last executing test programs: 10m25.770723924s ago: executing program 2 (id=72): socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0x1, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2e1286e94d6499e8740290c1d702df349ed4e97b10d0895b02a14a0e70115410b72465e3437bfc116b63481fd1b303f8eab92824c3c8f14ea288fea8e", 0xa4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 10m17.495434202s ago: executing program 2 (id=83): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x37, 0xd7, 0x81, 0x10, 0x9022, 0xd632, 0xd781, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xce, 0x9, 0x10, 0x2, "", [{{0x9, 0x4, 0x42, 0x7, 0x0, 0xd6, 0x5f, 0x3, 0xff}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x250, 0x9, 0x3, 0x6, 0x8, 0x3}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000d40)={0x14, 0x0, 0x0}, &(0x7f0000000f40)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0xc0, 0xa1, 0x4, 0x6}, 0x0, 0x0}) syz_usb_connect(0x2, 0x2d, 0x0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$lan78xx(0x2, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000003c0)=""/163) ioctl$EVIOCGREP(r1, 0x80084503, 0x0) syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f00000000c0)=""/231) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3, 0x61, "102f2317204c786491c6933c49c169f2a838b56551c331bddc8149ab673b0e177f4fae2cda4fb41a23cc9c1062be6e2421e7b82bb2c5f85f788ac38999746d6db298b6a1c447cfd0e1937ff11eb4ae8c74d913bbc68a1c585441e6d8e2512d0848"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000004e00)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, &(0x7f0000004d00)={0x20, 0x82, 0x2, "a42a"}, 0x0, 0x0, 0x0}) 10m9.220673694s ago: executing program 2 (id=97): socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) pipe2(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0x40000000, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x97e, 0x0, 0x1012, 0xffeffffe, 0xfffffffd, 0x0, 0xfffffffe, 0xffffffff, 0x0, 0x40000002, 0x800, 0x0, 0x0, 0x2, 0x0, 0x20000]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 10m6.636869112s ago: executing program 2 (id=99): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) syz_emit_ethernet(0x76, &(0x7f00000008c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800403a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa03029078000000006000081000001100fc01000000000000000000000000000000000000000000000000000000000000bb00000000100000450000000000000003efc66ccd96a2d0e3c846e456e12e5a08a4bfa79466e49cd216a5879b04a2be27b1b5128770214eeba2b32b8641fe2de3"], 0x0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/ref_tracker/netns-7-4026531833-notrefcnt\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000200)={[{@inlinecrypt}, {@inlinecrypt}, {}]}, 0xff, 0x54a, &(0x7f0000000340)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 10m1.031884496s ago: executing program 2 (id=110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffe08, &(0x7f0000000040)=0xfffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x100000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0x40045010, &(0x7f0000000040)=0x5f) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0317000000000000"], 0x8, 0x800) 9m56.720953964s ago: executing program 2 (id=113): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setfsuid(0xee00) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000180)='./file1\x00') mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r5, 0x5, 0x4) 9m38.993830705s ago: executing program 32 (id=113): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setfsuid(0xee00) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000180)='./file1\x00') mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r5, 0x5, 0x4) 8m52.689364853s ago: executing program 3 (id=198): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x427a7000) write$cgroup_devices(r2, 0x0, 0x6) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32, @ANYBLOB="0200000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055490100000000009500000000000000bf91000000000000b7020000000000008500"], 0x0, 0xb, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00'], 0xdc) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/151, 0x97) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 8m47.944805022s ago: executing program 3 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) socket(0x1d, 0x2, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) userfaultfd(0x80001) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000002c0)={0x0, 0x5fbd, 0x400, 0x3, 0x32c}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ba7, 0x20000, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x8, 0x3, 0x148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x3, 0x125, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x81, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0xfffe, 0xd3, 0x0, 0x0}}, 0x0) 8m41.893756913s ago: executing program 3 (id=208): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f00000000c0)={0x2, 0xffffffff, 0x8, 0x3, 0x0, 0x401}) 8m36.511045025s ago: executing program 3 (id=219): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8000000000000, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_emit_ethernet(0x6e, 0x0, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 8m33.466058577s ago: executing program 3 (id=221): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) syz_usb_connect$uac1(0x0, 0x94, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x47f, 0xc010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x54, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xc7, 0x4, 0x4, {0x7, 0x25, 0x1, 0xc, 0xeb, 0x239f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3, 0x5, 0x8, 0x76}, @as_header={0x7, 0x24, 0x1, 0x8, 0x11, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x3, 0x7f, 0x3}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5, 0x1, "9b", 's'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x0, 0x8, {0x7, 0x25, 0x1, 0xc, 0x8, 0x1}}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x0, 0x4, 0x1, 0xff, 0x6}, 0xd0, &(0x7f0000000400)={0x5, 0xf, 0xd0, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0xc4, 0x2, 0x401}, @wireless={0xb, 0x10, 0x1, 0xc, 0x35, 0xfe, 0x22, 0x9, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "98d546eace8a0808a76e1bd69bfa717e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x42, 0x3, 0x0, 0x83, 0xc}, @generic={0x97, 0x10, 0x1, "dd59f746f888c6f563c3da5d550deb8a31e26b5c34d969f99ddcd92c08eb90a2da6a8c4e1c905ab934225fcfbcf66dd97372fcf7d3ff5b63e0cd51fe55736ee831d65e5df0e83263cead7f8c0e24a7807d2f4d30bc40fa877fd0d8b8f27e72fd181f5ad21629609c24a7a5a106e8cd0be6a7bb9e81f97fd16632432125672526a7950ce7516cc35b21901794fc0544f17b42dd36"}]}, 0x4, [{0x44, &(0x7f0000000540)=@string={0x44, 0x3, "828d68525c98aaf8a1e9b0e99615eaf1c8b40245e341bdc990f209160322c2961f13e12bf85363fafb64229769027d40bdf0c688bbf91a5759198920de9c39592043"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x140a}}, {0x0, 0x0}]}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @dev}, &(0x7f0000000180)=0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x2000000000000007, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x14, r3, 0x30d}, 0x14}}, 0x0) r4 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r5 = dup(r4) write$binfmt_elf64(r5, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x23e, 0x3, 0x3e, 0xcd, 0x4000000000001d4, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x0, 0xe223, 0x6b1, 0x501}}, 0x40) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f0000000840)={0x773137e4bd37ddd4, 0x1, @stop_pts=0xb29}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$getflags(r6, 0x401) r7 = io_uring_setup(0x1680, &(0x7f0000000040)={0x0, 0x3caf, 0x4041f086f7e38936, 0xa, 0x20002f6, 0x0, r6}) syz_emit_ethernet(0x8e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x58, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x7, 0xf989, "3138ee"}, @mptcp=@synack={0x1e, 0x10, 0x7, 0x2, 0x7, 0x10, 0x10001}, @sack={0x5, 0x16, [0x1, 0x0, 0xfffffffa, 0x2, 0x80]}, @exp_fastopen={0xfe, 0x14, 0xf989, "ff384d5a35c74299427b77d3bb4518fd"}]}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) io_uring_enter(r7, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 8m27.410874892s ago: executing program 3 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = semget$private(0x0, 0x6, 0x1b5) semop(r4, 0x0, 0x0) semop(r4, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0x200, 0x800}, {0x3, 0x1, 0x1000}], 0x2, &(0x7f0000000100)={0x77359400}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r5, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 8m11.450268946s ago: executing program 33 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = semget$private(0x0, 0x6, 0x1b5) semop(r4, 0x0, 0x0) semop(r4, &(0x7f0000000200)=[{0x0, 0xffff, 0x1000}], 0x1) semtimedop(r4, &(0x7f0000000040)=[{0x0, 0x200, 0x800}, {0x3, 0x1, 0x1000}], 0x2, &(0x7f0000000100)={0x77359400}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r5, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 4m35.893004335s ago: executing program 1 (id=559): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x401, 0x1000, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x11}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r2}, &(0x7f00000000c0), &(0x7f0000000740)='%pB \x00'}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x33, 0x0, 0x0) 4m32.733475398s ago: executing program 1 (id=560): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket(0x2b, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000002c0)={0x0, 0x5fbd, 0x400, 0x3, 0x32c}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ba7, 0x20000, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x8, 0x3, 0x148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x3, 0x125, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x81, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0xfffe, 0xd3, 0x0, 0x0}}, 0x0) 4m32.041107111s ago: executing program 1 (id=564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4m31.249394431s ago: executing program 1 (id=567): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000600)=0x5bb, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r2 = socket(0x8, 0x5, 0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) close(0x3) r3 = socket$key(0xf, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x44400, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYBLOB=',group_id=', @ANYRES8=r3]) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x12810a4, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = epoll_create(0x7) r6 = epoll_create1(0x0) r7 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f0000000080)={0x1008}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)) 4m30.386246092s ago: executing program 1 (id=570): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5hj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!\x10\x00\x00\x00\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf8l\xb5b\x83\x00\x00\x00\x00\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\x00\x00\x00\x00\xe0T\x1f\xbc\x85\xd1Z\xa9\x01Z\xc2\xb0\f\x9a\x16\xa50\xf74\x88\xeez@)&\xb5\a\xc1\v\xe7\xdf\x80\xe4\x9c\xf5f\x94jC\xb1\xcfh\xc5g\x02\xc6 U\xe5\xcea\x88\xee\x0f\xf57*\xc6\xe8iWTav\xff\xd9\xb0C\x1e\xbe\x97\xc8$-\x8d)\xe8\\\x8e;I\xde\x8a\x8e\x0fq\x06\xee\xb9\xc1\xf1)\xa0\xd9T\xec\x8b\x85I\x87OZ\xd8\"4\x87\xb1\xed?:\x84S\xb9\xbf\xab#\xd0N\x8f\x1ey7\x9286p\x10uZ\xf0\xd7\xe5\xba\xe7~\xfb\x8b\xce+fL\x11\x8e\xec\xe3\x90w\f\xf1~\x9a\x95v6\xe5O9\xae\r\xed\xac\xb8\t\x8eD#\x8a\x93\xd0\xa7\x12F\t\x03\xa4\x8f*\x1a\x88\xffq\xf9\x03\xca\x97\x98\\\xcaN\x18\xce\x8a\xf3]\\<\x00\x97\x1a\xf6\xfbs\xe6A/\x1c\xe0\xdb\xad\xe7\x16K:6\x0fo\x9f\xe3\x9f\xd91\x10\xd6qoz\xcc\xee?PvF\xde\xf5&o)c\xb4\f*\x0e\xb9\x85\x95\x01\xf0`g\xb7\x03\b\xc41\x90\xa6\xafB\x1b]\x02U\xcb\\\x1fiR\xb7v\xddF\xa59P\xb9\x10\xab\x1c\x05$\xd3P\xba\x83\x1b\xb7\xb3\xf4_\xe1z\x95\x03J3\xf8\x8c;J\xad=\x0f\x98', 0x1) write(r1, &(0x7f0000002140)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba40", 0x21) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r1, 0x0) readlinkat(r0, &(0x7f0000000040)='./file1\x00', &(0x7f00000021c0)=""/102372, 0x18fe4) 4m29.973188501s ago: executing program 1 (id=572): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r2 = add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000), 0x80) keyctl$invalidate(0x15, r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) syslog(0x3, &(0x7f0000000140)=""/4096, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, 0x0, &(0x7f0000000040), 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 4m29.216324631s ago: executing program 34 (id=572): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) fsopen(0x0, 0x1) r2 = add_key(0x0, &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000), 0x80) keyctl$invalidate(0x15, r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, 0x0, 0x0) syslog(0x3, &(0x7f0000000140)=""/4096, 0x1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_ublk_setup_io_uring(0x64d, &(0x7f0000000240)={0x0, 0xd58c, 0x1000, 0x2, 0x14d}, 0x0, &(0x7f0000000040), 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3m32.110652255s ago: executing program 5 (id=671): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) close(r0) 3m31.580418353s ago: executing program 5 (id=675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 3m29.864028011s ago: executing program 5 (id=680): r0 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setfsuid(0xee00) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r3, 0x5, 0x4) 3m28.733443077s ago: executing program 5 (id=684): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000600)={0x0, {0x0, 0x80000000, 0x3800, 0x0, 0x401, 0x7f}}) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x20000000000000b, 0xfffffffffffffffd, 0x200, 0x4a, 0x2b, 0x80000005, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53b30ad0a21007c3cb8fe4f81000946b00", "6ef390e675e608f371455a4e", 0x400003, 0x2aca, 0x7e0, 0x87d42, 0x9e}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000bc02080000e3000095"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@test_dummy_encryption_v1}, {@acl}, {@noinit_itable}, {@noblock_validity}]}, 0x1, 0x5c4, &(0x7f0000000c40)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6064cdd800100000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c204"], 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x80, 0x6, 0x201, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x61, 0x5f]}}, &(0x7f0000000680)=""/246, 0x29, 0xf6, 0x0, 0x1}, 0x28) 3m23.390033448s ago: executing program 5 (id=697): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2b, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@journal_dev={'journal_dev', 0x3d, 0x5}}]}, 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000002c0)={0x0, 0x5fbd, 0x400, 0x3, 0x32c}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2ba7, 0x20000, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed79, 0x8, 0x3, 0x148}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x3, 0x125, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x40, 0x81, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r5, '\x00', {0xfffe, 0xd3, 0x0, 0x0}}, 0x0) 3m19.096917763s ago: executing program 5 (id=708): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8000000000000, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socket$inet(0x10, 0x3, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3m3.720786638s ago: executing program 35 (id=708): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8000000000000, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) socket$inet(0x10, 0x3, 0x0) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_clone(0x18200000, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 2m58.497380743s ago: executing program 0 (id=756): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) listns(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x5, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000006c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f00000005c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000600)='./cgroup\x00') mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000180)='qnx4\x00', 0x1208800, 0x0) 2m56.616548958s ago: executing program 0 (id=760): mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) syz_ublk_setup_io_uring(0x22cf, &(0x7f0000000240)={0x0, 0xd58c, 0x10, 0x3, 0x108}, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x200}, @restrict={0x3, 0x0, 0x0, 0xb, 0x5}]}}, 0x0, 0x26, 0x4d, 0x0, 0x6}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket(0x2b, 0x1, 0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r3, 0x0, 0x0, 0x0, 0x0, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 2m52.971316916s ago: executing program 0 (id=766): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x7, @empty, 0xe229, 0x1}, 0x20) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x8, 0x400000}, 0x20) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x0, 0x10, 0x7fff7ff9}, {0x9, 0x4, 0xa, 0x2}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) dup2(r0, r1) r2 = socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) syz_usb_connect$midi(0x0, 0x39, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x1, 0x3, 0x60, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x28, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0x3}], [{{0x9, 0x5, 0x9, 0x2, 0x10, 0x80, 0xd1, 0x7, {0x6, 0x25, 0x1, 0x2, "6d11"}}}]}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000680)='1', 0x1) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0x7ff, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @local}, "695a31130fbfeaee"}}}}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0x1) 2m48.971247987s ago: executing program 0 (id=772): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa8201, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) clock_nanosleep(0x2, 0x0, 0x0, 0x0) close(0x3) r1 = socket$inet6(0xa, 0x80802, 0x0) sendmmsg$inet6(r1, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000) ppoll(&(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x4e21, 0x80, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @empty, 0xfffffff7}}}, 0x108) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0xaf, 0x5}, &(0x7f0000000480)=0x90) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="052b01e77d9b0f20771a9f66a804000000f274e63e8417ee5d0a12472e27629d2a6587eb12699af2468c5c3bf004524a59ce64d63d66d307f4ab67ce3ae6e67df3cc71c50086db7f45fe0409543735cd989d9bc9e05e018ca85acb810f1770e62157d19fdde4c77f5a336d9b7352103ea56456b6c1ec260f7d1ad39eca79fc5a18cd73", @ANYBLOB], 0x30}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000640), 0x40c000) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYBLOB="0a0006000802110000000000"], 0x28}}, 0x0) 2m47.13698459s ago: executing program 0 (id=775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffe08, &(0x7f0000000040)=0xfffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x100000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0), 0x0) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0x40045010, &(0x7f0000000040)=0x5f) ioctl$SNDCTL_DSP_RESET(r4, 0x5000, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) msgsnd(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0317000000000000"], 0x8, 0x800) 2m44.868735654s ago: executing program 0 (id=779): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 2m29.703856868s ago: executing program 36 (id=779): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 12.764013658s ago: executing program 8 (id=1067): syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109024800010157004009040000000206000005"], 0x0) 11.233958541s ago: executing program 6 (id=1071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbc2, {0x0, 0x0, 0x0, r4, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2005, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 10.520093364s ago: executing program 8 (id=1072): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 10.357372351s ago: executing program 4 (id=1073): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001680)='veno', 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$netlink(0x10, 0x3, 0xb) sendmsg$GTP_CMD_DELPDP(r1, 0x0, 0x8000) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 10.201292948s ago: executing program 8 (id=1074): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c6", 0xa1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) 9.351863035s ago: executing program 8 (id=1075): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x21, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000001000)='O', 0x1}], 0x1, 0x0, 0x0, 0x8048040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 9.330496984s ago: executing program 6 (id=1076): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r4, 0x40047454, &(0x7f0000000000)) 8.308774097s ago: executing program 6 (id=1077): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xb, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x44) r0 = openat$nci(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$nci(r0, 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r2, 0x0, 0x0) 7.48163273s ago: executing program 8 (id=1079): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x400000000010, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') process_mrelease(r7, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r9 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x109301) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) 7.289889893s ago: executing program 6 (id=1080): epoll_create1(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)={0x20, r1, 0x30d, 0x4, 0xfffffffd, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe8c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20000800) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x100007ff, 0xf83, 0xd3}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f000002eff0)={0x3, &(0x7f0000000040)=[{}, {0x7f, 0xf, 0xb, 0x3}, {0xa121, 0x3, 0x81, 0x1}]}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x1, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3c}, {@in6=@private2, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0x2}, {0xffffffffffffffff, 0x2a, 0x1f, 0x7b8}, {0x2, 0xfffffffc, 0xfffffbbc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 6.008073073s ago: executing program 4 (id=1082): r0 = syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="20171a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.328952979s ago: executing program 7 (id=1083): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x11, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 5.176140882s ago: executing program 4 (id=1084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x7c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440), 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(0x0, r1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(r3, &(0x7f0000000100), 0x0, 0x8001, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) close(r3) sendfile(r3, r2, 0x0, 0xf03a0005) r5 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000004200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f00000041c0)={&(0x7f00000004c0)={0x33c4, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3388, 0x3, 0x0, 0x1, [{0x644, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7c6}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xee, 0x1, "e82d4f4491238356f64dcd60bb8844e5d56e13d238e323c363296d1627f93e455c25c696bb33b3a5dc6e9c5704266028bcca4ed5e8e2ca5fc40b04836f874b477c347bc0417bd159eb383471e68d8a62bce20953ce07e2bfef49ff5b62276293152f8918c7f1031a19bd88f0ec207dd858171d68c5644e0e19179e221b1681701c0b772c19055f4bf8b6b679b60061d4bbecf9ca9f6c50d5f2545f2961cf8fb17059747a6f83138348b4d0358f5cf91028e8c1eb478e69c993125baf2cd2c88ae2ab1b0a9a65d840211ee215b3ca17e5837722645e41c6ee742fa320718dd30605318785d3b331d9020f"}]}, @NFTA_SET_ELEM_KEY_END={0x1b0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4d, 0x1, "40eeb80d00468c4475dab1b986c61f4d2fd475c555d7659298ed469fa97286c4e65dd400a872ecd000ba13b27d49a9b6f5dfa5b7212825eb81211c9910be3ede9b6ecabcf43b27b79a"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x15, 0x1, "64686fad92681ebc3ef38bd290eef016fd"}, @NFTA_DATA_VALUE={0x7d, 0x1, "3f641c5ce42f88cae458e9bb1d61514a94760714a9abf60c36834aafff4b037b2a29716bc9ee7d36e66c7cccd6316d1197437996fe73b6411d891a65f3fc74cb0bef20bd7267e2d272e360fb55418ed67041892dc5b56396f07f6600a8b690493785cc7617cef6a5652a2665205bf39fdb2b6919b22dade1fa"}, @NFTA_DATA_VALUE={0x8a, 0x1, "68902249d0eee8279a12654b3505abf72853bb7fffb7b8d57a6f257e4f23d5cd62adc193653e6f19f75114a1bb52b3edcae37ed3572940602762771f71df58ecdf1c0a377fa6461e6364d574a553cf470ae0e56150d545b198cf668d3925799383444e95a5bccab371604e995a3de0f3109f95aef53e339010aa337f7ef11eae7495e957f8ea"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY_END={0x9c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "95994e946013192ca1dedf6e3e95d524323de57cd880ebee6f4e628361db12759255edce5c46bf5df5143c5e9eb873f4d23444418af040e3a4ce0d64cfdcf7ecf16e9c3fd1147965fa7998ee28f203b95f58e0470ee130db16e6302ec2e9cf0dff364bf0185e7571fd7274df5c6ff6a29511ff703f6fdd21eb9f2fd4092b0d3378cb3c4629ec3f19c888767fa73501abc8a9"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0xa}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x100}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_KEY={0x210, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x55, 0x1, "57172c1a40a290a0d4ce069677cc9e94f3fa0546e0fd7ed0571f2cb06f5d2facd31f6f39c75752bf4f0bcb32910c2cc06b5f4e724e20a6db35650abde855aaeef73e82338f44051b6a550f98fce206c264"}, @NFTA_DATA_VALUE={0xe6, 0x1, "abbdde91780ca5690f8dd3c44cddbcdaec1ffbd3599710945bb36dfa8b8c7eeeceb6fb2a372a43f25f760996bab60088a762ed61b6fdcbaf90375addeb9839c8c76b83e23ba32d892fc7f42372b8978329ede19963b2d78e9e893e479ae6c03563ebd0fc300e97a2b7e66d746ef377c40c7feedc17cefb3dd184b1b193d97908581acf6a1ed0f282f3fcdf06a7e8dc7cdb02a118658b4b79b3c2a965acefcdcf8815bc0bd2cffc935a949574f519ca21ce550e188460d74d669ff1716afb34b2303583c345ca08dc48c87379f6658f7214b9af1817cef903d73d871b0d0a651ec5c8"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}, {0x1444, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xf8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe4, 0x1, "17fda871d0ae432a12559f5b8d9cdd8f0368932488dcae78f3452c1ce6379796a7a2d2b1957980c5dddf7478e0f1929ec45037cb2744d9b3b1140ef12e579e882425ced4a405113872cdb0c91365935e44985023b21e2f7a4c2d5de64f4eadb1048098771df7d427a0ef63e7338e6a3c7ba9e98eae72b1ce8820de80d1ae26b5dedd1c4ac3abc05bc9f7a88c9d27043ee9c5ca9f58700d535c2975cca6bd16546bb3275b85e75a132ca9d8baf65a08984b17b6a113eca28b946f1f7fdd054ee2b124e5350ab7d35ad51b7ccf8941ca273c8532868e23a603deea164f35ba22df"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x12f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x9c, 0x1, "e78b835b3abe17b75ad15054871094bbd7bf7bbc28673e5fa69e8038c66c46d44b2b99c28ee40a69e43a89f7eb10e00ed22bcdb3db9aee2642af8725a0bcc1c5a3c47ddb7f9a19ba9e43f24e1fd785ef7a372211ef7035a960f906ab05e148b31b373f12d4d4694a5dc5567c7b725f441eadcf4fb10a4759f1d23e4b1be2b26737cf941d4c07d1848c6af8674701cd5508fd09e25298028d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x54, 0x1, "32faf6c16ac9a2df991d01639bd001ff7b0e1678c4e253cfccc098b0753928ec28ae847ca3eafd82cb47832a9c557a156824198823621cc7879f375f92d68f6b4c15d5a61ceedcee976867aac015d7b2"}, @NFTA_DATA_VALUE={0x96, 0x1, "e1aece4a14c2a359f841c5509d5a4698bfd729d39b81787bac6148e7ddca71834e39e2233de65357d4eaba85e1f9cc66d0cdd21ecc0c81f6470ef6d9c625012894e625cd59e591715118699a1eb67f6fbb011566030ae8a4f72adacb2a409db59a1c5dd1c6fb19dc2508692f970d80ae6c52b1ad68ecec7e7f547837112844aff27e66d8164a4e6254fbe831d3c3326a19a8"}, @NFTA_DATA_VALUE={0xf2, 0x1, "5337e7570000f4709c9454f1e9224b42fe33494d1417a8f07fe1b75c000821f989767b1857fa3b78a13956139a646863f2a46b34d7efcdedf05e1103d068d4cfc8eed117a0dad0bacec748c5fc6a2b92f324002415e76dc63bef4b573cc55bf1c5a77814f735d11948e7c7b040f41cf12d5bbc9c0fda3fe198ff54284bdc671295cceeb141491da07941867ebb8d92fd3744e262c075b88cca4dbd99df1770a56325617b9a6e56723bb7f1e0fa9c7677e86e18a67ba0dfa44e4dcc673e957d78fdd474a358366dd9410c569c7697c6c06472e6033368a043541b55233e0ccf6507bfcbf713a17764e8f6499dbe49"}, @NFTA_DATA_VALUE={0x58, 0x1, "d2ff4f865f7aa40795d810f226d2d668cbed7dd0ad0bf76c31ec34b4257649d7c836a95469a23f5ad232d5667a3e461e227e6106b6d65d33cf604c40a759c62d239f532c4adf8571f54dcca03286c1b73ba97459"}]}, @NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x58667bce}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0x10, 0x1, 'TCPOPTSTRIP\x00'}]}}}]}, {0x4}, {0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x3f, 0x6, 0x1, 0x0, "a6bcb5907876f216051525784dd4a742b665d27e71bc283d528e433ef08b7c6add41d0b34fbbac261952c93379139bbc411cb0c7fe80d0628a29d9"}]}, {0x13c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_USERDATA={0xe7, 0x6, 0x1, 0x0, "5bbc39f73c2bfe177b3c4d9db3258a8628dbc7e5fe22b0942c415b19ac9dada83ac040da9f403a4465095d34cb8245c7842c52ba8047b7915640287efc366a94795dac139deb5c0fb361481123b8386edd335069423318327f286e36679cb44fb1b2fa23e2e01fc3baf9aa1218b4fa60a8d4b8856c3761875655c1e5399b421e6a7079ce6b884868f893023d18d892278650c91d5c5c5e4afefc7b31124e0efe6133b1599effc70ceea3008504bf1aaa1b6385c0380d01d422eca4205d34778753a57bac636fac518f34540c83e0c871d4844368a1b53bb1e3b5bc5594d46d2cb5f81d"}, @NFTA_SET_ELEM_KEY_END={0x20, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @dynset={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, {0x5b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x240, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfd, 0x1, "3a0dae6797f38752aa59d756fb43254fa2284005001ceff8b082eab7d2be3b948425ab37febe5e11fdaf32daf4fb544caa4d502c618d212b30767d252e12d37bf6f5fcea4b7466510fe10ff5039667c56fc1d9adfc74dfd486da2c9d33767e5097a31927b5441bb3afa0322638b3cebf94737784ec6c02789fe53b67bcbb0f33599bb29a0abcdfc21241579221f9c635946dda7e1e0e15ca0f19093c1635ff85fe379b9eb30fba252feafb3d9403260f54a478c7edf669abff34133944add14de64a8f3e7e5ad4914fe8377a44aaaff681180af1f743399e16e1d585311ec3c92d577de5f45bf9e53258d4b4a06572ca36d03edc3d65ceb902"}, @NFTA_DATA_VALUE={0xad, 0x1, "2bfb33bb9f215dc5a4c77490d4545c7de0f8badd10f2c1cd1f013d1303b00a33c9979ea488e3598409645c9431128ef732d0af24c2b23a0bfcc52339b903d0c3394bccfee459a2e83ad8cd242660ef53ad1a362f405055d19a1d9227d77a2fe82246b7786a043d9d5ed0bd45c116902392ee830028db178c2dd668d9a0046c033702c88caa0315db38e03c9a8b186eb6321639ba76550466f1dac73cb73bf5b14ca2cbcf62d474d0fa"}, @NFTA_DATA_VALUE={0x8a, 0x1, "aecef0877f04974611f73d077d22c3e5cd436bb103c3c5e9729abe4e42129b775e2bebe5129b2d225a59960e03e195a7306f2f8f19de13e4e85afc4a585dd9d699702c9d04cf7429af06691321458925a9db6ceb0bf0bff222244dd65c4903dab6661d3dd496491305f9e9b111adcdafa7fab8c9b30d5f107ebe931ac87512e9bf1553678de9"}]}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x20}]}}}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @queue={{0xa}, @val={0x4}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x2f4, 0xb, 0x0, 0x1, [{0x228, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x218, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_NAME={0x9, 0x1, 'DSCP\x00'}, @NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_INFO={0xeb, 0x3, "4e5db9f6092a3ca6786e0363f667a66db7bec0c336bf705be14898d8918801f7a9b907f8992c4e681628ee10a0d20afd99aa75ec87a67785f556dc5b6d39f236eeac15c3469e5f92037b83374d901f5f19d9d384c2b9f19904e35852745cbc567208fac1366f35c402d786e57e08741218141bf25e20c1b7c5ca71338b4cd5e0d12a71103322d9c9a62a438d39050b00424e1b85ce6d83dec2f28114d521befebf34d7a4dc1b8ca87f90ad6be2acbd24b2a2d02e2cf542a64c2028cdd3fff0268ce76e87149b17f2a0af82a879e25ac45c6f9a73ab1955ff1382c449a9744b773b63e602c0fe88"}, @NFTA_TARGET_NAME={0xf, 0x1, 'MASQUERADE\x00'}, @NFTA_TARGET_INFO={0xe2, 0x3, "f8c779d12d46e08a71a0c0aaf45d9f85834f140ca31e9675e7780bca82403524ba03f9e4e1a3c4b5439aac096da05769d06e91e5676a13abfba638a106bf8bc4827d0a83ec64bc7db5d86df111133270f10bbde6fa83ce64f0d7a99b8561d297d4a655c21a9adbc7508d1817806a8f09bb37773ca27e54cc811f864d03394a67f11cdcd6eebf0f8994fe6c723ec2f3d4893372b145686f5f846f1ac5755fbcda6d3fad8bdb884ef91f31c45e4717b0a0b0e523ba573006d41687ff907734d1a9f117f17ed6adb5fa0a794296f514f9e2e960cc51cd891857cf5d1686f9b1"}, @NFTA_TARGET_NAME={0xf, 0x1, 'MASQUERADE\x00'}]}}}, {0x74, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xa}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe902}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6d66722}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4d09}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}]}, {0x101c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @lookup={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0x1008, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xd59e}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xa6}]}, {0x18c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x24, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY={0x114, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff9}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x95, 0x1, "1d9bd067ac702ae2b7b88499b5f3d70974b6f27e31d0688ef79acee51d551c38f2ddf9002b3d1bc51283f9ea090f836f219fb54553a4b07a92762843c56575d52bdb6ad1055e70332579ea1503bb09ea006ee62101bab3315abaeb11a93916a43ec2293c71baa4b792303f5f75109f104b1ee84c40963dd4b2b44f8535c47afc91980cf7ee6c9993df54adda4a3f7679f4"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x33c4}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000002000000000071120800450000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x30, 0x1, 0x0, 0x4, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0xc, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="50bb2d6f67d29d6fab98adb107d0def49c88ea04abde1d5e8d3fb22a1b50f8778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddca0800000000000000b9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82"]}]}, 0x114}], 0x1}, 0x0) 4.730015856s ago: executing program 7 (id=1085): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c6", 0xa1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) 3.771431812s ago: executing program 4 (id=1086): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40082}, 0x8000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r2, @ANYBLOB="48002f8008000100030000000c0002000203aa8aaaaaaaaa3000038024000380060001000200000006000300a1aa0000060001000000e9ff0700020001000000080001"], 0x64}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@loopback, 0x4e23, 0x10000, 0x1c8, 0x12d61, 0x6}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x9}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r7) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 3.584552818s ago: executing program 7 (id=1087): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r0, 0x2, 0x5003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4041091}, 0x844) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) 3.462407488s ago: executing program 6 (id=1088): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) 2.618639791s ago: executing program 7 (id=1089): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) close(r1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(0x0, 0x0, 0x2000) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, 0x0) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.545734116s ago: executing program 4 (id=1090): socketpair(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="e713360e181faf611103ee3597d61a82b0822c2b405fb0456ef961d1a8185e9811c19c07564f23cbd6036dd0ff86f396e8fab1b5d08affaa672d724894eb85ad9c3dc5ecab9a314ad9f131a9f7a51cc8042c6c785a3261e05c784ec4dddbc99470f5ed4c783b04541ff7660dd738a66c2ae0d281e3d160337a01b1ba069044", 0x7f) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") sendto(0xffffffffffffffff, &(0x7f0000000040)="2c0000004f000101010000000000000000140000070001006c6f00001000", 0x1e, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c000500040007020000020008000100030000000500020003000000050002"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r5, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000100)=0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r6, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x2, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {&(0x7f00000004c0), 0x1f, 0x28, 0x0, 0xffffffffffffff30}, {&(0x7f00000003c0)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.571363273s ago: executing program 6 (id=1091): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8000000000000, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) syz_emit_ethernet(0xc6, 0x0, &(0x7f0000000540)={0x0, 0x2, [0x43b, 0xb10, 0x33e, 0x6ea]}) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x3, 0x480000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 372.303498ms ago: executing program 7 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 215.243195ms ago: executing program 8 (id=1093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0100001000050000000000000000007f000001000000000000000000000000b11b748400000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000008000"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 209.126509ms ago: executing program 4 (id=1094): r0 = syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="20171a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 7 (id=1095): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet_icmp(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a"], 0xf8}, 0x1, 0x0, 0x0, 0x48004}, 0x808) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x8d5}, 0x40090) kernel console output (not intermixed with test programs): ite reg index 0x00000030: -71 [ 502.805170][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 502.835865][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 502.863926][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 502.900370][ T10] usb 5-1: USB disconnect, device number 12 [ 503.002643][ T5622] Bluetooth: hci2: command tx timeout [ 503.352449][ T8506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.543327][ T8506] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.647177][ T5622] Bluetooth: hci1: command tx timeout [ 503.868339][ T8900] loop5: detected capacity change from 0 to 512 [ 504.402045][ T8900] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 504.903670][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.910951][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.156293][ T5622] Bluetooth: hci2: command tx timeout [ 505.532567][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.539701][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.700913][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 505.734981][ T5622] Bluetooth: hci1: command tx timeout [ 505.753792][ T8858] lo speed is unknown, defaulting to 1000 [ 506.153137][ T5770] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 506.334946][ T5770] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 506.393482][ T5770] usb 6-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 506.398081][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.588'. [ 506.406391][ T5770] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.539683][ T5770] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 506.585569][ T8936] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 506.902137][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 507.156400][ T8947] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 507.267785][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.292349][ T5622] Bluetooth: hci2: command tx timeout [ 507.309028][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.327498][ T8812] bridge_slave_0: entered allmulticast mode [ 507.355560][ T8812] bridge_slave_0: entered promiscuous mode [ 507.489320][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.519266][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.540015][ T8812] bridge_slave_1: entered allmulticast mode [ 507.547922][ T8812] bridge_slave_1: entered promiscuous mode [ 507.604210][ T8506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.621228][ T5770] stv0680 6-1:4.0: STV(e): camera ping failed!! [ 507.642066][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.695233][ T8812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.806759][ T5622] Bluetooth: hci1: command tx timeout [ 507.823708][ T5770] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 507.846318][ T5770] stv0680 6-1:4.0: last error: 0, command = 0x0 [ 507.858722][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 507.865237][ T5770] usb 6-1: USB disconnect, device number 14 [ 507.895692][ T8812] team0: Port device team_slave_0 added [ 507.985298][ T8812] team0: Port device team_slave_1 added [ 508.228788][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.238111][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.264304][ T8812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.279859][ T8812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.290179][ T8812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.318818][ T8812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.674258][ T8812] hsr_slave_0: entered promiscuous mode [ 508.681209][ T8812] hsr_slave_1: entered promiscuous mode [ 508.700184][ T5886] bridge_slave_1: left allmulticast mode [ 508.713600][ T5886] bridge_slave_1: left promiscuous mode [ 508.725055][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.766983][ T5886] bridge_slave_0: left allmulticast mode [ 508.776805][ T5886] bridge_slave_0: left promiscuous mode [ 508.788918][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.980832][ T8985] loop4: detected capacity change from 0 to 512 [ 509.386480][ T8985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.528938][ T5886] pim6reg: left allmulticast mode [ 509.883116][ T51] Bluetooth: hci1: command tx timeout [ 509.947308][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.197927][ T5886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.236369][ T5886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.283455][ T5886] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 510.356222][ T5886] bond0 (unregistering): Released all slaves [ 512.509892][ T9022] loop5: detected capacity change from 0 to 128 [ 512.530623][ T9022] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 512.543865][ T9022] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 512.839386][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.865931][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.895900][ T8858] bridge_slave_0: entered allmulticast mode [ 512.937807][ T8858] bridge_slave_0: entered promiscuous mode [ 512.958995][ T5629] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 513.079042][ T8506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.102157][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.148576][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.181829][ T8858] bridge_slave_1: entered allmulticast mode [ 513.285388][ T8858] bridge_slave_1: entered promiscuous mode [ 513.342142][ T9039] loop5: detected capacity change from 0 to 512 [ 513.984854][ T9039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.448544][ T5886] hsr_slave_0: left promiscuous mode [ 514.458489][ T5886] hsr_slave_1: left promiscuous mode [ 514.483273][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.505472][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.643202][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.266843][ T5886] team0 (unregistering): Port device team_slave_1 removed [ 517.367774][ T5886] team0 (unregistering): Port device team_slave_0 removed [ 519.688953][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 519.931554][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.977986][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.190973][ T8858] team0: Port device team_slave_0 added [ 520.215999][ T8858] team0: Port device team_slave_1 added [ 520.425730][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.433600][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.459999][ T8858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.551596][ T8858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.568540][ T8858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.606572][ T8858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.837784][ T9109] netlink: 36 bytes leftover after parsing attributes in process `syz.5.619'. [ 520.865240][ T9109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.619'. [ 520.907802][ T9109] netlink: 36 bytes leftover after parsing attributes in process `syz.5.619'. [ 520.917207][ T8858] hsr_slave_0: entered promiscuous mode [ 520.918419][ T8858] hsr_slave_1: entered promiscuous mode [ 520.941858][ T9112] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.956973][ T8858] debugfs: 'hsr0' already exists in 'hsr' [ 520.988081][ T8858] Cannot create hsr debugfs directory [ 521.124845][ T9114] netlink: 'syz.4.616': attribute type 2 has an invalid length. [ 521.133146][ T9114] netlink: 'syz.4.616': attribute type 1 has an invalid length. [ 522.418471][ T9111] Process accounting resumed [ 522.425510][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.435845][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.445380][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.458819][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.466643][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 522.530674][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 522.732774][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 522.757015][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 522.805405][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 523.024073][ T24] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 523.175310][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.282949][ T24] usb 1-1: Product: syz [ 523.342947][ T24] usb 1-1: Manufacturer: syz [ 523.397532][ T24] usb 1-1: SerialNumber: syz [ 523.435137][ T9123] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 523.586448][ T8812] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 523.646528][ T8812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.658635][ T9138] syz.4.622 (9138): drop_caches: 2 [ 523.684813][ T8812] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 523.742812][ T8812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.773284][ T8812] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 523.808450][ T8812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.820530][ T8812] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 523.849447][ T8812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.947754][ T9122] syz_tun: entered allmulticast mode [ 523.991409][ T9118] syz_tun: left allmulticast mode [ 524.012496][ T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 524.041232][ T24] usb 1-1: invalid MIDI in EP 0 [ 524.185621][ T9156] qnx4: unable to read the superblock [ 524.380771][ T24] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 525.701092][ T5622] Bluetooth: hci4: command tx timeout [ 525.758166][ T24] usb 1-1: USB disconnect, device number 12 [ 525.837511][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.139703][ T8858] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 527.272839][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.282094][ T8858] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 527.301880][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.407441][ T8858] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 527.441568][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.467496][ T8858] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 527.491964][ T8858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.573294][ T9125] lo speed is unknown, defaulting to 1000 [ 527.586506][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.724925][ T5622] Bluetooth: hci4: command tx timeout [ 527.864703][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.977526][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.984712][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.418129][ T9210] netlink: 'syz.4.631': attribute type 10 has an invalid length. [ 528.546739][ T9211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 529.802260][ T5622] Bluetooth: hci4: command tx timeout [ 530.195532][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.202833][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.251067][ T1157] bridge_slave_1: left allmulticast mode [ 531.274366][ T1157] bridge_slave_1: left promiscuous mode [ 531.295879][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.319049][ T1157] bridge_slave_0: left allmulticast mode [ 531.327087][ T1157] bridge_slave_0: left promiscuous mode [ 531.334290][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.392608][ T5756] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 531.573766][ T5756] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 531.607236][ T5756] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 531.640492][ T5756] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 531.669853][ T5756] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 531.701365][ T5756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.727209][ T9214] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 531.882366][ T5622] Bluetooth: hci4: command tx timeout [ 531.961693][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.032956][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.068419][ T1157] bond0 (unregistering): Released all slaves [ 532.389276][ T1157] hsr_slave_0: left promiscuous mode [ 532.418387][ T1157] hsr_slave_1: left promiscuous mode [ 532.855786][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.856290][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.897007][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.922602][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.041527][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 535.947135][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 536.212394][ T9253] qnx4: unable to read the superblock [ 536.349451][ T8812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 536.437613][ T5756] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 536.451305][ T5756] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input21 [ 536.652155][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.940591][ T5756] usb 1-1: USB disconnect, device number 13 [ 536.940677][ C0] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 537.963953][ T9263] input: syz1 as /devices/virtual/input/input22 [ 538.127687][ T8858] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.568778][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.576087][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 538.624140][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.641610][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.665487][ T9125] bridge_slave_0: entered allmulticast mode [ 538.684276][ T9125] bridge_slave_0: entered promiscuous mode [ 538.719885][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.727146][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 538.758854][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.780081][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.802281][ T9125] bridge_slave_1: entered allmulticast mode [ 538.822797][ T5756] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 538.833549][ T9125] bridge_slave_1: entered promiscuous mode [ 538.864526][ T9293] loop4: detected capacity change from 0 to 128 [ 538.888338][ T9293] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 538.903516][ T9293] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 539.163782][ T5756] usb 6-1: Using ep0 maxpacket: 8 [ 539.171745][ T5756] usb 6-1: unable to get BOS descriptor or descriptor too short [ 539.190433][ T5756] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 539.245456][ T5756] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 539.272944][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.276664][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.331187][ T5756] usb 6-1: Product: syz [ 539.349525][ T5756] usb 6-1: Manufacturer: syz [ 539.355511][ T5620] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 539.361274][ T5756] usb 6-1: SerialNumber: syz [ 539.380681][ T9283] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 539.391591][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.469772][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 539.555570][ T9125] team0: Port device team_slave_0 added [ 539.596372][ T9125] team0: Port device team_slave_1 added [ 539.725468][ T9308] syz_tun: entered allmulticast mode [ 539.796756][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.817096][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.861418][ T9125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.888517][ T9282] syz_tun: left allmulticast mode [ 539.925420][ T5756] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.958415][ T5756] usb 6-1: invalid MIDI in EP 0 [ 539.974780][ T9125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.985483][ T9125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.074356][ T9125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.354259][ T8812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.133674][ T5756] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 542.148726][ T5756] usb 6-1: USB disconnect, device number 15 [ 542.200608][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.245123][ T9125] hsr_slave_0: entered promiscuous mode [ 542.279145][ T9125] hsr_slave_1: entered promiscuous mode [ 542.316501][ T9125] debugfs: 'hsr0' already exists in 'hsr' [ 542.333569][ T9125] Cannot create hsr debugfs directory [ 542.633189][ T5756] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 542.805822][ T5756] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 542.841315][ T5756] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 542.869435][ T5756] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 542.909751][ T5756] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 542.939351][ T5756] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.991548][ T9334] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 543.559578][ T8812] veth0_vlan: entered promiscuous mode [ 543.618401][ T8812] veth1_vlan: entered promiscuous mode [ 543.843182][ T8812] veth0_macvtap: entered promiscuous mode [ 543.900631][ T8812] veth1_macvtap: entered promiscuous mode [ 543.998260][ T9354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.015785][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.027585][ T9354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.039780][ T9125] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 544.080957][ T9125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 544.327821][ T9354] xfrm0: entered promiscuous mode [ 544.347766][ T9354] xfrm0: entered allmulticast mode [ 544.582679][ T9125] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 544.613694][ T9125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 544.679937][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.709879][ T9125] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 544.736680][ T9125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 544.753879][ T9125] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 544.771962][ T9125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.795436][ T8812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.847483][ T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.868374][ T58] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.883016][ T58] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.918047][ T58] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.170028][ T5756] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 545.181284][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.208819][ T5756] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input23 [ 545.219648][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.306584][ T5756] usb 6-1: USB disconnect, device number 16 [ 545.312705][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 545.561588][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.619740][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.910821][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.974556][ T9382] 9pnet_virtio: no channels available for device syz [ 547.204437][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.433052][ T8858] veth0_vlan: entered promiscuous mode [ 547.689264][ T31] audit: type=1326 audit(1785406632.707:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 547.958398][ T31] audit: type=1326 audit(1785406632.917:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 547.986590][ T31] audit: type=1326 audit(1785406632.957:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.0.651" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 548.015880][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.023119][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.071986][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.079206][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.774954][ T31] audit: type=1326 audit(1785406632.977:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.0.651" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 548.826352][ T8858] veth1_vlan: entered promiscuous mode [ 548.915659][ T31] audit: type=1326 audit(1785406632.997:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.0.651" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 548.998098][ T31] audit: type=1326 audit(1785406632.997:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="syz.0.651" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 549.025690][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.6.131'. [ 549.084777][ T31] audit: type=1326 audit(1785406632.977:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 549.180964][ T31] audit: type=1326 audit(1785406632.997:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 549.260140][ T31] audit: type=1326 audit(1785406632.997:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 549.341915][ T31] audit: type=1326 audit(1785406632.997:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9385 comm="" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 550.207123][ T8858] veth0_macvtap: entered promiscuous mode [ 550.359129][ T8858] veth1_macvtap: entered promiscuous mode [ 550.499586][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.537123][ T8858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.575289][ T5969] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.596746][ T5969] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.849786][ T9415] loop6: detected capacity change from 0 to 512 [ 550.876119][ T9415] EXT4-fs (loop6): Test dummy encryption mode enabled [ 551.015698][ T5969] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.041461][ T5969] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.285192][ T9415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.490190][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.537881][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.651973][ T8812] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.745098][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.785805][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.095141][ T24] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 552.842748][ T24] usb 6-1: device descriptor read/64, error -71 [ 553.163207][ T24] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 553.373913][ T24] usb 6-1: device descriptor read/64, error -71 [ 553.659894][ T24] usb usb6-port1: attempt power cycle [ 554.125401][ T24] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 554.166072][ T24] usb 6-1: device descriptor read/8, error -71 [ 554.174026][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.663'. [ 554.216249][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.452711][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 554.821290][ T9472] Invalid ELF header magic: != ELF [ 555.701027][ T24] usb 6-1: device descriptor read/8, error -71 [ 555.854774][ T24] usb usb6-port1: unable to enumerate USB device [ 557.225938][ T9494] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 557.241967][ T9495] loop6: detected capacity change from 0 to 512 [ 557.302218][ T9495] EXT4-fs (loop6): Test dummy encryption mode enabled [ 557.462132][ T9500] netlink: 'syz.0.670': attribute type 2 has an invalid length. [ 557.470036][ T9500] netlink: 'syz.0.670': attribute type 1 has an invalid length. [ 557.552260][ T5749] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 557.797938][ T9495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.332751][ T9125] veth0_vlan: entered promiscuous mode [ 558.415506][ T9125] veth1_vlan: entered promiscuous mode [ 558.536194][ T9125] veth0_macvtap: entered promiscuous mode [ 558.545121][ T5749] usb 9-1: Using ep0 maxpacket: 8 [ 558.571650][ T5749] usb 9-1: unable to get BOS descriptor or descriptor too short [ 558.593425][ T5749] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 558.616451][ T9125] veth1_macvtap: entered promiscuous mode [ 558.622235][ T5749] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 558.660469][ T8812] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.667139][ T5749] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.703233][ T5749] usb 9-1: Product: syz [ 558.719243][ T5749] usb 9-1: Manufacturer: syz [ 558.735023][ T5749] usb 9-1: SerialNumber: syz [ 558.775502][ T9486] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 558.789497][ T9493] Process accounting resumed [ 558.800579][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.864461][ T9125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.956913][ T6193] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.055841][ T6193] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.556537][ T9518] syz_tun: entered allmulticast mode [ 559.630001][ T6193] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.683708][ T6193] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.153386][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.675'. [ 560.219758][ T9484] syz_tun: left allmulticast mode [ 560.226534][ T5749] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 560.265245][ T5749] usb 9-1: invalid MIDI in EP 0 [ 560.475199][ T5749] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 560.494139][ T5749] usb 9-1: USB disconnect, device number 2 [ 560.495776][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.533418][ T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 560.557980][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.639054][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 560.722236][ T24] usb 7-1: device descriptor read/64, error -71 [ 560.758408][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.787216][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.069979][ T9546] 9pnet_virtio: no channels available for device syz [ 561.136299][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 561.295379][ T24] usb 7-1: device descriptor read/64, error -71 [ 561.372769][ T5280] 8021q: adding VLAN 0 to HW filter on device eth13 [ 561.422956][ T24] usb usb7-port1: attempt power cycle [ 561.694591][ T5749] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 561.852372][ T24] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 561.905599][ T24] usb 7-1: device descriptor read/8, error -71 [ 561.908563][ T5749] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 561.983436][ T5749] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 562.024633][ T5749] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 562.102243][ T5749] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 562.144125][ T5749] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 562.184071][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 562.192244][ T5749] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.206186][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.212584][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.225303][ T5749] usb 8-1: config 0 descriptor?? [ 562.252950][ T9552] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 562.255099][ T24] usb 7-1: device descriptor read/8, error -71 [ 562.322505][ T8940] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 562.355994][ T9568] loop5: detected capacity change from 0 to 512 [ 562.395343][ T24] usb usb7-port1: unable to enumerate USB device [ 562.405909][ T9568] EXT4-fs (loop5): Test dummy encryption mode enabled [ 562.466882][ T9575] virtio-fs: tag not found [ 562.540462][ T8940] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 562.718957][ T8940] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 562.910778][ T8940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.353641][ T5749] hid_parser_main: 3 callbacks suppressed [ 563.353670][ T5749] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 563.368451][ T5749] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 563.376012][ T5749] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 563.383675][ T5749] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 563.391124][ T5749] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 563.398644][ T5749] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 563.401576][ T8940] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 563.406719][ T5749] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 563.420495][ T5749] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 563.505765][ T9568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.580600][ T5749] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 563.624321][ T5749] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 563.709956][ T5749] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 563.795411][ T5749] usb 8-1: USB disconnect, device number 2 [ 564.053642][ T9588] fido_id[9588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 564.482820][ T9599] lo speed is unknown, defaulting to 1000 [ 564.991521][ T8940] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 565.523347][ T8940] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 565.539315][ T8940] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 565.702060][ T8940] usb 1-1: USB disconnect, device number 14 [ 566.169942][ T9612] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.176134][ T5280] 8021q: adding VLAN 0 to HW filter on device eth14 [ 567.271431][ T5629] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.383750][ T9621] loop0: detected capacity change from 0 to 512 [ 567.441505][ T9621] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 567.595803][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.997570][ T9645] qnx4: unable to read the superblock [ 569.482190][ T9646] loop5: detected capacity change from 0 to 128 [ 569.783591][ T9646] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 569.849238][ T9646] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 570.347288][ T9640] syz.4.700 (9640): drop_caches: 2 [ 570.473239][ T31] kauditd_printk_skb: 149 callbacks suppressed [ 570.473262][ T31] audit: type=1326 audit(1785406655.707:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 570.588805][ T31] audit: type=1326 audit(1785406655.707:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.0.704" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 570.617968][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 570.664151][ T31] audit: type=1326 audit(1785406655.707:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.0.704" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 570.853662][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 570.982339][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 571.170849][ T31] audit: type=1326 audit(1785406655.707:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 571.311184][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 571.337003][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 571.356463][ T31] audit: type=1326 audit(1785406655.707:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.0.704" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 571.409774][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 571.459913][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.485388][ T31] audit: type=1326 audit(1785406655.707:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.0.704" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 571.527127][ T24] usb 8-1: config 0 descriptor?? [ 571.574054][ T31] audit: type=1326 audit(1785406655.707:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 571.598412][ T31] audit: type=1326 audit(1785406655.707:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 571.599564][ T9652] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 571.626346][ T31] audit: type=1326 audit(1785406655.707:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.0.704" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 571.902317][ T9671] lo speed is unknown, defaulting to 1000 [ 572.292605][ T31] audit: type=1326 audit(1785406655.707:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9657 comm="syz.0.704" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ae59df99 code=0x7ffc0000 [ 572.607922][ T5629] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.621514][ T9678] loop6: detected capacity change from 0 to 512 [ 572.663023][ T9678] EXT4-fs (loop6): Test dummy encryption mode enabled [ 573.348815][ T24] hid_parser_main: 3 callbacks suppressed [ 573.348842][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 573.413154][ T9678] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.452232][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 573.497082][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 573.551257][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 573.686990][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 573.776210][ T9692] loop8: detected capacity change from 0 to 512 [ 573.847651][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 574.023225][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 574.208163][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 574.413982][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 574.528301][ T9692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.601118][ T24] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 575.097967][ T24] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 575.123686][ T24] usb 8-1: USB disconnect, device number 3 [ 575.236609][ T5280] 8021q: adding VLAN 0 to HW filter on device eth15 [ 575.238166][ T8812] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.341422][ T8858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.668624][ T9707] fido_id[9707]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 576.385672][ T9723] syz.8.719 (9723): drop_caches: 2 [ 576.494040][ T9702] syz.5.708 (9702): drop_caches: 2 [ 578.361637][ T5280] 8021q: adding VLAN 0 to HW filter on device eth16 [ 579.062386][ T5858] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 579.315353][ T9772] loop8: detected capacity change from 0 to 512 [ 579.888640][ T9772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.143268][ T5858] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 580.282823][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 580.305786][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 580.339506][ T5858] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 580.369977][ T5858] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 580.394505][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.424144][ T9775] netlink: 'syz.7.732': attribute type 10 has an invalid length. [ 580.477019][ T9776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.732'. [ 580.640332][ T5858] usb 1-1: config 0 descriptor?? [ 580.950816][ T9755] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 581.373724][ T8858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.552384][ T5858] usbhid 1-1:0.0: can't add hid device: -71 [ 581.559637][ T5858] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 581.597296][ T5858] usb 1-1: USB disconnect, device number 15 [ 582.366623][ T9790] syz.8.735 (9790): drop_caches: 2 [ 584.461456][ T9809] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.185835][ T9815] lo speed is unknown, defaulting to 1000 [ 587.023117][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 587.308760][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 587.454522][ T9844] netlink: 'syz.7.748': attribute type 10 has an invalid length. [ 587.699055][ T24] usb 1-1: config 0 has no interfaces? [ 589.883900][ T9842] 9pnet_virtio: no channels available for device syz [ 590.635788][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 590.637545][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 590.654175][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.672727][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 590.681452][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 590.696447][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 590.705093][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 590.794907][ T24] usb 1-1: config 0 descriptor?? [ 591.821269][ T24] usb 1-1: can't set config #0, error -71 [ 591.938133][ T24] usb 1-1: USB disconnect, device number 16 [ 592.527292][ T9885] qnx4: unable to read the superblock [ 592.766818][ T51] Bluetooth: hci6: command tx timeout [ 594.862279][ T51] Bluetooth: hci6: command tx timeout [ 596.880220][ T9918] input: syz1 as /devices/virtual/input/input24 [ 596.925568][ T51] Bluetooth: hci6: command tx timeout [ 597.511387][ T9859] lo speed is unknown, defaulting to 1000 [ 597.977172][ T9926] netlink: 'syz.4.765': attribute type 10 has an invalid length. [ 597.998273][ T9930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 598.039450][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 598.228966][ T9930] netlink: 'syz.8.767': attribute type 2 has an invalid length. [ 598.258331][ T9930] netlink: 'syz.8.767': attribute type 1 has an invalid length. [ 598.490230][ T9929] Process accounting resumed [ 598.722562][ T5749] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 598.893524][ T9942] loop6: detected capacity change from 0 to 4096 [ 598.932270][ T5749] usb 1-1: Using ep0 maxpacket: 8 [ 599.013117][ T51] Bluetooth: hci6: command tx timeout [ 599.036551][ T5749] usb 1-1: unable to get BOS descriptor or descriptor too short [ 599.948102][ T5749] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 600.004573][ T5749] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 600.058720][ T5749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.105440][ T5749] usb 1-1: Product: syz [ 600.124316][ T9956] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 600.132019][ T5749] usb 1-1: Manufacturer: syz [ 600.226411][ T5749] usb 1-1: SerialNumber: syz [ 600.610207][ T9939] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 601.539511][ T5749] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 601.577832][ T5749] usb 1-1: invalid MIDI in EP 0 [ 602.276815][ T9959] NILFS (loop6): error -22 preparing GC: cannot mark copying blocks dirty [ 602.390353][ T5749] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 602.418769][ T9964] pim6reg: entered allmulticast mode [ 602.477748][ T5749] usb 1-1: USB disconnect, device number 17 [ 602.838612][ T9967] syz.4.771 (9967): drop_caches: 2 [ 602.904644][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 603.429558][ T9984] ieee802154 phy0 wpan0: encryption failed: -22 [ 603.891858][ T51] Bluetooth: hci0: Malformed Event: 0x13 [ 605.668903][ T9859] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.715432][ T9859] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.762094][ T9859] bridge_slave_0: entered allmulticast mode [ 605.799892][ T9859] bridge_slave_0: entered promiscuous mode [ 605.838008][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.885826][ T9859] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.915006][ T9859] bridge_slave_1: entered allmulticast mode [ 605.948241][ T9859] bridge_slave_1: entered promiscuous mode [ 606.759714][T10014] netlink: 140 bytes leftover after parsing attributes in process `syz.8.778'. [ 606.801102][ T9859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 606.911711][ T9859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.024647][T10018] hub 8-0:1.0: USB hub found [ 607.062374][T10018] hub 8-0:1.0: 1 port detected [ 608.045218][T10019] loop8: detected capacity change from 0 to 4096 [ 608.965379][T10029] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 609.096322][ T9859] team0: Port device team_slave_0 added [ 609.122634][T10019] netlink: 204 bytes leftover after parsing attributes in process `syz.8.784'. [ 609.149205][ T9859] team0: Port device team_slave_1 added [ 609.389201][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.421447][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.508891][ T9859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.550885][ T9859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.582357][ T9859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.643525][ T9859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.863029][T10045] virtio-fs: tag < : kernel [ 609.863029][T10045] priority : 100 [ 609.863029][T10045] refcnt : 1 [ 609.863029][T10045] selftest : passed [ 609.863029][T10045] internal : no [ 609.863029][T10045] type : sig [ 609.863029][T10045] [ 609.863029][T10045] name : ecdh-nist-p384 [ 609.863029][T10045] driver : ecdh-nist-p384-generic [ 609.863029][T10045] module : kernel [ 609.863029][T10045] priority : 100 [ 609.863029][T10045] refcnt : 1 [ 609.863029][T10045] selftest : passed [ 609.863029][T10045] internal : no [ 609.863029][T10045] type : kpp [ 609.863029][T10045] [ 609.863029][T10045] name : ecdh-nist-p256 [ 609.863029][T10045] driver : ecdh-nist-p256-generic [ 609.863029][T10045] module : kernel [ 609.863029][T10045] priority : 100 [ 609.863029][T10045] refcnt : 1 [ 609.863029][T10045] selftest : passed [ 609.863029][T10045] internal : no [ 609.863029][T10045] type : kpp [ 609.863029][T10045] [ 609.863029][T10045] name : ecdh-nist-p192 [ 609.863029][T10045] driver : ecdh-nist-p192-generic [ 609.863029][T10045] module : kernel [ 609.863029][T10045] priority : 100 [ 609.863029][T10045] refcnt : 1 [ 609.863029][T10045] selftest : passed [ 609.863029][T10045] internal : no [ 609.863029][T10045] type : kpp [ 609.863029][T10045] [ 609.863029][T10045] name : zstd [ 609.863029][T10045] driver : zstd-generic [ 609.863029][T10045] module : kernel [ 609.863029][T10045] priority : 0 [ 609.863029][T10045] refcnt : 2 [ 609.863029][T10045] selftest : passed [ 609.863029][T10045] internal : no [ 609.863029][T10045] type : acomp [ 609.863029][T10045] [ 609.863029][T10045] name : 842 [ 609.863029][T10045] driver : 842-scomp [ 609.863029][T10045] module : kernel [ 609.863029][T10045] priority : 100 [ 611.179404][ T9859] hsr_slave_0: entered promiscuous mode [ 611.418146][ T9859] hsr_slave_1: entered promiscuous mode [ 613.095694][ T9859] debugfs: 'hsr0' already exists in 'hsr' [ 613.169636][ T9859] Cannot create hsr debugfs directory [ 613.263726][ T38] bridge_slave_1: left allmulticast mode [ 613.294721][ T38] bridge_slave_1: left promiscuous mode [ 613.322676][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.438972][ T38] bridge_slave_0: left allmulticast mode [ 613.489630][ T38] bridge_slave_0: left promiscuous mode [ 613.537696][T10069] netlink: 'syz.4.794': attribute type 10 has an invalid length. [ 613.594131][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.666746][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.794'. [ 614.001806][ T38] pim6reg: left allmulticast mode [ 616.938532][T10074] loop8: detected capacity change from 0 to 512 [ 617.741247][T10074] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.329062][ T8858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.626631][T10086] 9pnet_virtio: no channels available for device syz [ 619.607044][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.634705][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.658542][ T38] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 619.668585][ T38] bond0 (unregistering): Released all slaves [ 620.346937][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 620.346955][ T31] audit: type=1326 audit(1785406705.557:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.7.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7c459df99 code=0x0 [ 620.510521][ T31] audit: type=1326 audit(1785406705.727:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.7.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 620.600353][ T31] audit: type=1326 audit(1785406705.727:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.7.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7c455e7ce code=0x7ffc0000 [ 620.668265][ T31] audit: type=1326 audit(1785406705.817:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.7.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7c455e7ce code=0x7ffc0000 [ 620.709907][T10100] loop8: detected capacity change from 0 to 4096 [ 620.766742][ T31] audit: type=1326 audit(1785406705.817:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.7.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 620.887168][T10107] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 620.926251][ T31] audit: type=1326 audit(1785406705.827:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.7.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7c455e7ce code=0x7ffc0000 [ 621.056974][T10100] netlink: 204 bytes leftover after parsing attributes in process `syz.8.799'. [ 621.068787][T10111] NILFS (loop8): error -22 preparing GC: cannot mark copying blocks dirty [ 621.112970][ T31] audit: type=1326 audit(1785406705.827:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.7.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7c455e7ce code=0x7ffc0000 [ 621.208782][ T31] audit: type=1326 audit(1785406705.827:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.7.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7c455e7ce code=0x7ffc0000 [ 621.305023][ T31] audit: type=1326 audit(1785406705.827:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.7.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7c455e7ce code=0x7ffc0000 [ 621.357238][ T31] audit: type=1326 audit(1785406705.827:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10089 comm="syz.7.798" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7c455e7ce code=0x7ffc0000 [ 621.396382][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 621.417460][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 621.430441][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 621.442469][ T5622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 621.453059][ T5622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 621.537795][T10110] warning: `syz.4.801' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 621.554419][T10101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.793'. [ 622.146490][ T38] hsr_slave_0: left promiscuous mode [ 622.189019][ T38] hsr_slave_1: left promiscuous mode [ 622.237410][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.301747][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.125721][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.132224][ T5622] Bluetooth: hci3: command tx timeout [ 624.152217][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.757947][ T8406] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 625.654401][ T8406] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.691634][ T8406] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 625.729708][ T8406] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.792031][ T8406] usb 9-1: config 0 descriptor?? [ 625.810333][T10139] netlink: 'syz.7.806': attribute type 10 has an invalid length. [ 625.836055][ T8406] pwc: Askey VC010 type 2 USB webcam detected. [ 625.866864][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.7.806'. [ 626.063129][ T8406] pwc: send_video_command error -71 [ 626.086152][ T8406] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 626.117640][ T8406] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 626.169999][ T8406] usb 9-1: USB disconnect, device number 3 [ 626.206648][T10132] Bluetooth: hci1: command 0x0406 tx timeout [ 626.212753][T10132] Bluetooth: hci2: command 0x0406 tx timeout [ 626.216803][T10146] Bluetooth: hci3: command tx timeout [ 626.271507][ T38] team0 (unregistering): Port device team_slave_1 removed [ 626.576290][ T38] team0 (unregistering): Port device team_slave_0 removed [ 627.382708][ T8406] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 627.769579][T10157] 9pnet_virtio: no channels available for device syz [ 628.556441][ T51] Bluetooth: hci3: command tx timeout [ 629.195860][T10139] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 630.608072][ T51] Bluetooth: hci3: command tx timeout [ 630.661610][T10174] loop8: detected capacity change from 0 to 4096 [ 631.068976][T10183] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 631.128122][T10174] netlink: 204 bytes leftover after parsing attributes in process `syz.8.813'. [ 631.146216][ T9859] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 631.167176][ T9859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.322635][ T8395] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 631.429573][ T9859] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 631.481127][ T9859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.515938][ T9859] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 631.704333][ T8395] usb 5-1: unable to get BOS descriptor or descriptor too short [ 631.721647][ T8395] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 631.725498][ T9859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.749227][ T8395] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 631.797038][ T8395] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 631.847564][ T8395] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 631.994634][ T8395] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 632.195023][ T8395] usb 5-1: config 1 interface 1 has no altsetting 0 [ 632.362729][ T8395] usb 5-1: string descriptor 0 read error: -22 [ 632.396836][ T8395] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 632.431880][ T8395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.545077][ T9859] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 632.584466][ T9859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 632.865381][ T8395] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 633.477838][ T8395] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 633.567847][T10114] lo speed is unknown, defaulting to 1000 [ 633.869620][ T8395] usb 5-1: USB disconnect, device number 13 [ 636.124831][T10239] 9pnet_virtio: no channels available for device syz [ 636.871725][T10244] netlink: 52 bytes leftover after parsing attributes in process `syz.8.824'. [ 636.920271][T10244] netlink: 16 bytes leftover after parsing attributes in process `syz.8.824'. [ 637.032832][T10244] netlink: 52 bytes leftover after parsing attributes in process `syz.8.824'. [ 637.524966][T10238] pim6reg: entered allmulticast mode [ 637.868107][ T38] bridge_slave_1: left allmulticast mode [ 637.880636][ T38] bridge_slave_1: left promiscuous mode [ 637.982530][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.068706][ T38] bridge_slave_0: left allmulticast mode [ 638.074526][ T38] bridge_slave_0: left promiscuous mode [ 638.086062][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.119979][ T38] pim6reg: left allmulticast mode [ 639.542947][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.571395][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.615123][ T38] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 639.653722][ T38] bond0 (unregistering): Released all slaves [ 639.896693][ T9859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.034250][ T9859] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.131788][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.138963][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.116866][T10295] syz.8.836 (10295): drop_caches: 2 [ 641.165621][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.172800][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.215982][T10304] input: syz1 as /devices/virtual/input/input25 [ 644.131827][ T5280] 8021q: adding VLAN 0 to HW filter on device eth9 [ 644.850749][T10312] 9pnet_virtio: no channels available for device syz [ 645.475609][ T9859] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 645.487640][ T9859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 645.495350][T10321] netlink: 60 bytes leftover after parsing attributes in process `syz.8.842'. [ 646.267934][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 646.278971][T10325] netlink: 60 bytes leftover after parsing attributes in process `syz.8.842'. [ 646.467090][ T38] hsr_slave_0: left promiscuous mode [ 646.499239][ T38] hsr_slave_1: left promiscuous mode [ 646.518974][T10322] loop4: detected capacity change from 0 to 4096 [ 646.530634][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.556909][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.601690][T10322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.750912][T10322] evm: overlay not supported [ 647.365933][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 647.379385][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 647.390449][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 647.400014][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 647.408207][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 647.452056][ T38] team0 (unregistering): Port device team_slave_1 removed [ 647.545164][ T38] team0 (unregistering): Port device team_slave_0 removed [ 647.607135][ T5620] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.015185][T10309] pim6reg: entered allmulticast mode [ 648.070197][T10342] netlink: 140 bytes leftover after parsing attributes in process `syz.4.845'. [ 648.763573][T10114] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.774153][T10114] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.800254][T10114] bridge_slave_0: entered allmulticast mode [ 648.823514][T10114] bridge_slave_0: entered promiscuous mode [ 648.857852][T10114] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.891135][T10114] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.928156][T10114] bridge_slave_1: entered allmulticast mode [ 648.996116][T10114] bridge_slave_1: entered promiscuous mode [ 649.232227][ T9305] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 649.653561][ T51] Bluetooth: hci5: command tx timeout [ 650.531493][T10114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 650.620920][T10114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.110260][ T9305] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.193690][ T9305] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 651.217434][ T9305] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.279116][ T9305] usb 9-1: config 0 descriptor?? [ 651.339723][ T9305] pwc: Askey VC010 type 2 USB webcam detected. [ 651.393871][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.6.851'. [ 651.510455][ T9305] pwc: send_video_command error -71 [ 651.525193][ T9305] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 651.566985][ T9305] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 651.618425][ T9305] usb 9-1: USB disconnect, device number 5 [ 651.703527][T10365] syz.7.849 (10365): drop_caches: 2 [ 651.727925][ T51] Bluetooth: hci5: command tx timeout [ 652.062286][ T9305] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 652.442924][T10382] netlink: 'syz.4.852': attribute type 10 has an invalid length. [ 652.597449][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 653.062588][T10114] team0: Port device team_slave_0 added [ 653.409625][T10114] team0: Port device team_slave_1 added [ 653.689806][ T9305] usb 9-1: unable to read config index 0 descriptor/all [ 653.802380][ T51] Bluetooth: hci5: command tx timeout [ 655.306951][ T9305] usb 9-1: can't read configurations, error -71 [ 655.618887][T10387] qnx4: unable to read the superblock [ 655.648093][T10114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 655.683415][T10114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 655.782181][T10114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 655.850766][T10336] lo speed is unknown, defaulting to 1000 [ 655.922256][ T51] Bluetooth: hci5: command tx timeout [ 655.989768][T10389] loop6: detected capacity change from 0 to 4096 [ 656.228329][T10114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.246705][T10114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.306406][T10389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.341250][T10114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.422967][T10402] netlink: 60 bytes leftover after parsing attributes in process `syz.4.857'. [ 656.484005][T10403] netlink: 60 bytes leftover after parsing attributes in process `syz.4.857'. [ 656.558932][ T5280] 8021q: adding VLAN 0 to HW filter on device eth10 [ 656.934943][T10413] netlink: 'syz.4.858': attribute type 10 has an invalid length. [ 657.052381][T10414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 658.054983][T10419] 9pnet_virtio: no channels available for device syz [ 660.030751][ T8812] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.161016][T10114] hsr_slave_0: entered promiscuous mode [ 660.193581][T10114] hsr_slave_1: entered promiscuous mode [ 660.215979][T10114] debugfs: 'hsr0' already exists in 'hsr' [ 660.243883][T10114] Cannot create hsr debugfs directory [ 661.072498][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 661.243999][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 661.277179][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 661.315253][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.325930][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 661.325949][ T31] audit: type=1326 audit(1785406746.557:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.6.866" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824879df99 code=0x7ffc0000 [ 661.369779][ T10] usb 5-1: config 0 descriptor?? [ 661.400708][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 661.458446][ T31] audit: type=1326 audit(1785406746.557:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.6.866" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824879df99 code=0x7ffc0000 [ 661.542238][ T31] audit: type=1326 audit(1785406746.587:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.6.866" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824879df99 code=0x7ffc0000 [ 661.575568][T10441] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 661.588703][ T31] audit: type=1326 audit(1785406746.587:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.6.866" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824879df99 code=0x7ffc0000 [ 661.598814][ T10] pwc: send_video_command error -71 [ 661.614010][ T31] audit: type=1326 audit(1785406746.587:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.6.866" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f824879df99 code=0x7ffc0000 [ 661.644953][ T31] audit: type=1326 audit(1785406746.597:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.6.866" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824879df99 code=0x7ffc0000 [ 661.755945][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 661.891447][ T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 662.084587][ T31] audit: type=1326 audit(1785406746.597:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.6.866" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f824879df99 code=0x7ffc0000 [ 662.109679][ T31] audit: type=1326 audit(1785406746.597:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.6.866" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f824879df99 code=0x7ffc0000 [ 662.134831][ T31] audit: type=1326 audit(1785406746.597:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10437 comm="syz.6.866" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824879df99 code=0x7ffc0000 [ 662.138001][ T10] usb 5-1: USB disconnect, device number 14 [ 662.692373][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 662.703080][ T8406] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 662.820024][T10458] loop6: detected capacity change from 0 to 4096 [ 662.884329][ T8406] usb 8-1: Using ep0 maxpacket: 8 [ 662.891088][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.911051][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 662.924341][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.936339][ T8406] usb 8-1: unable to get BOS descriptor or descriptor too short [ 662.937442][T10458] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 662.945039][ T10] usb 5-1: config 0 descriptor?? [ 662.969293][ T8406] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 662.992457][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 663.007853][ T8406] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 663.032326][ T8406] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.047506][ T8406] usb 8-1: Product: syz [ 663.065843][ T8406] usb 8-1: Manufacturer: syz [ 663.101166][ T8406] usb 8-1: SerialNumber: syz [ 663.186568][T10450] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 663.423882][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 663.443638][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 663.470933][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 663.489776][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 663.505446][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 663.524772][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 663.535526][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 663.559559][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 663.566265][T10450] syz_tun: entered allmulticast mode [ 663.588688][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 663.609215][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 663.651654][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 663.660859][ T10] pwc: recv_control_msg error -32 req 02 val 2600 [ 663.709524][ T5886] bridge_slave_1: left allmulticast mode [ 663.715728][ T5886] bridge_slave_1: left promiscuous mode [ 663.721586][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.742599][ T5886] bridge_slave_0: left allmulticast mode [ 663.748320][ T5886] bridge_slave_0: left promiscuous mode [ 663.754293][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.874544][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 663.901218][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 663.934442][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 663.962532][ T10] pwc: Registered as video103. [ 663.990645][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 663.997537][ T8812] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.051915][ T10] usb 5-1: USB disconnect, device number 15 [ 664.583357][T10474] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 665.137755][T10476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.873'. [ 665.146990][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 665.209124][ T5886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.259519][ T5886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.285775][ T5886] bond0 (unregistering): Released all slaves [ 665.356034][T10483] siw: device registration error -23 [ 665.582555][ T5280] 8021q: adding VLAN 0 to HW filter on device eth11 [ 665.639551][T10450] syz_tun: left allmulticast mode [ 665.863457][ T8406] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 665.908500][ T8406] usb 8-1: invalid MIDI in EP 0 [ 666.570900][T10476] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 667.041050][ T31] audit: type=1326 audit(1785406752.267:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.7.878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 667.139205][ T31] audit: type=1326 audit(1785406752.297:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.7.878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 667.281404][ T31] audit: type=1326 audit(1785406752.297:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.7.878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 667.416142][ T31] audit: type=1326 audit(1785406752.297:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.7.878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 667.447758][T10476] bond1 (unregistering): Released all slaves [ 667.499310][ T31] audit: type=1326 audit(1785406752.297:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.7.878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 667.549877][ T31] audit: type=1326 audit(1785406752.307:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.7.878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 667.582988][ T31] audit: type=1326 audit(1785406752.307:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.7.878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 667.618673][ T31] audit: type=1326 audit(1785406752.307:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.7.878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 667.646050][ T31] audit: type=1326 audit(1785406752.307:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10497 comm="syz.7.878" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe7c459df99 code=0x7ffc0000 [ 667.743734][ T8406] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 667.761091][ T8406] usb 8-1: USB disconnect, device number 4 [ 667.831708][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.923610][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.947162][T10336] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.957875][T10336] bridge_slave_0: entered allmulticast mode [ 667.967726][T10336] bridge_slave_0: entered promiscuous mode [ 667.977687][T10336] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.986366][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.997492][T10336] bridge_slave_1: entered allmulticast mode [ 668.009179][T10336] bridge_slave_1: entered promiscuous mode [ 668.071006][ T5886] hsr_slave_0: left promiscuous mode [ 668.084609][ T5886] hsr_slave_1: left promiscuous mode [ 668.095010][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 668.103530][ T5886] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 668.111858][T10509] loop8: detected capacity change from 0 to 4096 [ 668.142444][T10509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 668.324165][T10516] overlayfs: failed to resolve './bus': -2 [ 669.709872][ T8858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.915655][T10533] usb usb8: usbfs: process 10533 (syz.7.888) did not claim interface 0 before use [ 669.930483][ T31] audit: type=1326 audit(1785406755.147:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10531 comm="syz.4.889" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b3bf9df99 code=0x7ffc0000 [ 670.087468][ T5886] team0 (unregistering): Port device team_slave_1 removed [ 670.112748][ T5886] team0 (unregistering): Port device team_slave_0 removed [ 670.311617][ T30] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 670.502786][ T30] usb 9-1: Using ep0 maxpacket: 8 [ 670.510546][ T30] usb 9-1: unable to get BOS descriptor or descriptor too short [ 670.525329][ T30] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 670.550171][ T30] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 670.560813][T10336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.567770][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.579448][ T30] usb 9-1: Product: syz [ 670.584216][ T30] usb 9-1: Manufacturer: syz [ 670.602887][ T30] usb 9-1: SerialNumber: syz [ 670.615925][T10535] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 670.660527][T10336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.898389][T10336] team0: Port device team_slave_0 added [ 670.937518][T10336] team0: Port device team_slave_1 added [ 670.960628][T10551] syz_tun: entered allmulticast mode [ 671.185654][ T30] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 671.215810][ T30] usb 9-1: invalid MIDI in EP 0 [ 671.271310][T10336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.298944][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.325874][T10336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.378296][T10534] syz_tun: left allmulticast mode [ 671.379704][T10564] netlink: 24 bytes leftover after parsing attributes in process `syz.7.896'. [ 671.388734][T10336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.410260][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.896'. [ 671.413537][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.460471][T10336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.483819][ T30] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 671.504292][ T30] usb 9-1: USB disconnect, device number 8 [ 671.584537][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.649200][T10564] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 671.670111][T10564] bond1 (unregistering): Released all slaves [ 671.722542][ T5280] 8021q: adding VLAN 0 to HW filter on device eth12 [ 671.825519][T10114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 671.846826][T10114] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.884569][T10336] hsr_slave_0: entered promiscuous mode [ 671.891469][T10336] hsr_slave_1: entered promiscuous mode [ 671.920706][T10336] debugfs: 'hsr0' already exists in 'hsr' [ 671.927354][T10336] Cannot create hsr debugfs directory [ 671.934711][T10114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 671.966960][T10114] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.996569][T10114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 672.026008][T10114] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 672.107428][T10575] loop6: detected capacity change from 0 to 4096 [ 672.114365][T10114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 672.176230][T10575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.191967][T10114] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 672.805657][T10604] netlink: 'syz.4.899': attribute type 10 has an invalid length. [ 673.302027][T10611] netlink: 28 bytes leftover after parsing attributes in process `syz.7.902'. [ 676.369915][T10619] loop7: detected capacity change from 0 to 512 [ 676.768732][T10619] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.264152][ T8812] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.377865][ T5280] 8021q: adding VLAN 0 to HW filter on device eth17 [ 677.445866][T10626] usb usb8: usbfs: process 10626 (syz.8.906) did not claim interface 0 before use [ 677.463913][ T9125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.552098][T10628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 677.951206][T10634] netlink: 'syz.4.907': attribute type 2 has an invalid length. [ 677.959064][T10634] netlink: 'syz.4.907': attribute type 1 has an invalid length. [ 680.505456][T10114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.538451][T10114] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.559744][T10631] Process accounting resumed [ 680.690705][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.697955][ T6193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.745465][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.752690][ T6193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 681.971084][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 681.983935][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 681.991927][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 682.000118][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 682.009143][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 682.083564][T10336] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 682.171184][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.227452][T10336] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 682.288357][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.749905][T10336] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 682.830353][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.910321][T10336] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 682.964772][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 683.775080][T10688] netlink: 'syz.4.914': attribute type 10 has an invalid length. [ 683.823539][T10686] loop8: detected capacity change from 0 to 4096 [ 683.846486][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 683.881517][T10686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 684.042216][ T8406] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 684.042313][ T5622] Bluetooth: hci6: command tx timeout [ 684.159190][ T5280] 8021q: adding VLAN 0 to HW filter on device eth18 [ 684.246106][ T8406] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 684.279061][ T8406] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 684.341587][T10336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.368850][ T8406] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 684.404986][ T8406] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 684.438534][ T8406] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.476774][ T8406] usb 8-1: Product: syz [ 684.486956][ T8406] usb 8-1: Manufacturer: syz [ 684.500886][ T8406] usb 8-1: SerialNumber: syz [ 684.553789][ T8406] usb 8-1: config 0 descriptor?? [ 684.581336][T10687] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 684.618140][T10687] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 684.674999][T10336] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.695576][ T8406] usb 8-1: ucan: probing device on interface #0 [ 684.885817][ T8406] usb 8-1: ucan: device protocol version 0 is not supported [ 684.941802][ T8406] usb 8-1: ucan: probe failed; try to update the device firmware [ 684.953254][ T8858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 684.980142][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.987307][ T5886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.093406][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.099873][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.183120][ T5749] usb 8-1: USB disconnect, device number 5 [ 685.268162][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.275373][ T5886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.536337][T10660] lo speed is unknown, defaulting to 1000 [ 686.018777][T10711] netlink: 36 bytes leftover after parsing attributes in process `syz.8.916'. [ 686.096778][T10711] netlink: 16 bytes leftover after parsing attributes in process `syz.8.916'. [ 686.152607][ T5622] Bluetooth: hci6: command tx timeout [ 686.160303][T10711] netlink: 36 bytes leftover after parsing attributes in process `syz.8.916'. [ 687.254872][ T1157] bridge_slave_1: left allmulticast mode [ 687.271421][ T1157] bridge_slave_1: left promiscuous mode [ 687.320655][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.400835][ T1157] bridge_slave_0: left allmulticast mode [ 687.443482][ T1157] bridge_slave_0: left promiscuous mode [ 687.465131][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.062067][T10725] loop7: detected capacity change from 0 to 512 [ 688.207081][ T5622] Bluetooth: hci6: command tx timeout [ 688.305790][T10725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 688.706081][ T9125] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 689.512943][T10745] netlink: 'syz.6.923': attribute type 10 has an invalid length. [ 689.638119][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.923'. [ 690.282329][ T5622] Bluetooth: hci6: command tx timeout [ 690.989310][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 691.118284][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 691.214298][ T1157] bond0 (unregistering): Released all slaves [ 691.660259][ T5280] 8021q: adding VLAN 0 to HW filter on device eth19 [ 692.481777][ T1157] hsr_slave_0: left promiscuous mode [ 692.525327][ T1157] hsr_slave_1: left promiscuous mode [ 692.535224][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.7.925'. [ 692.546891][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 692.586626][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.960093][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 692.985787][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 693.304530][T10765] loop8: detected capacity change from 0 to 128 [ 693.315107][T10758] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 693.361830][T10758] bond1 (unregistering): Released all slaves [ 693.438189][T10765] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 693.513477][T10765] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 695.258383][ T8858] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 695.522259][ T9305] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 695.714138][ T9305] usb 8-1: Using ep0 maxpacket: 16 [ 696.496606][ T9305] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 696.508792][ T9305] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 696.523767][ T9305] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 696.532949][ T9305] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.540962][ T9305] usb 8-1: Product: syz [ 696.545743][ T9305] usb 8-1: Manufacturer: syz [ 696.550701][ T9305] usb 8-1: SerialNumber: syz [ 696.558769][ T9305] usb 8-1: config 0 descriptor?? [ 696.624719][T10336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 696.654554][ T9305] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 696.690703][ T9305] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 697.238774][T10660] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.249410][T10660] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.268040][T10660] bridge_slave_0: entered allmulticast mode [ 697.349629][ T9305] em28xx 8-1:0.0: unknown em28xx chip ID (190) [ 697.433482][T10660] bridge_slave_0: entered promiscuous mode [ 697.561576][ T9305] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 697.574121][T10660] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.596072][ T9305] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 697.608032][T10660] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.635894][ T9305] em28xx 8-1:0.0: No AC97 audio processor [ 697.645442][T10660] bridge_slave_1: entered allmulticast mode [ 697.681497][T10660] bridge_slave_1: entered promiscuous mode [ 697.724543][ T9305] usb 8-1: USB disconnect, device number 6 [ 697.758108][ T9305] em28xx 8-1:0.0: Disconnecting em28xx [ 698.661824][ T9305] em28xx 8-1:0.0: Freeing device [ 698.720493][T10834] netlink: 'syz.6.939': attribute type 2 has an invalid length. [ 698.728901][T10834] netlink: 'syz.6.939': attribute type 1 has an invalid length. [ 698.771071][T10828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 698.961914][T10660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.119682][T10833] loop8: detected capacity change from 0 to 256 [ 699.137849][T10660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.224016][T10833] FAT-fs (loop8): Directory bread(block 1285) failed [ 699.284040][T10833] FAT-fs (loop8): Directory bread(block 1286) failed [ 699.429531][T10833] FAT-fs (loop8): Directory bread(block 1287) failed [ 699.495958][T10845] loop7: detected capacity change from 0 to 128 [ 699.515598][T10833] FAT-fs (loop8): Directory bread(block 1288) failed [ 699.718180][T10845] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 699.804919][T10845] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 699.859167][T10660] team0: Port device team_slave_0 added [ 699.949825][T10660] team0: Port device team_slave_1 added [ 700.001944][T10831] Process accounting resumed [ 700.221951][T10660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.301780][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.526286][T10660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.641400][T10660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.658075][T10660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.730745][T10660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.800554][ T9125] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 700.865189][T10859] netlink: 'syz.6.944': attribute type 10 has an invalid length. [ 700.996457][T10859] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 701.137481][ T5280] 8021q: adding VLAN 0 to HW filter on device eth20 [ 701.331957][T10660] hsr_slave_0: entered promiscuous mode [ 701.364534][T10660] hsr_slave_1: entered promiscuous mode [ 701.397460][T10660] debugfs: 'hsr0' already exists in 'hsr' [ 701.403427][T10660] Cannot create hsr debugfs directory [ 701.904206][T10336] veth0_vlan: entered promiscuous mode [ 702.344445][T10891] netlink: 28 bytes leftover after parsing attributes in process `syz.7.951'. [ 703.752739][T10899] loop8: detected capacity change from 0 to 512 [ 703.779959][T10899] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 703.892974][T10336] veth1_vlan: entered promiscuous mode [ 704.215177][ T8858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.226573][T10909] loop4: detected capacity change from 0 to 128 [ 704.318471][T10909] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 704.374673][T10336] veth0_macvtap: entered promiscuous mode [ 704.386401][T10336] veth1_macvtap: entered promiscuous mode [ 704.406869][T10909] ext4 filesystem being mounted at /228/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 704.419647][T10336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.448094][T10336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 706.321077][T10924] qnx4: unable to read the superblock [ 706.358318][ T6193] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.393308][ T6193] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.434158][ T6193] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.468408][ T6193] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 706.644319][ T5620] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 707.123297][ T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 707.230405][T10935] netlink: 24 bytes leftover after parsing attributes in process `syz.8.961'. [ 707.323534][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 707.432793][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 707.465336][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 707.538774][ T24] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice= 0.40 [ 707.589949][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.622908][ T24] usb 7-1: Product: syz [ 707.640291][ T24] usb 7-1: Manufacturer: syz [ 707.659520][ T24] usb 7-1: SerialNumber: syz [ 707.740190][T10931] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 708.541708][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 708.555402][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 708.565113][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 708.596407][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 708.605660][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 708.662740][T10931] syz_tun: entered allmulticast mode [ 708.754619][T10660] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 708.803300][T10660] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 708.836203][T10660] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 708.855649][ T24] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 708.899920][T10660] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 708.900262][ T24] usb 7-1: invalid MIDI in EP 0 [ 708.938017][T10660] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 709.009162][T10660] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 709.081463][T10930] syz_tun: left allmulticast mode [ 709.221271][T10660] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 709.267564][T10660] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 709.286153][ T24] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 709.327833][ T24] usb 7-1: USB disconnect, device number 6 [ 709.455752][ T6080] udevd[6080]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.616327][ T648] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.062243][ T648] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.684987][ T5622] Bluetooth: hci3: command tx timeout [ 710.957692][ T648] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.147793][T10660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.351607][ T648] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.568984][T10660] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.654693][T10948] lo speed is unknown, defaulting to 1000 [ 711.671311][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.678515][ T5949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.892716][T11009] loop8: detected capacity change from 0 to 512 [ 712.397328][T11009] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.762543][ T5622] Bluetooth: hci3: command tx timeout [ 712.791616][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.798753][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.173274][T11016] qnx4: unable to read the superblock [ 713.284529][T11018] input: syz1 as /devices/virtual/input/input27 [ 713.368976][ T8858] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.413206][ T5622] Bluetooth: hci0: Malformed Event: 0x13 [ 713.644271][ T648] bridge_slave_1: left allmulticast mode [ 713.666469][ T648] bridge_slave_1: left promiscuous mode [ 713.933034][ T648] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.969082][T11032] netlink: 'syz.8.974': attribute type 10 has an invalid length. [ 714.083008][T11034] netlink: 8 bytes leftover after parsing attributes in process `syz.8.974'. [ 714.139050][ T648] bridge_slave_0: left allmulticast mode [ 714.219245][ T648] bridge_slave_0: left promiscuous mode [ 714.342193][ T648] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.842780][ T5622] Bluetooth: hci3: command tx timeout [ 716.923063][ T5622] Bluetooth: hci3: command tx timeout [ 718.200989][ T648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 718.248893][ T648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.288646][ T648] bond0 (unregistering): Released all slaves [ 719.571790][T11064] loop6: detected capacity change from 0 to 524288000 [ 719.893962][ T5749] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 720.115903][ T5749] usb 7-1: unable to get BOS descriptor or descriptor too short [ 720.130380][ T648] hsr_slave_0: left promiscuous mode [ 720.185576][ T5749] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.215637][ T648] hsr_slave_1: left promiscuous mode [ 720.242040][ T648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.257665][ T5749] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 720.315334][ T648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.334335][ T5749] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 720.364910][ T648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.380594][ T5749] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 720.400433][ T648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.048584][ T5749] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 722.505862][ T5749] usb 7-1: config 1 interface 1 has no altsetting 0 [ 722.551750][ T648] veth1_macvtap: left promiscuous mode [ 722.557464][ T648] veth0_macvtap: left promiscuous mode [ 722.564216][ T648] veth1_vlan: left promiscuous mode [ 722.571505][ T648] veth0_vlan: left promiscuous mode [ 722.673686][ T5749] usb 7-1: string descriptor 0 read error: -71 [ 722.695140][ T5749] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 722.726055][ T5749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.777078][ T5749] usb 7-1: can't set config #1, error -71 [ 722.810856][ T5749] usb 7-1: USB disconnect, device number 7 [ 723.216748][T11101] qnx4: unable to read the superblock [ 723.444775][T11104] netlink: 'syz.7.988': attribute type 10 has an invalid length. [ 723.566006][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.7.988'. [ 726.350674][ T648] team0 (unregistering): Port device team_slave_1 removed [ 726.390196][ T648] team0 (unregistering): Port device team_slave_0 removed [ 726.674964][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 727.210199][ T5622] Bluetooth: hci0: Malformed Event: 0x13 [ 727.294633][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz.6.992'. [ 727.441934][T11125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.475969][T11125] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.837117][T11140] loop6: detected capacity change from 0 to 524288000 [ 728.160626][T10948] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.209828][T10948] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.237404][T10948] bridge_slave_0: entered allmulticast mode [ 728.284745][T10948] bridge_slave_0: entered promiscuous mode [ 729.381881][T10948] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.501049][T10948] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.606649][T10948] bridge_slave_1: entered allmulticast mode [ 729.754144][T10948] bridge_slave_1: entered promiscuous mode [ 729.975255][T10948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.193298][T10948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.218605][T10948] team0: Port device team_slave_0 added [ 731.249976][T10948] team0: Port device team_slave_1 added [ 731.273368][T10660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.283373][ T5622] Bluetooth: hci1: Malformed Event: 0x13 [ 731.290579][T11175] netlink: 'syz.6.999': attribute type 10 has an invalid length. [ 731.477218][T11181] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1005'. [ 731.492927][T10948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.506839][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.507482][T11190] loop6: detected capacity change from 0 to 524288000 [ 731.578060][T10948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.620104][T10948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.935563][T10948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.064400][T10948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.310879][T10948] hsr_slave_0: entered promiscuous mode [ 733.331518][T10948] hsr_slave_1: entered promiscuous mode [ 733.408247][T10948] debugfs: 'hsr0' already exists in 'hsr' [ 733.454393][T10948] Cannot create hsr debugfs directory [ 733.738704][T10660] veth0_vlan: entered promiscuous mode [ 734.540281][T10660] veth1_vlan: entered promiscuous mode [ 734.557641][T11218] 9pnet_virtio: no channels available for device syz [ 735.221163][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1015'. [ 735.638425][T10660] veth0_macvtap: entered promiscuous mode [ 735.669943][ T5622] Bluetooth: hci2: Malformed Event: 0x13 [ 736.589965][T10660] veth1_macvtap: entered promiscuous mode [ 736.644591][T11237] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1017'. [ 736.796950][T10660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.866516][T10660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.915702][ T5969] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.961060][ T5969] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.017889][T11259] loop6: detected capacity change from 0 to 524288000 [ 737.025828][ T5969] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.217132][ T5969] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.616281][T11273] usb usb8: usbfs: process 11273 (syz.7.1022) did not claim interface 0 before use [ 738.860592][T10948] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 738.979815][T10948] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 739.037517][T10948] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 739.098804][T10948] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 739.146791][T10948] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 739.189852][T10948] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 739.211382][T10948] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 739.220302][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.228381][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.598888][T10948] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 740.572225][T11291] 9pnet_virtio: no channels available for device syz [ 741.021312][T11307] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1030'. [ 741.066776][T11303] loop6: detected capacity change from 0 to 524288000 [ 741.217292][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 741.225533][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 741.701835][T10948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.835899][T10948] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.932343][ T5969] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.939592][ T5969] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.252668][T11339] usb usb8: usbfs: process 11339 (syz.8.1036) did not claim interface 0 before use [ 742.500211][T11338] siw: device registration error -23 [ 743.071682][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.078874][ T5949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 743.094590][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 743.119125][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 743.129828][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 743.151410][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 743.159451][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 744.921340][T11368] netlink: 'syz.8.1040': attribute type 10 has an invalid length. [ 745.038141][T11369] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1040'. [ 745.242581][ T51] Bluetooth: hci5: command tx timeout [ 746.756713][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.769808][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.359553][ T51] Bluetooth: hci5: command tx timeout [ 748.652268][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.832213][ T9371] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 748.984527][ T9371] usb 8-1: unable to get BOS descriptor or descriptor too short [ 748.995405][ T9371] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.031207][ T9371] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 749.031631][T11335] lo speed is unknown, defaulting to 1000 [ 749.066036][ T9371] usb 8-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 749.151389][ T9371] usb 8-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 749.197314][ T9371] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 749.230851][T11400] loop6: detected capacity change from 0 to 524288000 [ 749.239803][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.250718][ T9371] usb 8-1: config 1 interface 1 has no altsetting 0 [ 749.263762][ T9371] usb 8-1: string descriptor 0 read error: -22 [ 749.270252][ T9371] usb 8-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 749.287908][ T9371] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.400623][T11404] 9pnet_virtio: no channels available for device syz [ 749.407786][ T51] Bluetooth: hci5: command tx timeout [ 750.851998][T11420] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1049'. [ 750.988408][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.064806][ T9371] usb 8-1: USB disconnect, device number 7 [ 751.367024][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.482633][ T51] Bluetooth: hci5: command tx timeout [ 751.568506][T10948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.787551][ T8406] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 752.055375][ T8406] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 752.261961][T11448] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1055'. [ 752.911807][ T8406] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 753.126759][ T8406] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 753.393707][ T8406] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 753.451723][ T8406] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.481486][ T8406] usb 9-1: Product: syz [ 753.497310][ T8406] usb 9-1: Manufacturer: syz [ 753.710062][ T8406] usb 9-1: SerialNumber: syz [ 753.735686][ T8406] usb 9-1: config 0 descriptor?? [ 753.753541][T11435] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 753.764823][T11435] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 753.777516][ T8406] usb 9-1: ucan: probing device on interface #0 [ 754.520886][ T8406] usb 9-1: ucan: could not read protocol version, ret=-71 [ 754.538459][ T8406] usb 9-1: ucan: probe failed; try to update the device firmware [ 754.584484][ T8406] usb 9-1: USB disconnect, device number 9 [ 754.965994][ T13] bridge_slave_1: left allmulticast mode [ 754.991961][ T13] bridge_slave_1: left promiscuous mode [ 755.011221][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.245614][ T13] bridge_slave_0: left allmulticast mode [ 755.268773][ T13] bridge_slave_0: left promiscuous mode [ 755.306735][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.826522][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 756.867759][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 756.914261][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 757.060963][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 757.098352][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 757.108236][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 757.205415][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.222893][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.246788][ T13] bond0 (unregistering): Released all slaves [ 757.322019][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 757.342522][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 757.424117][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1062'. [ 757.815483][T11502] usb usb8: usbfs: process 11502 (syz.7.1065) did not claim interface 0 before use [ 757.857866][T11503] siw: device registration error -23 [ 758.283242][ T30] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 758.328823][T11335] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.353555][T11335] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.371886][T11335] bridge_slave_0: entered allmulticast mode [ 758.392954][T11335] bridge_slave_0: entered promiscuous mode [ 758.451395][T11335] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.471778][ T30] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 758.480838][T11335] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.514065][T11335] bridge_slave_1: entered allmulticast mode [ 758.526198][ T30] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 758.535850][T11335] bridge_slave_1: entered promiscuous mode [ 758.548958][ T30] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.578599][ T30] usb 9-1: Product: syz [ 758.600946][ T30] usb 9-1: Manufacturer: syz [ 758.620613][T10948] veth0_vlan: entered promiscuous mode [ 758.621248][ T30] usb 9-1: SerialNumber: syz [ 759.023986][T11529] netlink: 'syz.7.1069': attribute type 10 has an invalid length. [ 759.235787][ T13] hsr_slave_0: left promiscuous mode [ 759.269969][ T13] hsr_slave_1: left promiscuous mode [ 759.289870][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.313692][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.334357][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.358576][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.410441][ T30] cdc_ether 9-1:1.0: skipping garbage [ 759.420357][ T13] veth1_macvtap: left promiscuous mode [ 759.427050][ T30] usb 9-1: No union descriptors [ 759.438943][ T30] usb 9-1: USB disconnect, device number 10 [ 759.451825][ T13] veth0_macvtap: left promiscuous mode [ 759.466615][ T13] veth1_vlan: left promiscuous mode [ 759.476951][ T13] veth0_vlan: left promiscuous mode [ 760.059952][ T13] team0 (unregistering): Port device team_slave_1 removed [ 760.110127][ T13] team0 (unregistering): Port device team_slave_0 removed [ 761.108398][T11335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.241821][T11335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 762.274946][T11335] team0: Port device team_slave_0 added [ 762.293988][T10948] veth1_vlan: entered promiscuous mode [ 762.382852][T11335] team0: Port device team_slave_1 added [ 762.778351][T11335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.968460][T11335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.006963][T11335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.124158][T11598] siw: device registration error -23 [ 763.551931][T11335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.882226][T11335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.994935][T11335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.439994][T11335] hsr_slave_0: entered promiscuous mode [ 764.484353][T11335] hsr_slave_1: entered promiscuous mode [ 764.514537][T11335] debugfs: 'hsr0' already exists in 'hsr' [ 764.534617][T11335] Cannot create hsr debugfs directory [ 764.553641][T11609] usb usb8: usbfs: process 11609 (syz.8.1079) did not claim interface 0 before use [ 764.814898][T10948] veth0_macvtap: entered promiscuous mode [ 764.887139][T10948] veth1_macvtap: entered promiscuous mode [ 765.158728][T10948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.293042][T10948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.351867][T11625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1083'. [ 765.376707][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.473198][T11631] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1084'. [ 765.487508][T11625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.551907][T11625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.610839][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.651742][ T37] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.674421][T11634] netlink: 'syz.4.1084': attribute type 1 has an invalid length. [ 765.702463][T11634] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1084'. [ 765.728335][ T37] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.929943][T11381] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.963179][T11381] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.646821][T11643] netlink: 'syz.4.1086': attribute type 2 has an invalid length. [ 767.749440][T11381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.823050][T11381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.284937][T11661] loop4: detected capacity change from 0 to 4096 [ 769.810615][T11663] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 769.869348][T11661] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1090'. [ 769.975433][ T5622] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 769.987815][ T5622] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 770.002919][ T5622] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 770.011906][ T5622] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 770.025506][ T5622] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 770.090408][T11666] NILFS (loop4): error -22 preparing GC: cannot mark copying blocks dirty [ 770.180841][T11335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 770.240432][T11335] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 770.274646][T11335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 770.362326][T11335] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 770.404647][T11335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 770.452939][T11335] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 770.499204][T11335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 770.554961][T11335] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 770.685068][T11118] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 770.697175][T11118] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 770.705600][T11118] CPU: 0 UID: 0 PID: 11118 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 770.715159][T11118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 770.725282][T11118] RIP: 0010:klist_del+0x49/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 770.730257][T11118] Code: f5 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 c9 34 6d f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 ab 34 6d f6 4d 8b 7e 58 4c 89 f7 e8 2f 46 [ 770.749900][T11118] RSP: 0018:ffffc90003ba7848 EFLAGS: 00010212 [ 770.756062][T11118] RAX: 000000000000000b RBX: ffff88805645e860 RCX: ffff8880328dbe00 [ 770.764081][T11118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 770.772082][T11118] RBP: ffffc90003ba7970 R08: ffff888056316d23 R09: 1ffff1100ac62da4 [ 770.780113][T11118] R10: dffffc0000000000 R11: ffffed100ac62da5 R12: dffffc0000000000 [ 770.788112][T11118] R13: 1ffff1100ac8bd0c R14: 0000000000000000 R15: ffff888022fb6888 [ 770.796136][T11118] FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 770.805083][T11118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 770.811698][T11118] CR2: 00007f547066627a CR3: 0000000074d5c000 CR4: 0000000000350ef0 [ 770.819682][T11118] Call Trace: [ 770.823049][T11118] [ 770.825968][T11118] device_del+0x27f/0x8f0 [ 770.830341][T11118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.835988][T11118] ? lockdep_hardirqs_on+0x7a/0x110 [ 770.841204][T11118] ? __pfx_device_del+0x10/0x10 [ 770.846085][T11118] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 770.852201][T11118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.857871][T11118] ? netdev_unregister_kobject+0x347/0x450 [ 770.863697][T11118] unregister_netdevice_many_notify+0x1be4/0x2150 [ 770.870127][T11118] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 770.876904][T11118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.882595][T11118] ? rtnl_net_dev_lock+0x36/0x2f0 [ 770.887618][T11118] ? rtnl_net_dev_lock+0x36/0x2f0 [ 770.892643][T11118] unregister_netdev+0x155/0x1f0 [ 770.897597][T11118] ? __pfx_unregister_netdev+0x10/0x10 [ 770.903088][T11118] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 770.908907][T11118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.914557][T11118] bnep_session+0x2af2/0x2d20 [ 770.919252][T11118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.924931][T11118] ? __lock_acquire+0x683/0x2cf0 [ 770.929883][T11118] ? kthread_affine_node+0x2b2/0x360 [ 770.935189][T11118] ? __pfx_bnep_session+0x10/0x10 [ 770.940217][T11118] ? do_raw_spin_lock+0x12b/0x2f0 [ 770.945249][T11118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.951107][T11118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.956753][T11118] ? __pfx_woken_wake_function+0x10/0x10 [ 770.962419][T11118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.968054][T11118] ? __kthread_parkme+0x71/0x1f0 [ 770.972998][T11118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 770.978630][T11118] ? __kthread_parkme+0x196/0x1f0 [ 770.983664][T11118] kthread+0x388/0x470 [ 770.987745][T11118] ? __pfx_bnep_session+0x10/0x10 [ 770.992772][T11118] ? __pfx_kthread+0x10/0x10 [ 770.997394][T11118] ret_from_fork+0x514/0xb70 [ 771.001994][T11118] ? __pfx_ret_from_fork+0x10/0x10 [ 771.007158][T11118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 771.012826][T11118] ? __switch_to+0xc89/0x1420 [ 771.017519][T11118] ? __pfx_kthread+0x10/0x10 [ 771.022121][T11118] ret_from_fork_asm+0x1a/0x30 [ 771.026893][T11118] [ 771.029935][T11118] Modules linked in: [ 771.035445][T11118] ---[ end trace 0000000000000000 ]--- [ 771.045835][T11118] RIP: 0010:klist_del+0x49/0x110 [ 771.050965][T11118] Code: f5 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 c9 34 6d f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 ab 34 6d f6 4d 8b 7e 58 4c 89 f7 e8 2f 46 [ 771.070785][T11118] RSP: 0018:ffffc90003ba7848 EFLAGS: 00010212 [ 771.076941][T11118] RAX: 000000000000000b RBX: ffff88805645e860 RCX: ffff8880328dbe00 [ 771.085623][T11118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 771.115127][T11118] RBP: ffffc90003ba7970 R08: ffff888056316d23 R09: 1ffff1100ac62da4 [ 771.124555][T11118] R10: dffffc0000000000 R11: ffffed100ac62da5 R12: dffffc0000000000 [ 771.135071][T11118] R13: 1ffff1100ac8bd0c R14: 0000000000000000 R15: ffff888022fb6888 [ 771.143258][T11118] FS: 0000000000000000(0000) GS:ffff888124f4e000(0000) knlGS:0000000000000000 [ 771.153039][T11118] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 771.161583][T11118] CR2: 0000001b2ee17ff8 CR3: 000000002bd82000 CR4: 0000000000350ef0 [ 771.201684][T11118] Kernel panic - not syncing: Fatal exception [ 771.208058][T11118] Kernel Offset: disabled [ 771.212399][T11118] Rebooting in 86400 seconds..