 1079.608186][T17291] netlink: 'syz.3.3356': attribute type 1 has an invalid length. [ 1079.608205][T17291] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3356'. [ 1079.823840][T16301] udevd[16301]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1081.788758][T17002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1081.828707][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1081.834631][T17002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1081.915532][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1081.999169][T17002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1082.122584][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1082.369873][T17002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1082.398921][T17002] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1084.206765][T17355] loop8: detected capacity change from 0 to 7 [ 1084.244034][T17355] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1084.244060][T17355] loop8: partition table partially beyond EOD, truncated [ 1084.244304][T17355] loop8: p1 size 4134591919 extends beyond EOD, truncated [ 1084.567944][ T5940] hsr_slave_0: left promiscuous mode [ 1084.570310][T16301] udevd[16301]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1084.616615][ T5940] hsr_slave_1: left promiscuous mode [ 1084.619989][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.620018][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.674834][ T5940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.730490][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.996767][ T5940] veth1_macvtap: left promiscuous mode [ 1084.996879][ T5940] veth0_macvtap: left promiscuous mode [ 1084.998199][ T5940] veth1_vlan: left promiscuous mode [ 1084.998388][ T5940] veth0_vlan: left promiscuous mode [ 1085.155750][ T5732] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1086.068156][ T5732] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1086.068185][ T5732] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.068204][ T5732] usb 4-1: config 220 has no interface number 2 [ 1086.068279][ T5732] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1086.068305][ T5732] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1086.068322][ T5732] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1086.068339][ T5732] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1086.072434][ T5732] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1086.072463][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.072483][ T5732] usb 4-1: Product: syz [ 1086.072498][ T5732] usb 4-1: Manufacturer: syz [ 1086.072512][ T5732] usb 4-1: SerialNumber: syz [ 1086.419723][ T5732] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1086.419787][ T5732] uvcvideo 4-1:220.0: No valid video chain found. [ 1086.419954][ T5732] usb 4-1: selecting invalid altsetting 0 [ 1086.481421][ T5732] usb 4-1: selecting invalid altsetting 0 [ 1086.481458][ T5732] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1086.507333][ T5732] usb 4-1: USB disconnect, device number 26 [ 1088.007735][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 1088.036183][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 1088.228167][T17380] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1088.228202][T17380] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1088.228221][T17380] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1088.479676][T17002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1088.513214][T17388] loop8: detected capacity change from 0 to 7 [ 1088.514358][T17388] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1088.514382][T17388] loop8: partition table partially beyond EOD, truncated [ 1088.514596][T17388] loop8: p1 size 4134591919 extends beyond EOD, truncated [ 1088.557139][T17002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1088.592875][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.592990][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1088.637247][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.637400][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1088.778106][T16301] udevd[16301]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1090.194375][T17002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1090.284649][T17002] veth0_vlan: entered promiscuous mode [ 1090.301863][T17002] veth1_vlan: entered promiscuous mode [ 1091.031383][T17002] veth0_macvtap: entered promiscuous mode [ 1091.044762][T17002] veth1_macvtap: entered promiscuous mode [ 1091.104535][T17002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.132675][T17002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.244438][T17427] loop8: detected capacity change from 0 to 7 [ 1091.260523][T17427] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 1091.260548][T17427] loop8: partition table partially beyond EOD, truncated [ 1091.260770][T17427] loop8: p1 size 4134591919 extends beyond EOD, truncated [ 1091.261708][ T5942] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.262121][ T5942] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.262450][ T5942] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.909282][T16301] udevd[16301]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 1091.975114][ T5942] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.618947][ T5862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.618965][ T5862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1092.785347][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1092.785368][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1093.448782][T17462] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1094.027738][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1094.177987][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1094.178018][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1094.178043][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 25977, setting to 1024 [ 1094.178069][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1094.180657][ T9] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1094.180683][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.180789][ T9] usb 5-1: Product: syz [ 1094.180803][ T9] usb 5-1: Manufacturer: syz [ 1094.180818][ T9] usb 5-1: SerialNumber: syz [ 1094.283010][ T9] usb 5-1: config 0 descriptor?? [ 1094.284353][T17449] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1094.311593][ T9] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1094.498512][T17449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.500901][T17449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.529437][ T9] scsi host1: usb-storage 5-1:0.0 [ 1094.555254][ T9] usb 5-1: USB disconnect, device number 20 [ 1095.860372][T17482] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3413'. [ 1095.860396][T17482] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3413'. [ 1095.860412][T17482] netlink: 584 bytes leftover after parsing attributes in process `syz.3.3413'. [ 1096.964268][T17485] netlink: 'syz.4.3415': attribute type 5 has an invalid length. [ 1096.964288][T17485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3415'. [ 1097.263565][T17497] affs: No valid root block on device nullb0 [ 1097.461273][T17503] netlink: 'syz.5.3423': attribute type 1 has an invalid length. [ 1097.773808][T17508] netlink: 'syz.5.3423': attribute type 10 has an invalid length. [ 1097.773827][T17508] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3423'. [ 1097.806022][T17503] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1099.481525][T17522] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3428'. [ 1099.481550][T17522] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3428'. [ 1099.481566][T17522] netlink: 584 bytes leftover after parsing attributes in process `syz.1.3428'. [ 1100.038842][T17534] /dev/nullb0: Can't lookup blockdev [ 1100.127061][T17539] netlink: 'syz.5.3435': attribute type 1 has an invalid length. [ 1100.226474][T17545] fuse: Bad value for 'fd' [ 1100.240201][T17549] netlink: 'syz.5.3435': attribute type 10 has an invalid length. [ 1100.240219][T17549] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3435'. [ 1100.321221][T17539] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1101.254444][T17570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1104.677408][T17587] affs: No valid root block on device nullb0 [ 1106.207239][T17602] netlink: 'syz.4.3450': attribute type 1 has an invalid length. [ 1106.315382][T17602] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1106.325092][T17606] netlink: 'syz.4.3450': attribute type 10 has an invalid length. [ 1106.325111][T17606] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3450'. [ 1106.435486][T17606] dummy0: entered promiscuous mode [ 1108.161102][T17625] /dev/nullb0: Can't lookup blockdev [ 1110.013074][T17648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1113.356044][T17659] affs: No valid root block on device nullb0 [ 1115.273717][T17688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1117.973235][T17705] affs: No valid root block on device nullb0 [ 1118.413962][T17713] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.254965][T17731] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3492'. [ 1120.254991][T17731] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3492'. [ 1120.255007][T17731] netlink: 584 bytes leftover after parsing attributes in process `syz.3.3492'. [ 1120.343351][T17733] bridge0: port 3(batadv1) entered blocking state [ 1120.343609][T17733] bridge0: port 3(batadv1) entered disabled state [ 1120.343778][T17733] batadv1: entered allmulticast mode [ 1120.365394][T17733] batadv1: entered promiscuous mode [ 1120.663503][T17740] affs: No valid root block on device nullb0 [ 1120.841318][ T12] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1120.841336][ T12] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1120.987173][T17749] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3500'. [ 1121.105126][T17756] netlink: 'syz.3.3500': attribute type 10 has an invalid length. [ 1121.105147][T17756] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3500'. [ 1121.410506][T17756] dummy0: entered promiscuous mode [ 1121.512100][T17761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1122.509592][T17774] affs: No valid root block on device nullb0 [ 1122.760315][T17780] netlink: 'syz.3.3511': attribute type 1 has an invalid length. [ 1122.764543][T17779] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3510'. [ 1122.764564][T17779] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3510'. [ 1122.764578][T17779] netlink: 584 bytes leftover after parsing attributes in process `syz.1.3510'. [ 1122.999096][T17780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1123.002381][T17783] dummy0: left promiscuous mode [ 1123.144665][T17783] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 1123.160804][ T5862] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1124.418853][ T93] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1125.383209][T17814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3519'. [ 1125.405391][T17814] dummy0: left promiscuous mode [ 1125.431268][T17814] netlink: 'syz.4.3519': attribute type 10 has an invalid length. [ 1125.431280][T17814] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3519'. [ 1125.431442][T17814] dummy0: entered promiscuous mode [ 1125.586352][T17819] /dev/nullb0: Can't lookup blockdev [ 1125.844623][T17832] netlink: 'syz.5.3527': attribute type 1 has an invalid length. [ 1126.062295][T17832] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1126.064059][T17836] dummy0: left promiscuous mode [ 1126.121129][T17836] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 1126.170803][T16243] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1126.345857][T16243] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1126.807636][T17856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1126.934700][T17861] netlink: 'syz.1.3534': attribute type 10 has an invalid length. [ 1126.934720][T17861] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3534'. [ 1127.109429][T17863] affs: No valid root block on device nullb0 [ 1127.174107][T17859] dummy0: left promiscuous mode [ 1127.228466][T17861] dummy0: entered promiscuous mode [ 1127.732665][T17879] netlink: 'syz.5.3542': attribute type 1 has an invalid length. [ 1127.847636][T17879] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1128.045831][ T5604] Bluetooth: hci4: command 0x0406 tx timeout [ 1128.152999][T17886] comedi comedi0: 8255: I/O base address not correctly aligned [ 1129.124640][T17882] bond4: (slave dummy0): Removing an active aggregator [ 1129.143515][T17882] bond4: (slave dummy0): Releasing backup interface [ 1129.198047][T17882] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 1129.296017][ T5959] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1129.515911][ T5790] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1129.518069][ T5959] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1130.725575][ T5790] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1130.725614][ T5790] usb 4-1: can't read configurations, error -71 [ 1130.884638][T17921] netlink: 'syz.5.3557': attribute type 1 has an invalid length. [ 1131.180132][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1131.180198][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1131.967707][T17921] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1132.103696][T17924] bond5: (slave dummy0): Removing an active aggregator [ 1132.104505][T17924] bond5: (slave dummy0): Releasing backup interface [ 1132.277388][T17924] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 1132.387305][ T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1132.634039][T16245] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1132.682673][T17940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1132.949900][T17942] bridge0: port 4(batadv2) entered blocking state [ 1132.950588][T17942] bridge0: port 4(batadv2) entered disabled state [ 1132.950761][T17942] batadv2: entered allmulticast mode [ 1132.978824][T17942] batadv2: entered promiscuous mode [ 1133.751643][T17958] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1134.256841][ T13] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1134.256859][ T13] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1135.538414][ T5733] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1136.034825][T17994] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3583'. [ 1137.723703][ T5733] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1137.723740][ T5733] usb 4-1: can't read configurations, error -71 [ 1139.785768][ T822] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1140.282037][T18054] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1144.106721][ T822] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1144.106757][ T822] usb 5-1: can't read configurations, error -71 [ 1144.362051][T18098] affs: No valid root block on device nullb0 [ 1152.753332][T18166] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1152.753358][T18166] netlink: 236 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1152.753373][T18166] netlink: 584 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1164.393903][T18254] comedi comedi0: 8255: I/O base address not correctly aligned [ 1166.625747][ T822] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1166.877394][ T822] usb 4-1: not running at top speed; connect to a high speed hub [ 1166.879578][ T822] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1166.879628][ T822] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 1166.879650][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.263636][ T822] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1167.704599][ T822] gspca_spca501: reg write: error -71 [ 1167.704616][ T822] spca501 4-1:1.0: Reg write failed for 0x02,0xa048,0x00 [ 1167.704703][ T822] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 1167.734722][ T822] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 1167.760734][ T822] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 1167.762755][ T822] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 1167.762847][ T822] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 1167.763477][ T822] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 1167.827549][ T822] usb 4-1: USB disconnect, device number 31 [ 1168.023583][T18276] syzkaller0: entered promiscuous mode [ 1168.023697][T18276] syzkaller0: entered allmulticast mode [ 1168.067742][T18287] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3677'. [ 1173.865948][T18340] comedi comedi0: 8255: I/O base address not correctly aligned [ 1179.412841][ T5604] Bluetooth: hci3: command 0x0406 tx timeout [ 1184.033060][T18437] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1184.033236][T18437] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1184.033530][T18437] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1187.780968][T18468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3737'. [ 1187.835758][T18468] bridge0: port 3(batadv1) entered blocking state [ 1187.835939][T18468] bridge0: port 3(batadv1) entered disabled state [ 1187.836105][T18468] batadv1: entered allmulticast mode [ 1187.842511][T18468] batadv1: entered promiscuous mode [ 1188.922264][ T93] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1188.922282][ T93] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1193.020913][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1193.150553][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1194.798102][ T5733] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1196.041257][ T5733] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1196.041364][ T5733] usb 5-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1196.079252][ T5733] usb 5-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1196.079281][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.079301][ T5733] usb 5-1: Product: syz [ 1196.079314][ T5733] usb 5-1: Manufacturer: syz [ 1196.079328][ T5733] usb 5-1: SerialNumber: syz [ 1196.130498][ T5733] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1196.204913][ T5733] usb-storage 5-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1196.220132][ T5733] scsi host1: usb-storage 5-1:1.0 [ 1197.192916][ T5733] usb 5-1: USB disconnect, device number 23 [ 1206.510725][T18621] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1206.510766][T18621] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1206.510778][T18621] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1207.045469][T18627] syzkaller0: entered promiscuous mode [ 1207.045508][T18627] syzkaller0: entered allmulticast mode [ 1209.302458][T18661] fuse: Bad value for 'group_id' [ 1209.302509][T18661] fuse: Bad value for 'group_id' [ 1210.893976][T18680] netlink: 'syz.1.3799': attribute type 1 has an invalid length. [ 1211.050846][T18686] netlink: 'syz.1.3799': attribute type 10 has an invalid length. [ 1211.050867][T18686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3799'. [ 1211.072586][T18684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3801'. [ 1211.269510][T18680] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1211.655765][ T822] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1211.808726][ T822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.808771][ T822] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.808803][ T822] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1211.808825][ T822] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1211.813557][ T822] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1211.813585][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.813605][ T822] usb 3-1: Product: syz [ 1211.813620][ T822] usb 3-1: Manufacturer: syz [ 1211.813634][ T822] usb 3-1: SerialNumber: syz [ 1211.850034][ T822] usbserial_generic 3-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1211.850055][ T822] usbserial_generic 3-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1211.850194][ T822] usbserial_generic 3-1:1.0: generic converter detected [ 1212.827498][ T822] usb 3-1: generic converter now attached to ttyUSB0 [ 1213.163729][ T822] usb 3-1: USB disconnect, device number 31 [ 1213.334177][ T822] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1213.457721][ T822] usbserial_generic 3-1:1.0: device disconnected [ 1215.153069][T18718] netlink: 'syz.2.3814': attribute type 1 has an invalid length. [ 1215.164439][T18716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3811'. [ 1215.203795][T18718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1215.328939][T18718] netlink: 'syz.2.3814': attribute type 10 has an invalid length. [ 1215.328960][T18718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1215.370010][T18716] bridge0: port 3(batadv1) entered blocking state [ 1215.371304][T18716] bridge0: port 3(batadv1) entered disabled state [ 1215.371475][T18716] batadv1: entered allmulticast mode [ 1215.396976][T18716] batadv1: entered promiscuous mode [ 1215.440669][T18718] dummy0: entered promiscuous mode [ 1215.748284][T18732] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3818'. [ 1216.610900][ T5942] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1216.610917][ T5942] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1217.791657][T18752] netlink: 'syz.4.3826': attribute type 1 has an invalid length. [ 1218.330400][T18752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1218.703239][T18753] dummy0: left promiscuous mode [ 1218.995766][T18753] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 1219.000727][ T5949] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1219.062547][T18761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3827'. [ 1219.149355][T18761] bridge0: port 3(batadv1) entered blocking state [ 1219.149475][T18761] bridge0: port 3(batadv1) entered disabled state [ 1219.149636][T18761] batadv1: entered allmulticast mode [ 1219.175598][T18761] batadv1: entered promiscuous mode [ 1219.243014][ T5863] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1220.455037][ T13] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1220.455052][ T13] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1220.705772][ T36] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1220.858708][ T36] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.858789][ T36] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 5376, setting to 1024 [ 1220.858816][ T36] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1220.858837][ T36] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1220.886570][ T36] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1220.886598][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.886619][ T36] usb 4-1: Product: syz [ 1220.886640][ T36] usb 4-1: Manufacturer: syz [ 1220.886653][ T36] usb 4-1: SerialNumber: syz [ 1220.902076][T18784] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3836'. [ 1225.612388][ T36] usb-storage 4-1:1.0: USB Mass Storage device detected [ 1225.647234][ T36] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1225.648440][ T36] scsi host1: usb-storage 4-1:1.0 [ 1225.740176][ T36] usb 4-1: USB disconnect, device number 32 [ 1226.262303][T18807] bridge0: port 4(batadv2) entered blocking state [ 1226.262625][T18807] bridge0: port 4(batadv2) entered disabled state [ 1226.262803][T18807] batadv2: entered allmulticast mode [ 1227.187905][T18807] batadv2: entered promiscuous mode [ 1229.553569][ T5944] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 1229.553584][ T5944] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 1232.245036][T18831] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1232.935750][ T5607] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1233.089852][ T5607] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.089923][ T5607] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 5376, setting to 1024 [ 1233.089948][ T5607] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1233.089970][ T5607] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1233.142770][ T5607] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 1233.142798][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.142819][ T5607] usb 3-1: Product: syz [ 1233.142833][ T5607] usb 3-1: Manufacturer: syz [ 1233.142846][ T5607] usb 3-1: SerialNumber: syz [ 1233.210043][ T5607] usb-storage 3-1:1.0: USB Mass Storage device detected [ 1233.231045][ T5607] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 1233.233800][ T5607] scsi host1: usb-storage 3-1:1.0 [ 1233.465792][ T5733] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1233.615737][ T5733] usb 4-1: Using ep0 maxpacket: 8 [ 1233.619389][ T5733] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1233.622283][ T5733] usb 4-1: config 4 interface 0 has no altsetting 0 [ 1233.628830][ T5733] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1233.628855][ T5733] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1233.628874][ T5733] usb 4-1: Manufacturer: syz [ 1233.628888][ T5733] usb 4-1: SerialNumber: syz [ 1233.707275][ T36] usb 3-1: USB disconnect, device number 32 [ 1233.864111][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1233.866439][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1233.866801][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1233.870112][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1233.870651][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 1233.919292][ T5733] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1234.109328][ T5733] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1234.114008][ T5733] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1234.114065][ T5733] usb 4-1: media controller created [ 1234.244882][ T5733] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1234.591844][ T5733] zl10353_read_register: readreg error (reg=127, ret==0) [ 1235.673476][T18871] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3859'. [ 1235.722835][ T5733] usb 4-1: USB disconnect, device number 33 [ 1235.884963][T18875] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3861'. [ 1239.222110][ T36] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1239.607755][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1239.925739][ T36] usb 3-1: device descriptor read/64, error -32 [ 1240.186036][ T36] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1240.466409][ T36] usb 3-1: Using ep0 maxpacket: 8 [ 1240.818990][ T36] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1240.824265][ T36] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1240.824299][ T36] usb 3-1: can't read configurations, error -71 [ 1240.827455][ T36] usb usb3-port1: attempt power cycle [ 1243.251760][T18930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1245.428057][T18947] netlink: 'syz.5.3884': attribute type 1 has an invalid length. [ 1247.511945][T18947] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1247.555913][ T5585] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1247.599967][T18950] bond6: (slave dummy0): Removing an active aggregator [ 1247.600791][T18950] bond6: (slave dummy0): Releasing backup interface [ 1247.670848][T18950] bond7: (slave dummy0): Enslaving as a backup interface with an up link [ 1247.719425][ T5585] usb 5-1: Using ep0 maxpacket: 8 [ 1247.756114][ T5585] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1247.757126][ T5585] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1247.757157][ T5585] usb 5-1: can't read configurations, error -71 [ 1247.757632][ T93] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1248.197096][T18821] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1248.229537][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1248.317278][ T5604] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1248.334962][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1248.354111][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1248.357996][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1248.819494][T18979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1249.534429][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1251.161128][ T4911] Bluetooth: hci1: command tx timeout [ 1251.869513][T19003] netlink: 'syz.2.3899': attribute type 1 has an invalid length. [ 1253.046787][T19003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1253.070270][T19004] dummy0: left promiscuous mode [ 1253.214882][T19004] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 1253.245923][ T4911] Bluetooth: hci1: command tx timeout [ 1253.317590][ T1592] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1253.472313][ T36] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1253.525010][ T1174] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1253.657354][ T36] usb 4-1: Using ep0 maxpacket: 8 [ 1253.674118][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1253.681841][ T36] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1253.681874][ T36] usb 4-1: can't read configurations, error -71 [ 1253.978983][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1253.979051][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1255.406155][ T4911] Bluetooth: hci1: command tx timeout [ 1257.621736][T19042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1258.400428][ T4911] Bluetooth: hci1: command tx timeout [ 1259.526766][T19051] netlink: 'syz.5.3912': attribute type 1 has an invalid length. [ 1259.876478][T19051] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1260.186594][T19053] bond7: (slave dummy0): Removing an active aggregator [ 1260.189129][T19053] bond7: (slave dummy0): Releasing backup interface [ 1260.293867][T19053] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 1260.301798][ T5949] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1260.408041][T18821] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1262.018965][T18969] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.019315][T18969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.019497][T18969] bridge_slave_0: entered allmulticast mode [ 1262.022281][T18969] bridge_slave_0: entered promiscuous mode [ 1262.025333][T18969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.025519][T18969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.069561][T18969] bridge_slave_1: entered allmulticast mode [ 1262.072095][T18969] bridge_slave_1: entered promiscuous mode [ 1262.145092][T18969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1262.172236][T18969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1262.221902][T18969] team0: Port device team_slave_0 added [ 1262.225442][T18969] team0: Port device team_slave_1 added [ 1262.300581][T18969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.300596][T18969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.300621][T18969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.302930][T18969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.302943][T18969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.302976][T18969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.461316][T18969] hsr_slave_0: entered promiscuous mode [ 1262.462692][T18969] hsr_slave_1: entered promiscuous mode [ 1262.463629][T18969] debugfs: 'hsr0' already exists in 'hsr' [ 1262.463652][T18969] Cannot create hsr debugfs directory [ 1263.534317][T19090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3918'. [ 1264.540033][ T5942] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.930044][ T5584] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1265.100468][ T5584] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1265.100497][ T5584] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.100517][ T5584] usb 4-1: config 220 has no interface number 2 [ 1265.100585][ T5584] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1265.100613][ T5584] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1265.100632][ T5584] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1265.100650][ T5584] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1265.152152][ T5584] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1265.152182][ T5584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.152203][ T5584] usb 4-1: Product: syz [ 1265.152216][ T5584] usb 4-1: Manufacturer: syz [ 1265.152230][ T5584] usb 4-1: SerialNumber: syz [ 1265.451333][ T5584] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1265.451366][ T5584] uvcvideo 4-1:220.0: No valid video chain found. [ 1265.451424][ T5584] usb 4-1: selecting invalid altsetting 0 [ 1265.528296][ T5584] usb 4-1: selecting invalid altsetting 0 [ 1265.528334][ T5584] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1265.537385][ T5584] usb 4-1: USB disconnect, device number 36 [ 1266.034244][T19125] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3930'. [ 1266.272476][ T5942] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.418238][T18969] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1266.682024][T18969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1266.683260][T18969] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1266.949048][T18969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1267.936950][T18969] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1268.101442][T18969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1268.113208][T18969] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1268.684933][T19158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1269.627976][T18969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1270.443340][ T5942] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.492934][T19173] syzkaller0: entered promiscuous mode [ 1270.492960][T19173] syzkaller0: entered allmulticast mode [ 1270.753251][ T37] kauditd_printk_skb: 127 callbacks suppressed [ 1270.753269][ T37] audit: type=1326 audit(1785986432.091:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19185 comm="syz.5.3948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880b91e0d9 code=0x7ffc0000 [ 1270.753316][ T37] audit: type=1326 audit(1785986432.091:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19185 comm="syz.5.3948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880b91e0d9 code=0x7ffc0000 [ 1270.755304][ T37] audit: type=1326 audit(1785986432.111:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19185 comm="syz.5.3948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880b91e0d9 code=0x7ffc0000 [ 1270.837684][ T37] audit: type=1326 audit(1785986432.111:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19185 comm="syz.5.3948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880b91e0d9 code=0x7ffc0000 [ 1270.837733][ T37] audit: type=1326 audit(1785986432.111:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19185 comm="syz.5.3948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f880b91e0d9 code=0x7ffc0000 [ 1270.837774][ T37] audit: type=1326 audit(1785986432.201:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19185 comm="syz.5.3948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880b91e0d9 code=0x7ffc0000 [ 1270.837814][ T37] audit: type=1326 audit(1785986432.201:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19185 comm="syz.5.3948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f880b91e0d9 code=0x7ffc0000 [ 1270.837853][ T37] audit: type=1326 audit(1785986432.201:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19185 comm="syz.5.3948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880b91e0d9 code=0x7ffc0000 [ 1270.837894][ T37] audit: type=1326 audit(1785986432.201:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19185 comm="syz.5.3948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880b91e0d9 code=0x7ffc0000 [ 1270.838113][ T37] audit: type=1326 audit(1785986432.201:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19185 comm="syz.5.3948" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f880b91e0d9 code=0x7ffc0000 [ 1271.019731][T19191] loop2: detected capacity change from 0 to 3 [ 1271.088125][T19191] Dev loop2: unable to read RDB block 3 [ 1271.088217][T19191] loop2: unable to read partition table [ 1271.088397][T19191] loop2: partition table beyond EOD, truncated [ 1271.088422][T19191] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1273.100289][ T5942] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.970631][T19205] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1273.970673][T19205] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1273.970693][T19205] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1275.443469][T18969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.515595][T18969] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.545989][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.546725][ T5863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.599905][ T1174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.600096][ T1174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.644197][T18969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.692650][T18969] veth0_vlan: entered promiscuous mode [ 1277.694935][T19262] syzkaller0: entered promiscuous mode [ 1277.694958][T19262] syzkaller0: entered allmulticast mode [ 1279.577140][T19270] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1279.577182][T19270] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1279.577201][T19270] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1279.795666][T18969] veth1_vlan: entered promiscuous mode [ 1281.147426][T18969] veth0_macvtap: entered promiscuous mode [ 1281.191425][T18969] veth1_macvtap: entered promiscuous mode [ 1281.243676][T18969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.329474][T18969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.744376][T19311] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3979'. [ 1281.755862][T16245] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.500080][ T5949] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.500520][ T5949] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.501340][ T5949] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.918652][ T5942] bridge_slave_1: left allmulticast mode [ 1283.918680][ T5942] bridge_slave_1: left promiscuous mode [ 1283.918924][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.563173][ T5942] bridge_slave_0: left allmulticast mode [ 1284.563202][ T5942] bridge_slave_0: left promiscuous mode [ 1284.565919][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.506207][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.569223][ T5942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.599829][ T5942] bond0 (unregistering): Released all slaves [ 1285.610687][ T5942] bond1 (unregistering): Released all slaves [ 1285.629937][ T5942] bond2 (unregistering): Released all slaves [ 1285.844908][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1286.160131][T18819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.160151][T18819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.288317][ T5863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.288335][ T5863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.199937][T19366] fuse: Bad value for 'fd' [ 1287.809181][T19378] fuse: Bad value for 'user_id' [ 1287.809197][T19378] fuse: Bad value for 'user_id' [ 1290.344847][T19398] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1290.344887][T19398] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1290.344906][T19398] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1291.987384][T19417] loop2: detected capacity change from 0 to 3 [ 1292.025892][T19417] Dev loop2: unable to read RDB block 3 [ 1292.025941][T19417] loop2: unable to read partition table [ 1292.026126][T19417] loop2: partition table beyond EOD, truncated [ 1292.026154][T19417] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1292.305767][ T5607] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1292.345027][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1292.462727][ T5607] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.462778][ T5607] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.462802][ T5607] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1292.462824][ T5607] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1292.475171][T19424] syzkaller0: entered promiscuous mode [ 1292.475193][T19424] syzkaller0: entered allmulticast mode [ 1292.520420][ T5607] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1292.520447][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.520468][ T5607] usb 5-1: Product: syz [ 1292.520483][ T5607] usb 5-1: Manufacturer: syz [ 1292.520499][ T5607] usb 5-1: SerialNumber: syz [ 1292.523308][T19424] tipc: Started in network mode [ 1292.523334][T19424] tipc: Node identity eaf0672d7fc8, cluster identity 4711 [ 1292.523871][T19424] tipc: Enabled bearer , priority 0 [ 1292.629755][ T5607] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1292.629778][ T5607] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1292.629812][ T5607] usbserial_generic 5-1:1.0: generic converter detected [ 1292.731485][ T4911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1292.760634][ T5607] usb 5-1: generic converter now attached to ttyUSB0 [ 1292.782886][ T4911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1292.794759][ T4911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1292.810402][ T4911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1292.811233][ T4911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1293.195364][ T36] usb 5-1: USB disconnect, device number 26 [ 1293.417599][ T36] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1293.418032][ T36] usbserial_generic 5-1:1.0: device disconnected [ 1293.425100][T19423] tipc: Resetting bearer [ 1293.801421][T19423] tipc: Disabling bearer [ 1295.104895][ T4911] Bluetooth: hci2: command tx timeout [ 1295.586381][ T5584] tipc: Node number set to 2503501613 [ 1297.210843][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1297.212116][ T4911] Bluetooth: hci2: command tx timeout [ 1298.737152][T19490] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1298.737191][T19490] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1298.737210][T19490] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1299.431297][ T4911] Bluetooth: hci2: command tx timeout [ 1300.849109][T19522] loop2: detected capacity change from 0 to 3 [ 1300.887117][T19522] Dev loop2: unable to read RDB block 3 [ 1300.887167][T19522] loop2: unable to read partition table [ 1300.887350][T19522] loop2: partition table beyond EOD, truncated [ 1300.888462][T19522] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1301.486513][ T4911] Bluetooth: hci2: command tx timeout [ 1302.198797][T19528] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1302.198837][T19528] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1302.198857][T19528] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1302.474443][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4031'. [ 1302.474465][T19542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4031'. [ 1303.211229][ T5942] hsr_slave_0: left promiscuous mode [ 1303.227208][ T5942] hsr_slave_1: left promiscuous mode [ 1303.228080][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.228103][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1303.260499][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.260521][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1303.309258][ T5942] veth1_macvtap: left promiscuous mode [ 1303.309318][ T5942] veth0_macvtap: left promiscuous mode [ 1303.309453][ T5942] veth1_vlan: left promiscuous mode [ 1303.309552][ T5942] veth0_vlan: left promiscuous mode [ 1303.880911][T19563] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4037'. [ 1304.036983][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 1304.086469][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 1304.247480][T19553] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1304.247517][T19553] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1304.247536][T19553] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1304.288884][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1304.750235][T19573] loop2: detected capacity change from 0 to 3 [ 1304.754561][T19573] Dev loop2: unable to read RDB block 3 [ 1304.754590][T19573] loop2: AHDI p1 p2 p3 [ 1304.754611][T19573] loop2: partition table partially beyond EOD, truncated [ 1304.811963][T19573] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1304.811987][T19573] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1307.781849][T19608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4047'. [ 1307.840977][T19429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1307.841175][T19429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.841342][T19429] bridge_slave_0: entered allmulticast mode [ 1307.843806][T19429] bridge_slave_0: entered promiscuous mode [ 1307.883695][T19429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1307.883850][T19429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.884023][T19429] bridge_slave_1: entered allmulticast mode [ 1307.906785][T19429] bridge_slave_1: entered promiscuous mode [ 1308.038315][T19429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1308.070383][T19429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1308.140530][T19429] team0: Port device team_slave_0 added [ 1308.143382][T19429] team0: Port device team_slave_1 added [ 1308.189034][T19429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.189048][T19429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.189073][T19429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.191165][T19429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1308.191177][T19429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.191202][T19429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.454720][T19622] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4050'. [ 1308.822235][T19626] loop2: detected capacity change from 0 to 3 [ 1308.823165][T19626] Dev loop2: unable to read RDB block 3 [ 1308.824697][T19626] loop2: unable to read partition table [ 1308.824882][T19626] loop2: partition table beyond EOD, truncated [ 1308.824898][T19626] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1310.041643][T19635] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1310.041682][T19635] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1310.041701][T19635] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1310.122985][T19429] hsr_slave_0: entered promiscuous mode [ 1310.124341][T19429] hsr_slave_1: entered promiscuous mode [ 1310.125283][T19429] debugfs: 'hsr0' already exists in 'hsr' [ 1310.125305][T19429] Cannot create hsr debugfs directory [ 1310.342572][T19645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4057'. [ 1312.004338][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4062'. [ 1312.484604][ T5942] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1312.484628][ T5942] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.863514][T19678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4067'. [ 1313.641151][ T5942] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1313.641186][ T5942] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.707824][T19693] syzkaller0: entered promiscuous mode [ 1313.707847][T19693] syzkaller0: entered allmulticast mode [ 1314.899595][ T5942] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1314.899629][ T5942] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1315.410642][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1315.410707][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1315.528319][T19721] syzkaller0: entered promiscuous mode [ 1315.528343][T19721] syzkaller0: entered allmulticast mode [ 1316.883422][T19737] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4086'. [ 1317.675735][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1317.860354][ T9] usb 7-1: config 0 has no interfaces? [ 1317.863199][ T9] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1317.863227][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.863247][ T9] usb 7-1: Product: syz [ 1317.863262][ T9] usb 7-1: Manufacturer: syz [ 1317.863276][ T9] usb 7-1: SerialNumber: syz [ 1317.879221][ T9] usb 7-1: config 0 descriptor?? [ 1317.899059][ T5942] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1317.899089][ T5942] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.163917][T19029] usb 7-1: USB disconnect, device number 2 [ 1320.367674][T19774] fuse: Bad value for 'rootmode' [ 1322.861377][ T5942] batadv2: left allmulticast mode [ 1322.861497][ T5942] batadv2: left promiscuous mode [ 1322.861647][ T5942] bridge0: port 4(batadv2) entered disabled state [ 1323.059363][ T5942] batadv1: left allmulticast mode [ 1323.059396][ T5942] batadv1: left promiscuous mode [ 1323.059630][ T5942] bridge0: port 3(batadv1) entered disabled state [ 1324.258814][ T5942] bridge_slave_1: left allmulticast mode [ 1324.258846][ T5942] bridge_slave_1: left promiscuous mode [ 1324.260691][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.436234][ T5942] bridge_slave_0: left allmulticast mode [ 1324.436266][ T5942] bridge_slave_0: left promiscuous mode [ 1324.436494][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 1327.567917][ T5942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1327.618907][ T5942] bond0 (unregistering): Released all slaves [ 1327.627663][ T5942] bond1 (unregistering): Released all slaves [ 1327.638436][ T5942] bond2 (unregistering): Released all slaves [ 1327.651803][ T5942] bond3 (unregistering): Released all slaves [ 1327.674561][ T5942] bond4 (unregistering): Released all slaves [ 1327.693672][ T5942] bond5 (unregistering): Released all slaves [ 1327.707860][ T5942] bond6 (unregistering): Released all slaves [ 1327.721803][ T5942] bond7 (unregistering): Released all slaves [ 1327.806592][ T5942] bond8 (unregistering): (slave dummy0): Removing an active aggregator [ 1327.810263][ T5942] bond8 (unregistering): (slave dummy0): Releasing backup interface [ 1327.840784][ T5942] bond8 (unregistering): Released all slaves [ 1328.173569][T19825] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1328.173593][T19825] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1328.173604][T19825] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1328.175155][T19828] tipc: Started in network mode [ 1328.175171][T19828] tipc: Node identity a64a0d064948, cluster identity 4711 [ 1328.175404][T19828] tipc: Enabled bearer , priority 0 [ 1328.275861][T19823] syzkaller0: entered promiscuous mode [ 1328.275889][T19823] syzkaller0: entered allmulticast mode [ 1328.393615][T19838] tipc: Resetting bearer [ 1328.787704][T19814] tipc: Resetting bearer [ 1330.047611][T19814] tipc: Disabling bearer [ 1332.517474][ T9] tipc: Node number set to 4009889030 [ 1332.541618][T19886] syzkaller0: entered promiscuous mode [ 1332.541642][T19886] syzkaller0: entered allmulticast mode [ 1334.777875][T19928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4126'. [ 1334.924055][T19933] program syz.6.4130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1336.205803][ T5607] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1336.206062][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1337.212084][ T5607] usb 3-1: device descriptor read/64, error -32 [ 1337.465735][ T5607] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1337.686932][ T5607] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1337.686949][ T5607] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1337.690217][ T5607] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1337.690234][ T5607] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1337.690245][ T5607] usb 3-1: Product: syz [ 1337.690253][ T5607] usb 3-1: Manufacturer: syz [ 1337.690260][ T5607] usb 3-1: SerialNumber: syz [ 1337.693879][ T5607] usb 3-1: config 0 descriptor?? [ 1338.409076][ T5732] usb 3-1: USB disconnect, device number 37 [ 1338.503128][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1339.517267][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4139'. [ 1341.259465][T19976] syzkaller0: entered promiscuous mode [ 1341.259492][T19976] syzkaller0: entered allmulticast mode [ 1343.605548][T20021] program syz.4.4148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1343.737576][T20025] loop2: detected capacity change from 0 to 3 [ 1343.740179][T20025] Dev loop2: unable to read RDB block 3 [ 1343.740211][T20025] loop2: unable to read partition table [ 1343.740333][T20025] loop2: partition table beyond EOD, truncated [ 1343.740358][T20025] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1345.001241][T20036] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4153'. [ 1346.137254][T20043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4155'. [ 1346.239107][T20048] fuse: Bad value for 'fd' [ 1346.572808][T20059] program syz.6.4159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1346.812508][T20066] program syz.6.4161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1348.103206][T19429] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1348.184436][T19429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1348.214709][T20075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4164'. [ 1348.231011][T19429] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1348.293722][T19429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1348.511844][ T5942] hsr_slave_0: left promiscuous mode [ 1348.561972][ T5942] hsr_slave_1: left promiscuous mode [ 1348.564503][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1348.564528][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.659176][ T5942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1348.659202][ T5942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1348.752433][ T5942] veth1_macvtap: left promiscuous mode [ 1348.752531][ T5942] veth0_macvtap: left promiscuous mode [ 1348.753131][ T5942] veth1_vlan: left promiscuous mode [ 1348.753309][ T5942] veth0_vlan: left promiscuous mode [ 1348.795189][T20093] program syz.6.4172 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1349.639829][T20107] fuse: Bad value for 'fd' [ 1350.072467][T20112] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4178'. [ 1350.408202][ T5942] team0 (unregistering): Port device team_slave_1 removed [ 1350.506434][ T5942] team0 (unregistering): Port device team_slave_0 removed [ 1350.781016][T19429] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1350.830965][T19429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1350.999629][T19429] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1351.041879][T19429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1351.853130][T19429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.923274][T19429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1352.880491][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1352.944280][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1352.953729][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1352.956717][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1352.957654][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1353.835093][T20168] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4190'. [ 1354.195076][T20175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1355.085936][ T5604] Bluetooth: hci5: command tx timeout [ 1357.165735][ T5604] Bluetooth: hci5: command tx timeout [ 1357.231454][T20203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4201'. [ 1358.046126][T20211] tipc: Enabled bearer , priority 0 [ 1358.395785][T20208] tipc: Resetting bearer [ 1359.245755][ T5604] Bluetooth: hci5: command tx timeout [ 1359.269849][T20206] tipc: Disabling bearer [ 1361.325793][ T5604] Bluetooth: hci5: command tx timeout [ 1362.069664][T20249] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4212'. [ 1362.322528][T20251] program syz.3.4213 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1362.658222][T20148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.658349][T20148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.658511][T20148] bridge_slave_0: entered allmulticast mode [ 1362.689334][T20148] bridge_slave_0: entered promiscuous mode [ 1362.896013][T20148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.896132][T20148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.896308][T20148] bridge_slave_1: entered allmulticast mode [ 1362.901053][T20148] bridge_slave_1: entered promiscuous mode [ 1362.982206][T20148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.994567][T20148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.070174][T20148] team0: Port device team_slave_0 added [ 1363.075774][T19029] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1363.095755][T18331] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1363.149523][T20148] team0: Port device team_slave_1 added [ 1363.247631][T19029] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1363.247660][T19029] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.247678][T19029] usb 4-1: config 220 has no interface number 2 [ 1363.247742][T19029] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1363.247767][T19029] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1363.247784][T19029] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1363.247801][T19029] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1363.266277][T19029] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1363.266304][T19029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.266322][T19029] usb 4-1: Product: syz [ 1363.266336][T19029] usb 4-1: Manufacturer: syz [ 1363.266350][T19029] usb 4-1: SerialNumber: syz [ 1363.353425][T18331] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1363.353448][T18331] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.353468][T18331] usb 5-1: config 220 has no interface number 2 [ 1363.353532][T18331] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1363.353559][T18331] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1363.353577][T18331] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1363.353595][T18331] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1363.424679][T18331] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1363.424705][T18331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.424723][T18331] usb 5-1: Product: syz [ 1363.424737][T18331] usb 5-1: Manufacturer: syz [ 1363.424751][T18331] usb 5-1: SerialNumber: syz [ 1363.669539][T19029] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1363.669592][T19029] uvcvideo 4-1:220.0: No valid video chain found. [ 1363.669656][T19029] usb 4-1: selecting invalid altsetting 0 [ 1363.728463][T18331] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1363.728496][T18331] uvcvideo 5-1:220.0: No valid video chain found. [ 1363.728549][T18331] usb 5-1: selecting invalid altsetting 0 [ 1363.743360][T19029] usb 4-1: selecting invalid altsetting 0 [ 1363.743393][T19029] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1363.784649][T19029] usb 4-1: USB disconnect, device number 37 [ 1363.814242][T18331] usb 5-1: selecting invalid altsetting 0 [ 1363.814277][T18331] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1363.845392][T18331] usb 5-1: USB disconnect, device number 27 [ 1364.317571][T20148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.317586][T20148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.317610][T20148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.378218][T20148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.378232][T20148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.378257][T20148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1364.533309][T20273] syzkaller0: entered promiscuous mode [ 1364.533332][T20273] syzkaller0: entered allmulticast mode [ 1366.627375][ T13] bridge_slave_1: left allmulticast mode [ 1366.627397][ T13] bridge_slave_1: left promiscuous mode [ 1366.627548][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1366.777295][ T13] bridge_slave_0: left allmulticast mode [ 1366.777315][ T13] bridge_slave_0: left promiscuous mode [ 1366.777490][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.746996][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1367.807977][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1367.888780][ T13] bond0 (unregistering): Released all slaves [ 1368.202838][T20148] hsr_slave_0: entered promiscuous mode [ 1368.222433][T20148] hsr_slave_1: entered promiscuous mode [ 1368.232578][T20148] debugfs: 'hsr0' already exists in 'hsr' [ 1368.232601][T20148] Cannot create hsr debugfs directory [ 1368.259282][T20310] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4233'. [ 1371.961551][ T13] hsr_slave_0: left promiscuous mode [ 1372.006688][ T13] hsr_slave_1: left promiscuous mode [ 1372.007600][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1372.112787][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1372.189441][T20341] program syz.2.4239 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1372.385438][T20344] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4240'. [ 1372.606494][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1372.686511][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1373.064180][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1373.820681][ T4911] Bluetooth: hci1: command 0x0406 tx timeout [ 1374.392692][T20356] fuse: Bad value for 'fd' [ 1375.186435][T20362] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4243'. [ 1376.866607][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1376.866675][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1377.412020][T20389] program syz.2.4249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1378.728718][ T5607] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1378.915735][ T5607] usb 3-1: Using ep0 maxpacket: 8 [ 1378.947120][ T5607] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1378.950121][ T5607] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1378.995135][ T5607] usb 3-1: string descriptor 0 read error: -22 [ 1378.995225][ T5607] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1378.995249][ T5607] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1379.090111][ T5607] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1379.135135][ T5607] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1379.148521][ T5607] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1379.148578][ T5607] usb 3-1: media controller created [ 1379.193704][ T5607] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1379.670904][T20411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4254'. [ 1381.118549][ T5607] usb 3-1: USB disconnect, device number 38 [ 1382.415803][T19029] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1382.714700][T20462] program syz.2.4263 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1382.751810][T19029] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1382.751838][T19029] usb 4-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 1382.751858][T19029] usb 4-1: config 220 has no interface number 2 [ 1382.752017][T19029] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1382.752045][T19029] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1382.752070][T19029] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1382.752088][T19029] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1382.755386][T19029] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1382.755415][T19029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.755436][T19029] usb 4-1: Product: syz [ 1382.755450][T19029] usb 4-1: Manufacturer: syz [ 1382.755465][T19029] usb 4-1: SerialNumber: syz [ 1383.074633][T20465] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4265'. [ 1383.126013][T19029] usb 4-1: selecting invalid altsetting 0 [ 1383.126458][T19029] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1383.126488][T19029] uvcvideo 4-1:220.0: No valid video chain found. [ 1383.149132][T19029] usb 4-1: selecting invalid altsetting 0 [ 1383.149163][T19029] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1383.263877][T19029] usb 4-1: USB disconnect, device number 38 [ 1383.402076][T20148] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1383.458547][T20468] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4266'. [ 1383.576859][T20148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1383.611009][T20148] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1383.650793][T20148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1383.733515][T20148] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1383.788442][T20148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1383.790160][T20148] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1384.008491][T20148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1385.253808][T20501] syzkaller0: entered promiscuous mode [ 1385.253832][T20501] syzkaller0: entered allmulticast mode [ 1385.292753][T20148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1385.378250][T20511] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4276'. [ 1386.698543][T20523] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1386.698582][T20523] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1386.698601][T20523] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1386.708986][T20527] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4279'. [ 1387.000883][T20148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1387.398898][T16245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.399033][T16245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1388.302964][T18819] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.303089][T18819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1388.304406][T20540] syzkaller0: entered promiscuous mode [ 1388.304428][T20540] syzkaller0: entered allmulticast mode [ 1388.373772][T20540] tipc: Started in network mode [ 1388.373798][T20540] tipc: Node identity e2ea70e7aec5, cluster identity 4711 [ 1388.437394][T20540] tipc: Enabled bearer , priority 0 [ 1388.507855][T20540] tipc: Resetting bearer [ 1388.609254][T20539] tipc: Resetting bearer [ 1388.791632][T20539] tipc: Disabling bearer [ 1390.059524][T20565] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4287'. [ 1390.318775][T20573] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4290'. [ 1391.978155][T20592] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1392.092089][T20595] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4295'. [ 1394.041972][T20613] syzkaller0: entered promiscuous mode [ 1394.041997][T20613] syzkaller0: entered allmulticast mode [ 1394.044218][T20619] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4302'. [ 1394.056841][T20613] tipc: Enabled bearer , priority 0 [ 1394.202435][T20613] tipc: Resetting bearer [ 1394.280986][T20612] tipc: Resetting bearer [ 1395.672273][T20612] tipc: Disabling bearer [ 1395.765308][T20631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4306'. [ 1395.767920][T20630] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4305'. [ 1395.839646][T20148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1397.177555][ T5733] hid_parser_main: 458 callbacks suppressed [ 1397.177584][ T5733] hid-generic 0000:0000:0006.0004: unknown main item tag 0x0 [ 1397.177613][ T5733] hid-generic 0000:0000:0006.0004: unknown main item tag 0x0 [ 1397.177638][ T5733] hid-generic 0000:0000:0006.0004: unknown main item tag 0x0 [ 1397.177661][ T5733] hid-generic 0000:0000:0006.0004: unknown main item tag 0x0 [ 1397.177685][ T5733] hid-generic 0000:0000:0006.0004: unknown main item tag 0x0 [ 1397.575990][ T5733] hid-generic 0000:0000:0006.0004: hidraw0: HID v0.0d Device [syz0] on syz1 [ 1397.638446][T20148] veth0_vlan: entered promiscuous mode [ 1397.652111][T20148] veth1_vlan: entered promiscuous mode [ 1397.784232][T20148] veth0_macvtap: entered promiscuous mode [ 1397.824532][T20148] veth1_macvtap: entered promiscuous mode [ 1398.004969][T20148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1398.077930][T20148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1398.155026][T20656] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4312'. [ 1398.558705][ T5863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.560494][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.561142][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.561400][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.799704][T20663] program syz.6.4315 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1399.124883][ T5940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.124902][ T5940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.470757][T20671] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4318'. [ 1399.528103][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1399.528120][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1399.920189][T20682] program syz.6.4323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1404.122297][T20698] program syz.5.4326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1404.512239][T20711] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4330'. [ 1405.801653][T20721] bridge0: port 3(batadv1) entered blocking state [ 1405.801798][T20721] bridge0: port 3(batadv1) entered forwarding state [ 1405.802076][T20721] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1405.804668][T20721] bridge0: port 4(batadv2) entered blocking state [ 1405.804802][T20721] bridge0: port 4(batadv2) entered forwarding state [ 1405.805078][T20721] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1405.807952][T20721] A link change request failed with some changes committed already. Interface batadv3 may have been left with an inconsistent configuration, please check. [ 1405.837043][ T5863] bond2: (slave dummy0): link status up again after 0 ms [ 1405.865760][T18819] bond2: (slave dummy0): link status up again after 0 ms [ 1405.911874][T18819] bond2: (slave dummy0): link status up again after 0 ms [ 1405.934243][ T12] bond2: (slave dummy0): link status up again after 0 ms [ 1405.968851][ T93] bond2: (slave dummy0): link status up again after 0 ms [ 1406.006051][T18819] bond2: (slave dummy0): link status up again after 0 ms [ 1406.027310][ T93] bond2: (slave dummy0): link status up again after 0 ms [ 1406.047241][T18819] bond2: (slave dummy0): link status up again after 0 ms [ 1406.071876][T16245] bond2: (slave dummy0): link status up again after 0 ms [ 1406.205316][T20724] program syz.5.4335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1406.895576][T20728] program syz.2.4338 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1409.144916][T20737] bridge0: port 3(batadv1) entered blocking state [ 1409.147846][T20737] bridge0: port 3(batadv1) entered forwarding state [ 1409.156632][T20737] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1409.201461][T20737] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1411.609107][T20749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4343'. [ 1412.487656][ T184] net_ratelimit: 19 callbacks suppressed [ 1412.487683][ T184] bond2: (slave dummy0): failed to get link speed/duplex [ 1412.490164][ T6427] bond2: (slave dummy0): failed to get link speed/duplex [ 1412.598745][ T5940] bond2: (slave dummy0): failed to get link speed/duplex [ 1412.598785][ T5940] bond2: (slave dummy0): failed to get link speed/duplex [ 1412.707174][ T12] bond2: (slave dummy0): failed to get link speed/duplex [ 1412.707608][ T184] bond2: (slave dummy0): failed to get link speed/duplex [ 1412.818124][ T6427] bond2: (slave dummy0): failed to get link speed/duplex [ 1412.818160][ T6427] bond2: (slave dummy0): failed to get link speed/duplex [ 1412.926193][ T5942] bond2: (slave dummy0): failed to get link speed/duplex [ 1412.926236][ T5942] bond2: (slave dummy0): failed to get link speed/duplex [ 1413.775923][T20789] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4361'. [ 1414.451125][T20808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4368'. [ 1414.627111][T20811] tipc: Started in network mode [ 1414.627140][T20811] tipc: Node identity ae06e2e3aea9, cluster identity 4711 [ 1414.627401][T20811] tipc: Enabled bearer , priority 0 [ 1414.738843][T20803] tipc: Resetting bearer [ 1414.844094][T20802] tipc: Disabling bearer [ 1416.294630][T20829] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4374'. [ 1416.748603][T20824] syzkaller0: entered promiscuous mode [ 1416.748629][T20824] syzkaller0: entered allmulticast mode [ 1417.934917][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4379'. [ 1418.009991][T20831] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1418.010031][T20831] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1418.010050][T20831] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1418.238440][T16245] net_ratelimit: 14 callbacks suppressed [ 1418.238457][T16245] bond2: (slave dummy0): failed to get link speed/duplex [ 1418.238491][T16245] bond2: (slave dummy0): failed to get link speed/duplex [ 1418.346401][ T6427] bond2: (slave dummy0): failed to get link speed/duplex [ 1418.346438][ T6427] bond2: (slave dummy0): failed to get link speed/duplex [ 1419.400380][ T5940] bond2: (slave dummy0): failed to get link speed/duplex [ 1419.400421][ T5940] bond2: (slave dummy0): failed to get link speed/duplex [ 1419.746875][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 1419.746919][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 1421.227939][T20859] bridge0: port 3(batadv1) entered blocking state [ 1421.228982][T20859] bridge0: port 3(batadv1) entered forwarding state [ 1421.232031][T20859] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1421.251488][T20859] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1421.480981][ T5940] bond1: (slave dummy0): link status up again after 0 ms [ 1421.527227][ T5949] bond1: (slave dummy0): link status up again after 0 ms [ 1421.970450][T20868] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4388'. [ 1423.754164][T18821] net_ratelimit: 10 callbacks suppressed [ 1423.754183][T18821] bond2: (slave dummy0): failed to get link speed/duplex [ 1423.754216][T18821] bond1: (slave dummy0): link status up again after 0 ms [ 1423.754661][T18821] bond1: (slave dummy0): failed to get link speed/duplex [ 1423.789063][ T5940] bond2: (slave dummy0): failed to get link speed/duplex [ 1423.859150][ T184] bond1: (slave dummy0): failed to get link speed/duplex [ 1423.859187][ T184] bond2: (slave dummy0): failed to get link speed/duplex [ 1423.901529][ T3656] bond2: (slave dummy0): failed to get link speed/duplex [ 1423.966154][ T3656] bond2: (slave dummy0): failed to get link speed/duplex [ 1423.966193][ T3656] bond1: (slave dummy0): failed to get link speed/duplex [ 1424.167744][ T6427] bond2: (slave dummy0): failed to get link speed/duplex [ 1425.610631][T20907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4400'. [ 1426.121859][T20922] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4408'. [ 1426.259831][ T5607] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 1426.305890][ T5607] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1426.925963][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1427.248301][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1427.248330][ T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1427.248355][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 25977, setting to 1024 [ 1427.248381][ T31] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1427.252215][ T31] usb 7-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1427.252241][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.252260][ T31] usb 7-1: Product: syz [ 1427.252274][ T31] usb 7-1: Manufacturer: syz [ 1427.252288][ T31] usb 7-1: SerialNumber: syz [ 1427.997931][ T31] usb 7-1: config 0 descriptor?? [ 1428.000043][T20934] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1428.023997][ T31] ums-isd200 7-1:0.0: USB Mass Storage device detected [ 1428.246975][T20934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.250904][T20934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.291406][ T31] scsi host1: usb-storage 7-1:0.0 [ 1428.334019][ T31] usb 7-1: USB disconnect, device number 3 [ 1428.541416][T20969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4421'. [ 1428.797150][ T5863] net_ratelimit: 50 callbacks suppressed [ 1428.797169][ T5863] bond1: (slave dummy0): failed to get link speed/duplex [ 1428.797203][ T5863] bond2: (slave dummy0): failed to get link speed/duplex [ 1428.797232][ T5863] bond2: (slave dummy0): failed to get link speed/duplex [ 1428.907720][ T5863] bond2: (slave dummy0): failed to get link speed/duplex [ 1428.907759][ T5863] bond2: (slave dummy0): failed to get link speed/duplex [ 1428.907794][ T5863] bond1: (slave dummy0): failed to get link speed/duplex [ 1429.015753][ T5942] bond1: (slave dummy0): failed to get link speed/duplex [ 1429.015794][ T5942] bond2: (slave dummy0): failed to get link speed/duplex [ 1429.015823][ T5942] bond2: (slave dummy0): failed to get link speed/duplex [ 1429.846906][ T12] bond2: (slave dummy0): failed to get link speed/duplex [ 1433.502897][T21009] program syz.4.4439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1433.643022][T21006] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4436'. [ 1433.975138][T21022] program syz.5.4442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1435.733112][T21044] program syz.3.4450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1436.421858][ T5863] net_ratelimit: 10 callbacks suppressed [ 1436.421875][ T5863] bond2: (slave dummy0): failed to get link speed/duplex [ 1436.421910][ T5863] bond1: (slave dummy0): failed to get link speed/duplex [ 1436.421939][ T5863] bond2: (slave dummy0): failed to get link speed/duplex [ 1436.478586][T21057] 9p: Bad value for 'wfdno' [ 1436.590243][ T13] bond2: (slave dummy0): link status up again after 0 ms [ 1436.605860][ T5940] bond2: (slave dummy0): link status up again after 0 ms [ 1436.608084][T21060] A link change request failed with some changes committed already. Interface batadv3 may have been left with an inconsistent configuration, please check. [ 1436.640467][ T6427] bond1: (slave dummy0): failed to get link speed/duplex [ 1436.640560][ T6427] bond2: (slave dummy0): failed to get link speed/duplex [ 1436.640586][ T6427] bond2: (slave dummy0): link status up again after 0 ms [ 1436.640606][ T6427] bond2: (slave dummy0): failed to get link speed/duplex [ 1437.239904][ T5584] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1437.435726][ T5584] usb 7-1: Using ep0 maxpacket: 8 [ 1437.438159][ T5584] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1437.439467][ T5584] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1437.442517][ T5584] usb 7-1: string descriptor 0 read error: -22 [ 1437.442623][ T5584] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1437.442648][ T5584] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1437.503353][ T5584] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1437.541167][ T5584] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1437.541492][ T5584] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1437.541539][ T5584] usb 7-1: media controller created [ 1437.597968][ T5584] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1438.247360][T21096] program syz.2.4469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1438.289788][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 1438.289877][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 1439.585471][ T5584] usb 7-1: USB disconnect, device number 4 [ 1439.751215][ T822] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1439.813875][ T822] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1440.398502][ T36] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1440.553777][ T36] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1440.553803][ T36] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.553820][ T36] usb 5-1: config 220 has no interface number 2 [ 1440.553881][ T36] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1440.553906][ T36] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1440.553924][ T36] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1440.553952][ T36] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1440.602512][ T36] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1440.602539][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.602558][ T36] usb 5-1: Product: syz [ 1440.602571][ T36] usb 5-1: Manufacturer: syz [ 1440.602585][ T36] usb 5-1: SerialNumber: syz [ 1440.964802][ T36] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1440.964836][ T36] uvcvideo 5-1:220.0: No valid video chain found. [ 1440.964894][ T36] usb 5-1: selecting invalid altsetting 0 [ 1441.107462][ T36] usb 5-1: selecting invalid altsetting 0 [ 1441.107500][ T36] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1441.144670][ T36] usb 5-1: USB disconnect, device number 28 [ 1441.490329][ T1174] net_ratelimit: 86 callbacks suppressed [ 1441.490347][ T1174] bond2: (slave dummy0): failed to get link speed/duplex [ 1441.490392][ T1174] bond2: (slave dummy0): failed to get link speed/duplex [ 1441.493221][T21139] program syz.6.4481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1441.520492][ T184] bond1: (slave dummy0): failed to get link speed/duplex [ 1441.595938][ T1174] bond2: (slave dummy0): failed to get link speed/duplex [ 1441.595977][ T1174] bond2: (slave dummy0): failed to get link speed/duplex [ 1442.504533][T18819] bond1: (slave dummy0): failed to get link speed/duplex [ 1442.533462][T18819] bond2: (slave dummy0): failed to get link speed/duplex [ 1442.533503][T18819] bond2: (slave dummy0): failed to get link speed/duplex [ 1442.638876][ T184] bond1: (slave dummy0): failed to get link speed/duplex [ 1442.685967][T18819] bond2: (slave dummy0): failed to get link speed/duplex [ 1443.486259][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1443.635732][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1443.638081][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1443.639377][ T9] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1443.697894][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1443.697983][ T9] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1443.698007][ T9] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1443.771767][ T9] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1443.796221][ T9] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1443.798555][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1443.798603][ T9] usb 5-1: media controller created [ 1443.869846][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1444.260782][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1444.741453][ T9] usb 5-1: USB disconnect, device number 29 [ 1446.507815][ T1174] net_ratelimit: 46 callbacks suppressed [ 1446.507835][ T1174] bond2: (slave dummy0): failed to get link speed/duplex [ 1446.507868][ T1174] bond2: (slave dummy0): failed to get link speed/duplex [ 1446.507896][ T1174] bond1: (slave dummy0): failed to get link speed/duplex [ 1446.615765][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 1446.615805][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 1446.615834][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 1446.747908][ T1174] bond1: (slave dummy0): failed to get link speed/duplex [ 1446.747947][ T1174] bond2: (slave dummy0): failed to get link speed/duplex [ 1446.747975][ T1174] bond2: (slave dummy0): failed to get link speed/duplex [ 1447.106246][ T5949] bond2: (slave dummy0): failed to get link speed/duplex [ 1447.393079][T21212] program syz.2.4502 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1448.946910][T21226] 9p: Bad value for 'wfdno' [ 1451.592322][ T5942] net_ratelimit: 73 callbacks suppressed [ 1451.592339][ T5942] bond2: (slave dummy0): failed to get link speed/duplex [ 1451.592380][ T5942] bond1: (slave dummy0): failed to get link speed/duplex [ 1451.640175][ T5940] bond2: (slave dummy0): failed to get link speed/duplex [ 1451.696108][ T5940] bond2: (slave dummy0): failed to get link speed/duplex [ 1451.730692][ T6427] bond1: (slave dummy0): failed to get link speed/duplex [ 1451.745937][ T6427] bond2: (slave dummy0): failed to get link speed/duplex [ 1451.808066][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 1451.839383][ T5949] bond1: (slave dummy0): failed to get link speed/duplex [ 1451.861735][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 1451.919365][ T5949] bond2: (slave dummy0): failed to get link speed/duplex [ 1453.099375][T21289] program syz.6.4531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1457.995809][T19029] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1458.693363][T19029] usb 3-1: device descriptor read/64, error -71 [ 1459.341633][T21329] program syz.6.4543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1459.445753][T19029] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1459.611221][T19029] usb 3-1: device descriptor read/64, error -71 [ 1459.717503][T19029] usb usb3-port1: attempt power cycle [ 1459.758456][ T5949] net_ratelimit: 19 callbacks suppressed [ 1459.758472][ T5949] bond2: (slave dummy0): failed to get link speed/duplex [ 1459.758508][ T5949] bond1: (slave dummy0): failed to get link speed/duplex [ 1459.758578][ T5949] bond2: (slave dummy0): failed to get link speed/duplex [ 1459.865802][ T93] bond2: (slave dummy0): failed to get link speed/duplex [ 1459.865841][ T93] bond1: (slave dummy0): failed to get link speed/duplex [ 1459.865867][ T93] bond2: (slave dummy0): failed to get link speed/duplex [ 1460.005934][ T5584] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1460.075818][T19029] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 1460.076325][ T5959] bond2: (slave dummy0): failed to get link speed/duplex [ 1460.076361][ T5959] bond2: (slave dummy0): failed to get link speed/duplex [ 1460.076389][ T5959] bond1: (slave dummy0): failed to get link speed/duplex [ 1460.096588][T19029] usb 3-1: device descriptor read/8, error -71 [ 1460.193738][ T5863] bond1: (slave dummy0): failed to get link speed/duplex [ 1460.221931][ T5584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1460.221959][ T5584] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1460.221983][ T5584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 25977, setting to 1024 [ 1460.222008][ T5584] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 1460.293906][ T5584] usb 5-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1460.293935][ T5584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1460.293955][ T5584] usb 5-1: Product: syz [ 1460.293970][ T5584] usb 5-1: Manufacturer: syz [ 1460.293985][ T5584] usb 5-1: SerialNumber: syz [ 1460.345893][ T5584] usb 5-1: config 0 descriptor?? [ 1460.346869][T21340] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1460.370381][ T5584] ums-isd200 5-1:0.0: USB Mass Storage device detected [ 1460.572812][T21340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1460.575472][T21340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.645264][ T5584] scsi host1: usb-storage 5-1:0.0 [ 1460.679634][ T5584] usb 5-1: USB disconnect, device number 30 [ 1462.406561][T21382] program syz.5.4561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1463.865778][T19029] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 1463.995986][T19029] usb 6-1: device descriptor read/64, error -71 [ 1464.245737][T19029] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 1464.375832][T19029] usb 6-1: device descriptor read/64, error -71 [ 1464.385746][T20666] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1464.545721][T20666] usb 3-1: Using ep0 maxpacket: 8 [ 1464.548490][T20666] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1464.550244][T20666] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1464.553974][T20666] usb 3-1: string descriptor 0 read error: -22 [ 1464.554061][T20666] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1464.554086][T20666] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1464.576460][T19029] usb usb6-port1: attempt power cycle [ 1464.660673][T20666] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1464.683026][T20666] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1464.683366][T20666] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1464.683407][T20666] usb 3-1: media controller created [ 1464.729788][T20666] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1464.938381][ T5944] net_ratelimit: 78 callbacks suppressed [ 1464.938400][ T5944] bond2: (slave dummy0): failed to get link speed/duplex [ 1464.938435][ T5944] bond1: (slave dummy0): failed to get link speed/duplex [ 1464.938462][ T5944] bond2: (slave dummy0): failed to get link speed/duplex [ 1464.945868][T19029] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1464.985497][T19029] usb 6-1: device descriptor read/8, error -71 [ 1465.049603][ T5944] bond2: (slave dummy0): failed to get link speed/duplex [ 1465.049642][ T5944] bond1: (slave dummy0): failed to get link speed/duplex [ 1465.049670][ T5944] bond2: (slave dummy0): failed to get link speed/duplex [ 1465.157125][ T1592] bond2: (slave dummy0): failed to get link speed/duplex [ 1465.157164][ T1592] bond1: (slave dummy0): failed to get link speed/duplex [ 1465.157202][ T1592] bond2: (slave dummy0): failed to get link speed/duplex [ 1465.321048][T19029] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 1465.338413][T19029] usb 6-1: device descriptor read/8, error -71 [ 1465.339206][ T5862] bond2: (slave dummy0): failed to get link speed/duplex [ 1465.446209][T19029] usb usb6-port1: unable to enumerate USB device [ 1465.997516][T20666] usb 3-1: USB disconnect, device number 43 [ 1470.100490][ T5940] net_ratelimit: 32 callbacks suppressed [ 1470.261268][ T5940] bond2: (slave dummy0): failed to get link speed/duplex [ 1470.267215][ T5940] bond1: (slave dummy0): failed to get link speed/duplex [ 1470.267253][ T5940] bond2: (slave dummy0): failed to get link speed/duplex [ 1470.366654][T18819] bond2: (slave dummy0): failed to get link speed/duplex [ 1470.387931][T18819] bond2: (slave dummy0): failed to get link speed/duplex [ 1470.387968][T18819] bond1: (slave dummy0): failed to get link speed/duplex [ 1470.479294][ T1174] bond2: (slave dummy0): failed to get link speed/duplex [ 1470.496879][ T5862] bond1: (slave dummy0): failed to get link speed/duplex [ 1470.496916][ T5862] bond2: (slave dummy0): failed to get link speed/duplex [ 1470.596220][T18819] bond2: (slave dummy0): failed to get link speed/duplex [ 1473.027556][T21490] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1473.027597][T21490] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1473.031138][T21490] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1473.393027][T21500] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4600'. [ 1474.233643][T21512] program syz.4.4607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1475.117691][ T1174] net_ratelimit: 32 callbacks suppressed [ 1475.117711][ T1174] bond2: (slave dummy0): failed to get link speed/duplex [ 1475.158568][T18821] bond1: (slave dummy0): link status up again after 0 ms [ 1475.158597][T18821] bond1: (slave dummy0): failed to get link speed/duplex [ 1475.158638][T18821] bond2: (slave dummy0): failed to get link speed/duplex [ 1475.368646][T18821] bond2: (slave dummy0): failed to get link speed/duplex [ 1476.581035][ T4911] Bluetooth: hci5: command 0x0406 tx timeout [ 1476.626631][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 1476.626673][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 1476.626710][ T13] bond2: (slave dummy0): failed to get link speed/duplex [ 1476.737590][ T5940] bond2: (slave dummy0): failed to get link speed/duplex [ 1476.737630][ T5940] bond1: (slave dummy0): failed to get link speed/duplex [ 1478.549382][T21562] syzkaller0: entered promiscuous mode [ 1478.549407][T21562] syzkaller0: entered allmulticast mode [ 1479.409534][T21567] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1479.409574][T21567] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1479.409594][T21567] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1480.333071][ T5585] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1480.858655][ T5585] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1480.858686][ T5585] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.858706][ T5585] usb 5-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1480.858727][ T5585] usb 5-1: config 220 has no interface number 1 [ 1480.858769][ T5585] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1480.858786][ T5585] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1480.898660][ T1033] net_ratelimit: 49 callbacks suppressed [ 1480.898676][ T1033] bond2: (slave dummy0): failed to get link speed/duplex [ 1480.898706][ T1033] bond1: (slave dummy0): failed to get link speed/duplex [ 1480.898729][ T1033] bond2: (slave dummy0): failed to get link speed/duplex [ 1481.008072][ T5862] bond2: (slave dummy0): failed to get link speed/duplex [ 1481.008111][ T5862] bond1: (slave dummy0): failed to get link speed/duplex [ 1481.008139][ T5862] bond2: (slave dummy0): failed to get link speed/duplex [ 1481.049405][ T5585] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1481.049434][ T5585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.049455][ T5585] usb 5-1: Product: syz [ 1481.049470][ T5585] usb 5-1: Manufacturer: syz [ 1481.049485][ T5585] usb 5-1: SerialNumber: syz [ 1481.123140][ T5862] bond2: (slave dummy0): failed to get link speed/duplex [ 1481.123178][ T5862] bond1: (slave dummy0): failed to get link speed/duplex [ 1481.155904][ T5862] bond2: (slave dummy0): failed to get link speed/duplex [ 1481.387734][ T5942] bond2: (slave dummy0): failed to get link speed/duplex [ 1481.416114][ T5585] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1481.416146][ T5585] uvcvideo 5-1:220.0: No valid video chain found. [ 1481.444040][ T5585] usb 5-1: USB disconnect, device number 31 [ 1485.976051][ T1033] net_ratelimit: 25 callbacks suppressed [ 1485.976095][ T1033] bond2: (slave dummy0): failed to get link speed/duplex [ 1485.987854][ T1033] bond1: (slave dummy0): failed to get link speed/duplex [ 1485.988040][ T1033] bond2: (slave dummy0): failed to get link speed/duplex [ 1486.244720][ T184] bond2: (slave dummy0): failed to get link speed/duplex [ 1486.244762][ T184] bond2: (slave dummy0): failed to get link speed/duplex [ 1486.244792][ T184] bond1: (slave dummy0): failed to get link speed/duplex [ 1486.345991][ T1033] bond1: (slave dummy0): failed to get link speed/duplex [ 1486.346029][ T1033] bond2: (slave dummy0): failed to get link speed/duplex [ 1486.346059][ T1033] bond2: (slave dummy0): failed to get link speed/duplex [ 1486.459344][ T5863] bond2: (slave dummy0): failed to get link speed/duplex [ 1486.711049][T21646] program syz.2.4652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1486.826852][T21651] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4655'. [ 1491.167407][ T5863] net_ratelimit: 40 callbacks suppressed [ 1491.167425][ T5863] bond2: (slave dummy0): failed to get link speed/duplex [ 1491.168159][ T5942] bond1: (slave dummy0): failed to get link speed/duplex [ 1491.168190][ T5942] bond2: (slave dummy0): failed to get link speed/duplex [ 1491.363638][ T5585] ------------[ cut here ]------------ [ 1491.363651][ T5585] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1491.363676][ T5585] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#0: kworker/0:4/5585 [ 1491.363843][ T5585] Modules linked in: [ 1491.363864][ T5585] CPU: 0 UID: 0 PID: 5585 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1491.363891][ T5585] Tainted: [L]=SOFTLOCKUP [ 1491.363898][ T5585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1491.363910][ T5585] Workqueue: events drm_fb_helper_damage_work [ 1491.363983][ T5585] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 1491.364008][ T5585] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 e7 b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 1491.364024][ T5585] RSP: 0018:ffffc900042577e0 EFLAGS: 00010246 [ 1491.364039][ T5585] RAX: 1ffff11004d07e00 RBX: 0000000000000000 RCX: 0000000000000000 [ 1491.364052][ T5585] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 1491.364067][ T5585] RBP: ffffc900042578c8 R08: 0000000000000000 R09: 0000000000000000 [ 1491.364079][ T5585] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 1491.364092][ T5585] R13: ffff88802683f000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 1491.364105][ T5585] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 1491.364120][ T5585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1491.364133][ T5585] CR2: 00007f4e7f064f88 CR3: 000000002844c000 CR4: 00000000003526f0 [ 1491.364150][ T5585] Call Trace: [ 1491.364157][ T5585] [ 1491.364168][ T5585] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1491.364191][ T5585] ? rt_spin_unlock+0x157/0x200 [ 1491.364212][ T5585] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1491.364242][ T5585] ? rt_spin_unlock+0x163/0x200 [ 1491.364263][ T5585] ? drm_vblank_get+0x147/0x280 [ 1491.364285][ T5585] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1491.364341][ T5585] drm_fb_helper_damage_work+0x6cf/0xf00 [ 1491.364372][ T5585] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1491.364414][ T5585] ? process_scheduled_works+0xa20/0x14e0 [ 1491.364538][ T5585] ? rcu_is_watching+0x15/0xb0 [ 1491.364611][ T5585] ? process_scheduled_works+0xa20/0x14e0 [ 1491.364634][ T5585] process_scheduled_works+0xa8e/0x14e0 [ 1491.364689][ T5585] ? __pfx_process_scheduled_works+0x10/0x10 [ 1491.364720][ T5585] ? assign_work+0x3cf/0x5d0 [ 1491.364748][ T5585] worker_thread+0xa47/0xfb0 [ 1491.364801][ T5585] kthread+0x388/0x470 [ 1491.364855][ T5585] ? __pfx_worker_thread+0x10/0x10 [ 1491.364876][ T5585] ? __pfx_kthread+0x10/0x10 [ 1491.364905][ T5585] ret_from_fork+0x514/0xb70 [ 1491.364964][ T5585] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.364991][ T5585] ? __switch_to+0xc89/0x1420 [ 1491.365043][ T5585] ? __pfx_kthread+0x10/0x10 [ 1491.365073][ T5585] ret_from_fork_asm+0x1a/0x30 [ 1491.365110][ T5585] [ 1491.365124][ T5585] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1491.365141][ T5585] CPU: 0 UID: 0 PID: 5585 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1491.365166][ T5585] Tainted: [L]=SOFTLOCKUP [ 1491.365173][ T5585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1491.365185][ T5585] Workqueue: events drm_fb_helper_damage_work [ 1491.365209][ T5585] Call Trace: [ 1491.365216][ T5585] [ 1491.365224][ T5585] vpanic+0x56c/0xa60 [ 1491.365243][ T5585] ? __pfx__printk+0x10/0x10 [ 1491.365265][ T5585] ? __pfx_vpanic+0x10/0x10 [ 1491.365282][ T5585] ? is_bpf_text_address+0x292/0x2b0 [ 1491.365358][ T5585] ? is_bpf_text_address+0x26/0x2b0 [ 1491.365388][ T5585] panic+0xc5/0xd0 [ 1491.365407][ T5585] ? __pfx_panic+0x10/0x10 [ 1491.365435][ T5585] ? ret_from_fork_asm+0x1a/0x30 [ 1491.365459][ T5585] __warn+0x315/0x4c0 [ 1491.365477][ T5585] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1491.365504][ T5585] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1491.365527][ T5585] __report_bug+0x276/0x570 [ 1491.365610][ T5585] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 1491.365637][ T5585] ? __pfx___report_bug+0x10/0x10 [ 1491.365672][ T5585] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1491.365697][ T5585] ? lockdep_hardirqs_on+0x7a/0x110 [ 1491.365722][ T5585] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1491.365751][ T5585] report_bug_entry+0x19a/0x290 [ 1491.365777][ T5585] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 1491.365798][ T5585] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 1491.365821][ T5585] handle_bug+0xce/0x200 [ 1491.365849][ T5585] exc_invalid_op+0x1a/0x50 [ 1491.365876][ T5585] asm_exc_invalid_op+0x1a/0x20 [ 1491.365895][ T5585] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 1491.365919][ T5585] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 e7 b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 1491.365934][ T5585] RSP: 0018:ffffc900042577e0 EFLAGS: 00010246 [ 1491.365950][ T5585] RAX: 1ffff11004d07e00 RBX: 0000000000000000 RCX: 0000000000000000 [ 1491.365963][ T5585] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 1491.365976][ T5585] RBP: ffffc900042578c8 R08: 0000000000000000 R09: 0000000000000000 [ 1491.365987][ T5585] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 1491.366001][ T5585] R13: ffff88802683f000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 1491.366037][ T5585] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1491.366072][ T5585] ? rt_spin_unlock+0x157/0x200 [ 1491.366093][ T5585] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1491.366122][ T5585] ? rt_spin_unlock+0x163/0x200 [ 1491.366146][ T5585] ? drm_vblank_get+0x147/0x280 [ 1491.366170][ T5585] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1491.366193][ T5585] drm_fb_helper_damage_work+0x6cf/0xf00 [ 1491.366228][ T5585] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1491.366272][ T5585] ? process_scheduled_works+0xa20/0x14e0 [ 1491.366300][ T5585] ? rcu_is_watching+0x15/0xb0 [ 1491.366331][ T5585] ? process_scheduled_works+0xa20/0x14e0 [ 1491.366353][ T5585] process_scheduled_works+0xa8e/0x14e0 [ 1491.366403][ T5585] ? __pfx_process_scheduled_works+0x10/0x10 [ 1491.366433][ T5585] ? assign_work+0x3cf/0x5d0 [ 1491.366460][ T5585] worker_thread+0xa47/0xfb0 [ 1491.366511][ T5585] kthread+0x388/0x470 [ 1491.366538][ T5585] ? __pfx_worker_thread+0x10/0x10 [ 1491.366559][ T5585] ? __pfx_kthread+0x10/0x10 [ 1491.366587][ T5585] ret_from_fork+0x514/0xb70 [ 1491.366618][ T5585] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.366644][ T5585] ? __switch_to+0xc89/0x1420 [ 1491.366671][ T5585] ? __pfx_kthread+0x10/0x10 [ 1491.366703][ T5585] ret_from_fork_asm+0x1a/0x30 [ 1491.366739][ T5585] [ 1491.366983][ T5585] Kernel Offset: disabled