last executing test programs: 25m1.11694621s ago: executing program 4 (id=1345): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 24m59.805251513s ago: executing program 4 (id=1350): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '!\x91.\xdb)\xda\vY\x9a\xf0\x16}AL\xe3', 0x3a, '\\x\xacK-^{', 0x3a, './file1'}, 0x3d) 24m59.718522166s ago: executing program 4 (id=1351): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 24m56.251484961s ago: executing program 4 (id=1370): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 24m56.034958084s ago: executing program 4 (id=1372): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 24m54.543895852s ago: executing program 4 (id=1377): syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x87ff, 0x0) 24m53.994684356s ago: executing program 32 (id=1377): syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0x87ff, 0x0) 23m45.357378608s ago: executing program 1 (id=1917): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0xcc, @rand_addr=' \x01\x00', 0x8000000}, {0xa, 0x1c, 0x8ae5, @loopback, 0x1}, 0xffffffffffffffff, 0x8}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 23m45.172232288s ago: executing program 1 (id=1919): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) r2 = io_uring_setup(0x130a, &(0x7f0000000580)={0x0, 0xddf9, 0x80, 0xffffdffe, 0x14f}) close_range(r2, r2, 0x0) close(r1) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) sendfile(r1, r0, 0x0, 0x578410ed) 23m44.917974549s ago: executing program 1 (id=1920): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x8c397e) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0xfffffffb, 0x7e6, 0x5, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) r8 = io_uring_setup(0x3f6e, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES2(r8, 0xf, &(0x7f0000000380)={0x60, 0x1, 0x0, 0x0, 0x0}, 0x20) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="32b40c6fc44c"}, 0x14) 23m44.061400799s ago: executing program 1 (id=1923): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 23m43.895472776s ago: executing program 1 (id=1925): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x420b41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5402, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40086602, 0x0) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x26aadf42, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r4 = fsmount(0xffffffffffffffff, 0x0, 0x8f) fchdir(r4) pread64(0xffffffffffffffff, &(0x7f0000000040)=""/54, 0x36, 0x0) close(r3) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000000)=0x9) connect$inet(r5, &(0x7f0000000280)={0x2, 0x80, @remote}, 0x10) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x700, 0x0, [@sadb_key={0x4, 0x9, 0xa8, 0x0, "53bb467d04f14562c5f463273ef4a720564f485af2"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) 23m42.571937822s ago: executing program 1 (id=1930): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 23m41.965202137s ago: executing program 33 (id=1930): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e6576650000140002800500040001000000050008000100000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10m31.711200377s ago: executing program 6 (id=4808): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = accept(r1, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x28, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x42180000, 0x3b}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc88}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xd0) 10m26.01223303s ago: executing program 6 (id=4818): writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 10m25.812669008s ago: executing program 6 (id=4821): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000840)="3a822d6f0306bc598a25fbf98ce3df61eddbb19384ec19a1b8cc10cf952b7536e16239cb61c3ba224865dadc4b1088ed0ce5c9ede116bbde6c3a8329413526b61ec377c0f2833a31b0ec1819ae320ead44ca256a14c3c29f6fea826ce6dfcdbde79656574caca7d33f43358c1f09d1809f0fc894ad8dc2339e2acbd7b63580ad7b88bc00000000000000", 0x8a}, {&(0x7f00000005c0)="3c977216b675039a1d3cb9920fbde265b9fde5b6e2b783b007b86348fe27ba25eb95bb5c4801fb54160e8dc5a2dda4a5874012f61bc684f2fea324e5ce4f463d183394e9f1a10d4617821b5e3ab4f2db20309495630dc4069c2e5abcf78f36372b95eb5f7a9ad2fdd2de8dc2b2b8005b1c693326ee358c3ce5f07cc2a060b56dc4d32eda82d690deb953f171dcb504e13d612bddbf039175912c87bff251ecf18ab5fe4568d1219b6b424d0af0b117b73a8ad2c67c8e3597bcba5a86b20b1f3f657ced3bf6d67479cac4f1a1f9b67512acad7521711c33", 0xd7}, {&(0x7f00000006c0)="299b0c039d86bff86edd7b6de6dde7fadb86888a410060def3174d4d4ba1cf8c4fdde03e83abbdf73e695f165346a78d8d79108d9b516d9abf09a136ab52d0e19dfb2f00bb046d00000000001b000000000010000000", 0x56}], 0x3}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="9d70b2a7c34e6a7f3116cfa2b021c3136e6530cfe2b242564adf52d96187131c30b12cada737", 0x26}, {&(0x7f0000000100)="7b4bcc9089864d85e764b6bba256e6af91e69ae71ffef7df313e92c30fed65dae5961c2c163fb13606ee96db7249efdb195eb6cbc8462a0b7df5e9a2f2555d3959af1ca406f89e87409474f6c69230cbc89e4052b59bf2d40986e6547ee78b4c36db49a35f2949daa1dadcdb43d5cfb31839d3ce23eccf139ef9c2286a326d1ca5e18e449fe954cb9d33eb4e6761f41cefcaf0c88adc59a283c091f645fecade2b37c10bf3", 0xa5}, {&(0x7f0000000e80)="02e6f3e048e65d33e396c2b739cf5b78f9dbc918cd90d3384c2ca9d13f9ae652d4bb2f24a81055e2dd62fdb07332640926c6c9f54896a6522cb14a6dcec70743e8fac9d9189acebddf920aabd09f359aa975877619996a34ff58778b57b6da8e8938b6bc82ad33f637928e85611b257de6693eeacf60ae5fd21872cf134af66123e18917194dc67bffeff923960c", 0x8e}, {&(0x7f0000000980)="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", 0x1a9}, {&(0x7f0000000480)="0aa732c38ba9f4ae98f8528cb4a558d6b836a04da29c5fabcb595bbb896d766f9073be7b0346b0ec225618bb72c878b4ac8e1cdadff66cbc6545652f2aba12fce7ee8fc1870ac0d6192d95cf39de108fbd34da90483f34083ffee7980365fd7649ad116f68ae4de00efabb", 0x6b}, {&(0x7f0000000dc0)="128057c3ecdf99f18b48f0aae1987a57df52c3df6ef6655a29ada4e07fb82bc16b6d09acfd6561625554fabc92cec26138ba1e641d459b332d808d7d7acd57cf2abd209c59d2e676d3a25b109b1ded08377acc67fbd4015e03a13b9f761db934b988d34f45530b2bc710f89c2b0004f62a14c65f6c1a0c018bea98af07fa1dfeb41459930a71e9628b87defa7de243b58eb9eabdcfcedb666bfe5f795562d47c8dcb2f01b9a3369391e1", 0xaa}, {&(0x7f0000000500)="fdac47355d84dade0f6b73a0fb6bda72ede5b1812b91356953c9", 0x1a}], 0x7}}], 0x3, 0x2000c044) sendto$inet(r1, &(0x7f0000000380)="c8ce00001b16f4177265d4fc307232e500da61523e6478eb2850989f3890d0410f3f0bd04287a66535ab4b0e9bfcbffe698fdb7370fc0d77af048d30d062c3797da2c765506d8923ddde80ce8315a1b37131bffaf34d52210ce6fa3f0eda74eb", 0x60, 0x0, 0x0, 0x0) 10m25.559805901s ago: executing program 6 (id=4824): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e24, 0x4e20, 0x1c, 0x0, @gue={{0x1, 0x0, 0x0, 0x2, 0x100, @void}, "87583a98dfe5903e16bc2e536ac273c5"}}}}, 0x3e) 10m22.212802803s ago: executing program 6 (id=4830): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e0001"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 10m21.995653285s ago: executing program 6 (id=4834): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb0400003667feee96325d0c0dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000ae184a193b70fca8e1ecb987780e60593e20c26d33867972e4e669d1a9a24e56bf767763fcd1b555d0f79b9b10a4ba72d74004b640a2914970ae9343640b6eeedcaa4a0dda71cee8fddb361"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000000000000000000000000000000007d1d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 10m15.427843209s ago: executing program 5 (id=4844): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e0001"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) 10m15.143430328s ago: executing program 5 (id=4847): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x2, 0x9, 0x7, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x8a, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x6c, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r6, 0x623, 0x70bd2b, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x8800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@gettaction={0x20, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) 10m13.878431807s ago: executing program 5 (id=4848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x27) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000003c0)="51eb", 0x2}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) socket(0x40000000015, 0x5, 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES8=r3, @ANYRESHEX=0x0], 0xa0}}, 0x22004081) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x14000108}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x600, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008040}, 0x1) 10m11.698073336s ago: executing program 5 (id=4852): bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000300000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 10m10.097378497s ago: executing program 5 (id=4854): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x27) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000003c0)="51eb", 0x2}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES8=r3, @ANYRESHEX=0x0], 0xa0}}, 0x22004081) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x14000108}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x600, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008040}, 0x1) 10m9.11744642s ago: executing program 5 (id=4859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x27) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000003c0)="51eb", 0x2}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES8=r3, @ANYRESHEX=0x0], 0xa0}}, 0x22004081) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x14000108}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x600, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008040}, 0x1) 10m6.866354812s ago: executing program 34 (id=4834): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0x40}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb0400003667feee96325d0c0dabf95ddc91967c2008000240000000000c00010052415445455354000900020073797a3200000000140000001100010000000000000000000100000ae184a193b70fca8e1ecb987780e60593e20c26d33867972e4e669d1a9a24e56bf767763fcd1b555d0f79b9b10a4ba72d74004b640a2914970ae9343640b6eeedcaa4a0dda71cee8fddb361"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000001a00)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="000000000000000000000000000000007d1d0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) mmap(&(0x7f00000fe000/0xd000)=nil, 0xd000, 0x1000005, 0xd2952, 0xffffffffffffffff, 0xfffff000) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x118) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 9m53.952796932s ago: executing program 35 (id=4859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(0x0, 0x27) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000001740)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f00000003c0)="51eb", 0x2}, 0x64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x102, 0x4, 0x404, 0x0, 0x10c, 0x10c, 0x324, 0x324, 0x324, 0x4, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @remote, @multicast1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}, @multicast2, @empty, 0x9, 0xffffffff}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'ipvlan1\x00'}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="e9fb760d26c0", @multicast1, @broadcast}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRES16=r0, @ANYRES8=r3, @ANYRESHEX=0x0], 0xa0}}, 0x22004081) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x182, 0x0) openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x14000108}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x600, 0x0, 0x0, {0x0, 0x0, 0x6}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008040}, 0x1) 19.811414122s ago: executing program 0 (id=6502): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 19.437881176s ago: executing program 0 (id=6504): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS2(r7, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f000030a000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x2b8, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x8, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x288, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_POLICE={0x24, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_BASIC_ACT={0x24c, 0x3, [@m_tunnel_key={0xb8, 0xf, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x3a, 0x6, "e55fa15b0676e00a9b9ea4fb92d15179da93faa8199989a09e79fed8b6b4af86c4d3dd924c74ca0b95768e2b5fc10c070dd5599a9d96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x50, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x9ff, 0x5, 0x747, 0xb}}]}, {0xc, 0x6, "aa72702d77e3f4fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x5, 0x4, 0x7, 0xc3ed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x3, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff7f, 0x0, 0x2, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0x179}}, @TCA_DEF_DATA={0x6, 0x3, ')\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0xa2, 0x6, "7260547954edc2452167c5e768d449cb703bef02e30d83861de410a2089fb5c29d97a6308c51c8ab335c44283a175719268edc35b48cd28e93326aaa636d12dcf20b829be2f00665a3dc3d6726874455dc857606c13ac68edff3468663df2b9340cc2e7ba025ca5961ec02616b640af41eeb67b49ec0f3234d4b2fc35ec19f1a7a8ca009277f0a2c324567aa2796fa21f12bd225143aacc287748ecc96ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 12.710418245s ago: executing program 7 (id=6517): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) acct(&(0x7f0000000180)='./file1\x00') acct(0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_CAP_DISABLE_QUIRKS2(r7, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f000030a000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x19, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=@newtfilter={0x2b8, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x8, 0x4}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x288, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xd, 0x6}}, @TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_BASIC_POLICE={0x24, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}, @TCA_BASIC_ACT={0x24c, 0x3, [@m_tunnel_key={0xb8, 0xf, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x3a, 0x6, "e55fa15b0676e00a9b9ea4fb92d15179da93faa8199989a09e79fed8b6b4af86c4d3dd924c74ca0b95768e2b5fc10c070dd5599a9d96"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x50, 0x15, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3ff, 0x9ff, 0x5, 0x747, 0xb}}]}, {0xc, 0x6, "aa72702d77e3f4fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x80000001, 0x5, 0x4, 0x7, 0xc3ed}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x9, 0x1, 0x3, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff7f, 0x0, 0x2, 0x4, 0x1}}, @TCA_DEF_PARMS={0x18, 0x2, {0x7, 0x6, 0x20000000, 0x179}}, @TCA_DEF_DATA={0x6, 0x3, ')\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0xa2, 0x6, "7260547954edc2452167c5e768d449cb703bef02e30d83861de410a2089fb5c29d97a6308c51c8ab335c44283a175719268edc35b48cd28e93326aaa636d12dcf20b829be2f00665a3dc3d6726874455dc857606c13ac68edff3468663df2b9340cc2e7ba025ca5961ec02616b640af41eeb67b49ec0f3234d4b2fc35ec19f1a7a8ca009277f0a2c324567aa2796fa21f12bd225143aacc287748ecc96ab"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 12.160375716s ago: executing program 0 (id=6522): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x2100) 10.81866761s ago: executing program 0 (id=6525): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./bus\x00', &(0x7f0000000300)='9p\x00', 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 8.727445024s ago: executing program 8 (id=6531): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setrlimit(0xd, &(0x7f00000000c0)={0x3, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) shutdown(r2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78) connect$bt_rfcomm(r2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r8, 0x0, 0x0, 0x8ffff) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r9 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) 8.121995778s ago: executing program 8 (id=6532): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x3}]}, 0x28}, 0x1, 0x8}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 7.946617527s ago: executing program 3 (id=6534): socket(0x2d, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 6.741907291s ago: executing program 2 (id=6535): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) setrlimit(0xd, &(0x7f00000000c0)={0x3, 0x4}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) shutdown(r2, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000005340)={0x78, 0x0, r4, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r5, r6, 0xb, 0x8, 0x1000000}}}, 0x78) connect$bt_rfcomm(r2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302) ioctl$SG_IO(r7, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r1}, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x50, 0x0, 0x0) 6.711183197s ago: executing program 8 (id=6536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000a80)}], 0x3) 6.648501218s ago: executing program 3 (id=6537): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 6.548839132s ago: executing program 0 (id=6538): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x5}, 0x9c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x34, 0x32, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4048840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) 5.760632011s ago: executing program 2 (id=6539): syz_open_dev$media(&(0x7f0000000000), 0x2, 0x28102) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(0x0, 0x17) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0xb4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x4b4b, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 5.182358362s ago: executing program 7 (id=6540): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, 0x0, 0x0) r5 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r7, 0x1, 0x78bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) 4.907510306s ago: executing program 3 (id=6541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)={0x14, r3, 0xe1a4cdd49ac64d35, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r4, 0x5452, &(0x7f0000001840)=0x5d4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x400, 0x0, 0x0, {0xa, 0xce0d662461e180b1, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10004}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_SRC={0x14, 0x2, @loopback}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0xbf, &(0x7f00000020c0)=""/191}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff95, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 4.033078091s ago: executing program 2 (id=6542): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) sendto$packet(r0, &(0x7f0000000180)="280320000a0014000000fbf719143baa111f43c851ffab286e16195ecf3d77cc32b6d7", 0x23, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) 3.925625087s ago: executing program 7 (id=6543): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500000000000000", 0x3f}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce7", 0x97}, {0x0}], 0x3}}], 0x1, 0x2090) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb396", 0xf}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.806683556s ago: executing program 8 (id=6544): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 2.717311819s ago: executing program 3 (id=6545): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.640006498s ago: executing program 2 (id=6546): 2.633577612s ago: executing program 3 (id=6547): socket(0x2d, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.586746067s ago: executing program 8 (id=6548): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44e8fe55a118001500060014260360", 0x1c}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.585163523s ago: executing program 7 (id=6549): socket(0x2d, 0x2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 2.467710775s ago: executing program 2 (id=6550): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') read$ptp(r3, &(0x7f0000000300)=""/212, 0xd4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x48) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000000c0), 0x4) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000040c0)={0x14, 0x38, 0x107, 0x70bd27, 0x259fdbfe, {0x2, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) capset(0x0, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) 2.467053665s ago: executing program 8 (id=6551): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.409534811s ago: executing program 3 (id=6552): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x900, 0x5, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) bind$inet(r0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x1, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x4, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d5, 0x3c}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 1.37616484s ago: executing program 7 (id=6553): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x18088, 0x80}}}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}, 0x1, 0x8}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.37528226s ago: executing program 2 (id=6554): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0xb8f7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000401}, 0x140000a0) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r5, 0x0, 0x0) 1.095605426s ago: executing program 0 (id=6555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1735c48291a13441110d9e074ad8d8d891cc61d30bd34a4d3ae42f513f0fc7c410a8c0b5d44adb0595"], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)=0x9) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 0s ago: executing program 7 (id=6556): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0xf0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x100008}, 0x2c) ioctl$I2C_PEC(0xffffffffffffffff, 0x708, 0xb8f7) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000401}, 0x140000a0) socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) kernel console output (not intermixed with test programs): [ 1658.018427][T23860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1658.018445][T23860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1658.018472][T23860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1658.207465][T22671] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1658.207727][T22671] asix 1-1:0.188: probe with driver asix failed with error -71 [ 1658.232226][T22671] usb 1-1: USB disconnect, device number 116 [ 1658.459914][T24073] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5406'. [ 1659.657083][T23708] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1659.778680][T23708] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1659.836810][T24084] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 1659.842563][T23860] hsr_slave_0: entered promiscuous mode [ 1660.181783][T23860] hsr_slave_1: entered promiscuous mode [ 1660.338303][T23860] debugfs: 'hsr0' already exists in 'hsr' [ 1660.338321][T23860] Cannot create hsr debugfs directory [ 1660.338668][T23708] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1663.653679][T23708] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1663.800085][T24099] tipc: Enabled bearer , priority 0 [ 1663.800500][T24102] syzkaller0: entered promiscuous mode [ 1663.800522][T24102] syzkaller0: entered allmulticast mode [ 1663.888680][T24097] tipc: Resetting bearer [ 1663.895161][T24122] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 1664.075648][T24097] tipc: Disabling bearer [ 1666.038641][T24154] fuse: Unknown parameter 'use0000000000000000000000000000000000000000' [ 1666.075411][T24156] syzkaller0: entered promiscuous mode [ 1666.075436][T24156] syzkaller0: entered allmulticast mode [ 1666.083556][T24156] tipc: Enabled bearer , priority 0 [ 1666.870387][T24155] tipc: Resetting bearer [ 1666.936050][T24163] loop2: detected capacity change from 0 to 7 [ 1667.024276][T24117] Dev loop2: unable to read RDB block 7 [ 1667.024314][T24117] loop2: AHDI p1 p2 p3 [ 1667.024345][T24117] loop2: partition table partially beyond EOD, truncated [ 1667.029686][T24117] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1667.029711][T24117] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1667.089432][T24155] tipc: Disabling bearer [ 1667.112866][T24163] Dev loop2: unable to read RDB block 7 [ 1667.112901][T24163] loop2: AHDI p1 p2 p3 [ 1667.112932][T24163] loop2: partition table partially beyond EOD, truncated [ 1667.139693][T24163] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1667.139724][T24163] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1667.728514][T23708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1668.788856][T23708] 8021q: adding VLAN 0 to HW filter on device team0 [ 1668.817142][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1668.817282][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1668.833636][ T6074] bridge_slave_1: left allmulticast mode [ 1668.833663][ T6074] bridge_slave_1: left promiscuous mode [ 1668.833878][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.022916][ T6074] bridge_slave_0: left allmulticast mode [ 1670.022945][ T6074] bridge_slave_0: left promiscuous mode [ 1670.023171][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.087039][T24202] netlink: 'syz.3.5438': attribute type 3 has an invalid length. [ 1673.094749][ T6074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1673.190367][ T6074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1673.216193][ T6074] bond0 (unregistering): Released all slaves [ 1673.401279][T24219] tipc: Enabled bearer , priority 0 [ 1673.401591][T24215] syzkaller0: entered promiscuous mode [ 1673.401613][T24215] syzkaller0: entered allmulticast mode [ 1673.487771][T24209] tipc: Resetting bearer [ 1673.497774][T24243] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5453'. [ 1673.645893][T24209] tipc: Disabling bearer [ 1673.767794][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.767939][ T6067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1675.948022][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1675.949023][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1676.974367][ T6074] hsr_slave_0: left promiscuous mode [ 1677.007289][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1677.012137][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1677.013426][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1677.028328][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1677.029013][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1677.049794][ T6074] hsr_slave_1: left promiscuous mode [ 1677.050597][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1677.095619][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1677.416529][ T6074] team0 (unregistering): Port device team_slave_1 removed [ 1677.455734][ T6074] team0 (unregistering): Port device team_slave_0 removed [ 1677.605416][T24260] tipc: Enabling of bearer rejected, already enabled [ 1678.009289][T24272] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5463'. [ 1678.128187][T24276] syzkaller0: entered promiscuous mode [ 1678.128211][T24276] syzkaller0: entered allmulticast mode [ 1678.132857][T24276] tipc: Enabled bearer , priority 0 [ 1678.220607][T24275] tipc: Resetting bearer [ 1679.366388][T21594] Bluetooth: hci1: command tx timeout [ 1679.528684][T24275] tipc: Disabling bearer [ 1682.096699][ T5791] Bluetooth: hci1: command tx timeout [ 1682.826011][T24302] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5472'. [ 1683.348133][T24321] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5480'. [ 1683.570147][T24321] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5480'. [ 1683.974190][T24329] tipc: Enabling of bearer rejected, already enabled [ 1684.427169][ T5791] Bluetooth: hci1: command tx timeout [ 1685.462988][T24352] tipc: Enabling of bearer rejected, already enabled [ 1686.150307][T24263] chnl_net:caif_netlink_parms(): no params data found [ 1686.484086][ T5791] Bluetooth: hci1: command tx timeout [ 1686.628368][T24365] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5486'. [ 1686.835564][T23860] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1686.935141][T23860] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1688.794111][T24387] tipc: Enabling of bearer rejected, already enabled [ 1689.378092][T23860] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1689.495201][T24263] bridge0: port 1(bridge_slave_0) entered blocking state [ 1689.495323][T24263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.495554][T24263] bridge_slave_0: entered allmulticast mode [ 1689.509180][T24263] bridge_slave_0: entered promiscuous mode [ 1689.865357][T24263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1689.865431][T24263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.865620][T24263] bridge_slave_1: entered allmulticast mode [ 1689.866992][T24263] bridge_slave_1: entered promiscuous mode [ 1689.942965][T24263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1689.961063][T24263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1690.102385][T24403] loop2: detected capacity change from 0 to 7 [ 1690.129327][T24238] Dev loop2: unable to read RDB block 7 [ 1690.129360][T24238] loop2: AHDI p1 p2 p3 [ 1690.129397][T24238] loop2: partition table partially beyond EOD, truncated [ 1690.130680][T24238] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1690.130701][T24238] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1690.189136][T24403] Dev loop2: unable to read RDB block 7 [ 1690.189168][T24403] loop2: AHDI p1 p2 p3 [ 1690.189189][T24403] loop2: partition table partially beyond EOD, truncated [ 1690.189376][T24403] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1690.189393][T24403] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1690.240395][T21594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1690.267472][T21594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1690.268955][T21594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1690.270394][T21594] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1690.271215][T21594] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1691.064836][T24263] team0: Port device team_slave_0 added [ 1691.065645][T24404] tipc: Enabled bearer , priority 0 [ 1692.326797][T21594] Bluetooth: hci2: command tx timeout [ 1692.354741][T24407] syzkaller0: entered promiscuous mode [ 1692.354768][T24407] syzkaller0: entered allmulticast mode [ 1692.656971][T24414] tipc: Resetting bearer [ 1693.665459][T24395] tipc: Resetting bearer [ 1693.800917][T24395] tipc: Disabling bearer [ 1693.969299][T24263] team0: Port device team_slave_1 added [ 1693.997128][T24446] tipc: Enabled bearer , priority 0 [ 1694.214257][T21106] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1694.296034][T24440] tipc: Disabling bearer [ 1694.341569][T24465] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5516'. [ 1694.366562][T21106] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.366591][T21106] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1694.366627][T21106] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1694.368812][T21106] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1694.368834][T21106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1694.368844][T21106] usb 3-1: Product: syz [ 1694.368852][T21106] usb 3-1: Manufacturer: syz [ 1694.368860][T21106] usb 3-1: SerialNumber: syz [ 1694.404659][T21594] Bluetooth: hci2: command tx timeout [ 1694.508052][T24263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1694.508443][T24263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.508472][T24263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.561254][T24263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.561273][T24263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.561301][T24263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.774585][T21106] uvcvideo 3-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1694.774629][T21106] uvcvideo 3-1:220.0: No valid video chain found. [ 1694.790269][T21106] usb 3-1: USB disconnect, device number 110 [ 1694.861297][T24473] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5518'. [ 1694.989453][T24263] hsr_slave_0: entered promiscuous mode [ 1694.990176][T24263] hsr_slave_1: entered promiscuous mode [ 1694.990655][T24263] debugfs: 'hsr0' already exists in 'hsr' [ 1694.990669][T24263] Cannot create hsr debugfs directory [ 1695.054147][ T807] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1695.217938][ T807] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.217967][ T807] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1695.218003][ T807] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1695.226037][ T807] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1695.226067][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1695.226086][ T807] usb 1-1: Product: syz [ 1695.226100][ T807] usb 1-1: Manufacturer: syz [ 1695.226114][ T807] usb 1-1: SerialNumber: syz [ 1695.485436][ T807] uvcvideo 1-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1695.485472][ T807] uvcvideo 1-1:220.0: No valid video chain found. [ 1695.531730][ T807] usb 1-1: USB disconnect, device number 117 [ 1695.775582][T24492] tipc: Enabled bearer , priority 0 [ 1695.850239][T24492] syzkaller0: entered promiscuous mode [ 1695.850263][T24492] syzkaller0: entered allmulticast mode [ 1697.014803][T21594] Bluetooth: hci2: command tx timeout [ 1697.114807][T24492] tipc: Resetting bearer [ 1697.155164][T24491] tipc: Resetting bearer [ 1697.347907][T24491] tipc: Disabling bearer [ 1697.612957][ T6074] bridge_slave_1: left allmulticast mode [ 1697.612987][ T6074] bridge_slave_1: left promiscuous mode [ 1697.613205][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.652291][T24527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5532'. [ 1697.699356][ T6074] bridge_slave_0: left allmulticast mode [ 1697.699377][ T6074] bridge_slave_0: left promiscuous mode [ 1697.699539][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.724929][ T6074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.805871][ T6074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.880311][ T6074] bond0 (unregistering): Released all slaves [ 1698.914493][T24514] tipc: Enabling of bearer rejected, failed to enable media [ 1699.003308][T24511] syzkaller0: entered promiscuous mode [ 1699.003333][T24511] syzkaller0: entered allmulticast mode [ 1699.044763][T21594] Bluetooth: hci2: command tx timeout [ 1701.598848][T24559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5541'. [ 1702.774225][ T6074] hsr_slave_0: left promiscuous mode [ 1702.794259][ T6074] hsr_slave_1: left promiscuous mode [ 1702.794898][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1702.844942][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.102972][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1703.102992][ T37] audit: type=1326 audit(1772223958.118:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24566 comm="syz.2.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1703.104109][ T37] audit: type=1326 audit(1772223958.118:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24566 comm="syz.2.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1703.106997][ T37] audit: type=1326 audit(1772223958.118:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24566 comm="syz.2.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1703.107040][ T37] audit: type=1326 audit(1772223958.118:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24566 comm="syz.2.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1703.107082][ T37] audit: type=1326 audit(1772223958.118:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24566 comm="syz.2.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1703.107123][ T37] audit: type=1326 audit(1772223958.118:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24566 comm="syz.2.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1703.107165][ T37] audit: type=1326 audit(1772223958.118:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24566 comm="syz.2.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1703.107204][ T37] audit: type=1326 audit(1772223958.118:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24566 comm="syz.2.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1703.107246][ T37] audit: type=1326 audit(1772223958.118:2826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24566 comm="syz.2.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1703.107296][ T37] audit: type=1326 audit(1772223958.118:2827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24566 comm="syz.2.5543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1703.601509][ T6074] team0 (unregistering): Port device team_slave_1 removed [ 1703.632323][ T6074] team0 (unregistering): Port device team_slave_0 removed [ 1703.792073][T24565] tipc: Enabling of bearer rejected, already enabled [ 1705.188314][T24595] tipc: Enabling of bearer rejected, already enabled [ 1705.270793][T24598] tipc: Enabling of bearer rejected, failed to enable media [ 1705.568828][T24405] chnl_net:caif_netlink_parms(): no params data found [ 1709.051963][T24405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.052158][T24405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1709.052399][T24405] bridge_slave_0: entered allmulticast mode [ 1709.124275][T24405] bridge_slave_0: entered promiscuous mode [ 1709.214341][T24646] tipc: Enabled bearer , priority 0 [ 1709.214850][T24405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.214955][T24405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.215189][T24405] bridge_slave_1: entered allmulticast mode [ 1709.218014][T24405] bridge_slave_1: entered promiscuous mode [ 1709.856370][T24640] tipc: Disabling bearer [ 1710.834688][T24664] tipc: Enabling of bearer rejected, already enabled [ 1710.847824][T24405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.232906][T24405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1711.509639][T24677] tipc: Enabling of bearer rejected, already enabled [ 1712.222760][T24405] team0: Port device team_slave_0 added [ 1713.062277][T24405] team0: Port device team_slave_1 added [ 1713.358601][T24405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.358619][T24405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.358646][T24405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.424999][T24405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.425016][T24405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.425045][T24405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.630691][T24263] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1713.857695][T24263] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1714.045980][T24405] hsr_slave_0: entered promiscuous mode [ 1714.052947][T24405] hsr_slave_1: entered promiscuous mode [ 1714.053870][T24405] debugfs: 'hsr0' already exists in 'hsr' [ 1714.053896][T24405] Cannot create hsr debugfs directory [ 1714.057055][T24263] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1714.156284][T24263] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1714.516935][T24712] tipc: Enabled bearer , priority 0 [ 1714.616559][T24709] tipc: Disabling bearer [ 1716.829060][T24746] tipc: Enabling of bearer rejected, already enabled [ 1719.128092][T24263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.162456][T24263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.185755][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.185953][ T6070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.210584][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.210788][ T6070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.621538][T24789] syz.2.5593 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1719.935444][ T6074] bridge_slave_1: left allmulticast mode [ 1719.935475][ T6074] bridge_slave_1: left promiscuous mode [ 1719.935722][ T6074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.056402][ T6074] bridge_slave_0: left allmulticast mode [ 1720.062061][ T6074] bridge_slave_0: left promiscuous mode [ 1720.062327][ T6074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.344412][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 1721.344431][ T37] audit: type=1326 audit(1772223976.358:2857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1721.344677][ T37] audit: type=1326 audit(1772223976.358:2858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1721.345314][ T37] audit: type=1326 audit(1772223976.358:2859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1721.345819][ T37] audit: type=1326 audit(1772223976.358:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1721.346078][ T37] audit: type=1326 audit(1772223976.358:2861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1721.346613][ T37] audit: type=1326 audit(1772223976.358:2862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1721.346878][ T37] audit: type=1326 audit(1772223976.358:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1721.347138][ T37] audit: type=1326 audit(1772223976.358:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1721.347540][ T37] audit: type=1326 audit(1772223976.358:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1722.076397][ T37] audit: type=1326 audit(1772223976.598:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24801 comm="syz.2.5598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1722.077925][ T6074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1722.268482][ T6074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1722.338316][ T6074] bond0 (unregistering): Released all slaves [ 1723.735324][T24824] netlink: 'syz.0.5600': attribute type 4 has an invalid length. [ 1723.735943][T24824] netlink: 'syz.0.5600': attribute type 4 has an invalid length. [ 1723.997103][ T6074] hsr_slave_0: left promiscuous mode [ 1724.034316][ T6074] hsr_slave_1: left promiscuous mode [ 1724.034931][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1724.078875][ T6074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1725.682913][ T6074] team0 (unregistering): Port device team_slave_1 removed [ 1725.715487][ T6074] team0 (unregistering): Port device team_slave_0 removed [ 1726.244652][T24263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1729.474238][ T36] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1730.743193][ T36] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1730.743223][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.743243][ T36] usb 1-1: Product: syz [ 1730.743256][ T36] usb 1-1: Manufacturer: syz [ 1730.743824][ T36] usb 1-1: SerialNumber: syz [ 1731.142453][T24263] veth0_vlan: entered promiscuous mode [ 1731.163776][T24405] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1731.219487][T24263] veth1_vlan: entered promiscuous mode [ 1731.221269][T24405] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1731.318232][T24405] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1731.437684][T24405] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1731.623046][ T36] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1731.623081][ T36] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1731.623093][ T36] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1731.686317][ T36] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1731.732456][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1731.732475][ T37] audit: type=1326 audit(1772223986.738:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24890 comm="syz.2.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1731.732505][ T37] audit: type=1326 audit(1772223986.738:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24890 comm="syz.2.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1731.745830][ T36] usb 1-1: USB disconnect, device number 118 [ 1731.801282][ T37] audit: type=1326 audit(1772223986.808:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24890 comm="syz.2.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1731.801316][ T37] audit: type=1326 audit(1772223986.808:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24890 comm="syz.2.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1731.801338][ T37] audit: type=1326 audit(1772223986.808:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24890 comm="syz.2.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1731.825823][ T37] audit: type=1326 audit(1772223986.838:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24890 comm="syz.2.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1731.825877][ T37] audit: type=1326 audit(1772223986.838:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24890 comm="syz.2.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1731.825922][ T37] audit: type=1326 audit(1772223986.838:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24890 comm="syz.2.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1731.826317][ T37] audit: type=1326 audit(1772223986.838:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24890 comm="syz.2.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1732.151078][ T37] audit: type=1326 audit(1772223986.978:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24890 comm="syz.2.5614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1733.256438][T24263] veth0_macvtap: entered promiscuous mode [ 1733.327169][T24263] veth1_macvtap: entered promiscuous mode [ 1733.657772][T24263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1734.695012][T24263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1734.766193][ T6067] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.793249][ T6067] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.813606][ T6067] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1734.834613][ T6067] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.241444][T24405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1735.376895][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.376992][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.552167][T24944] netlink: 'syz.0.5622': attribute type 4 has an invalid length. [ 1735.604231][T24405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1736.002786][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1736.003023][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1736.035790][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.035808][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.041438][ T1212] bridge0: port 2(bridge_slave_1) entered blocking state [ 1736.071267][ T1212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1737.185714][T24405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1738.278152][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1738.282003][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1738.299732][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1738.309078][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1738.309797][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1739.854146][ T1596] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1740.006712][ T1596] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.006740][ T1596] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1740.006776][ T1596] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1740.009300][ T1596] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1740.009330][ T1596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.009350][ T1596] usb 4-1: Product: syz [ 1740.009362][ T1596] usb 4-1: Manufacturer: syz [ 1740.009376][ T1596] usb 4-1: SerialNumber: syz [ 1740.354254][ T1596] uvcvideo 4-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1740.354291][ T1596] uvcvideo 4-1:220.0: No valid video chain found. [ 1740.385580][ T1596] usb 4-1: USB disconnect, device number 4 [ 1740.579411][T21594] Bluetooth: hci3: command tx timeout [ 1740.710285][ T6067] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.330426][T25033] overlayfs: failed to resolve './bus': -2 [ 1741.427052][ T1596] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1742.059684][ T6067] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.167976][ T1596] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1742.168013][ T1596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1742.168034][ T1596] usb 1-1: Product: syz [ 1742.168049][ T1596] usb 1-1: Manufacturer: syz [ 1742.168063][ T1596] usb 1-1: SerialNumber: syz [ 1742.350036][T25042] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5641'. [ 1742.463539][ T1596] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1742.463693][ T1596] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1742.463747][ T1596] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1742.616736][ T1596] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1742.646832][T21594] Bluetooth: hci3: command tx timeout [ 1742.832418][ T1596] usb 1-1: USB disconnect, device number 119 [ 1744.425967][T16139] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1744.602435][ T6067] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1744.705217][T16139] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1744.705236][T16139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.705247][T16139] usb 1-1: Product: syz [ 1744.705255][T16139] usb 1-1: Manufacturer: syz [ 1744.705263][T16139] usb 1-1: SerialNumber: syz [ 1744.724103][T21594] Bluetooth: hci3: command tx timeout [ 1744.755694][T24405] veth0_vlan: entered promiscuous mode [ 1744.869455][T24405] veth1_vlan: entered promiscuous mode [ 1744.943689][T16139] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1744.943724][T16139] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1744.943735][T16139] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1745.015918][T16139] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1745.057208][T16139] usb 1-1: USB disconnect, device number 120 [ 1745.206459][ T6067] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1745.407707][T24974] chnl_net:caif_netlink_parms(): no params data found [ 1745.586495][T25068] loop2: detected capacity change from 0 to 7 [ 1745.606456][T24561] Dev loop2: unable to read RDB block 7 [ 1745.606500][T24561] loop2: unable to read partition table [ 1745.606651][T24561] loop2: partition table beyond EOD, truncated [ 1745.620663][T25068] Dev loop2: unable to read RDB block 7 [ 1745.620707][T25068] loop2: unable to read partition table [ 1745.620923][T25068] loop2: partition table beyond EOD, truncated [ 1745.620953][T25068] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1745.723410][T24405] veth0_macvtap: entered promiscuous mode [ 1745.778997][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 1745.779015][ T37] audit: type=1326 audit(1772224000.788:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25050 comm="syz.2.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1745.780385][ T37] audit: type=1326 audit(1772224000.788:2886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25050 comm="syz.2.5644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1745.916360][T24405] veth1_macvtap: entered promiscuous mode [ 1746.152105][T24974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.152258][T24974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.152482][T24974] bridge_slave_0: entered allmulticast mode [ 1746.156886][T24974] bridge_slave_0: entered promiscuous mode [ 1746.196553][T24974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.196670][T24974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.196840][T24974] bridge_slave_1: entered allmulticast mode [ 1746.211183][T24974] bridge_slave_1: entered promiscuous mode [ 1746.362650][T25081] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5652'. [ 1746.404380][T24405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1746.404730][ T6067] bridge_slave_1: left allmulticast mode [ 1746.404754][ T6067] bridge_slave_1: left promiscuous mode [ 1746.404996][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.505064][ T6067] bridge_slave_0: left allmulticast mode [ 1746.505085][ T6067] bridge_slave_0: left promiscuous mode [ 1746.505242][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.804251][T21594] Bluetooth: hci3: command tx timeout [ 1747.765235][ T6067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.828922][ T6067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1747.874690][ T6067] bond0 (unregistering): Released all slaves [ 1747.916477][T24974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1748.144777][T24974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1748.149963][T24405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1748.231293][T24974] team0: Port device team_slave_0 added [ 1748.248549][T24974] team0: Port device team_slave_1 added [ 1748.248607][T21957] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.250718][T21957] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.252409][T21957] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.289472][T21957] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1748.591086][T24974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.591105][T24974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.591133][T24974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.671506][T24974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.671523][T24974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1748.671551][T24974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1748.910728][T25112] loop2: detected capacity change from 0 to 7 [ 1748.913054][T24561] Dev loop2: unable to read RDB block 7 [ 1748.913085][T24561] loop2: AHDI p1 p2 p3 [ 1748.913112][T24561] loop2: partition table partially beyond EOD, truncated [ 1748.913373][T24561] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1748.913392][T24561] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1748.958252][T25112] Dev loop2: unable to read RDB block 7 [ 1748.958283][T25112] loop2: AHDI p1 p2 p3 [ 1748.958310][T25112] loop2: partition table partially beyond EOD, truncated [ 1748.959101][T25112] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1748.959124][T25112] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1749.205955][T25121] netlink: 92 bytes leftover after parsing attributes in process `syz.0.5669'. [ 1750.485890][T24974] hsr_slave_0: entered promiscuous mode [ 1750.487244][T24974] hsr_slave_1: entered promiscuous mode [ 1750.488153][T24974] debugfs: 'hsr0' already exists in 'hsr' [ 1750.488176][T24974] Cannot create hsr debugfs directory [ 1750.697485][T25132] overlayfs: failed to resolve './bus': -2 [ 1751.494324][ T6067] hsr_slave_0: left promiscuous mode [ 1751.549191][ T6067] hsr_slave_1: left promiscuous mode [ 1751.550249][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1751.550274][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1751.623017][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1751.623045][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1751.939163][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1751.960485][ T5791] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1751.961988][ T5791] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1751.963062][ T5791] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1751.963743][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1752.579285][ T6067] veth1_macvtap: left promiscuous mode [ 1752.579406][ T6067] veth0_macvtap: left promiscuous mode [ 1752.579650][ T6067] veth1_vlan: left promiscuous mode [ 1752.579816][ T6067] veth0_vlan: left promiscuous mode [ 1753.144586][ T6067] team0 (unregistering): Port device team_slave_1 removed [ 1753.185280][ T6067] team0 (unregistering): Port device team_slave_0 removed [ 1753.500901][T25159] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5682'. [ 1753.831553][T25163] overlayfs: failed to resolve './bus': -2 [ 1754.561063][T21594] Bluetooth: hci1: command tx timeout [ 1754.672030][T25159] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5682'. [ 1755.019312][T25170] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5684'. [ 1756.354107][T22671] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1757.055864][T21594] Bluetooth: hci1: command tx timeout [ 1757.214097][T22671] usb 4-1: device descriptor read/64, error -71 [ 1757.495988][T22671] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1757.654257][T25210] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5693'. [ 1757.664125][T22671] usb 4-1: device descriptor read/64, error -71 [ 1757.690399][T25210] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5693'. [ 1757.794410][T22671] usb usb4-port1: attempt power cycle [ 1757.960853][T25215] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5695'. [ 1758.183189][T25144] chnl_net:caif_netlink_parms(): no params data found [ 1762.258618][T21594] Bluetooth: hci1: command tx timeout [ 1762.512903][T22671] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1762.989675][T22671] usb 4-1: device descriptor read/8, error -71 [ 1764.374773][ T5791] Bluetooth: hci1: command tx timeout [ 1766.077209][T25144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.081485][T25144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.081723][T25144] bridge_slave_0: entered allmulticast mode [ 1766.090037][T25144] bridge_slave_0: entered promiscuous mode [ 1766.099409][T25144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.099540][T25144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.099759][T25144] bridge_slave_1: entered allmulticast mode [ 1766.110692][T25144] bridge_slave_1: entered promiscuous mode [ 1766.114126][T21106] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1766.177702][T25265] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5704'. [ 1766.329923][T21106] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1766.329953][T21106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.329974][T21106] usb 1-1: Product: syz [ 1766.329989][T21106] usb 1-1: Manufacturer: syz [ 1766.330003][T21106] usb 1-1: SerialNumber: syz [ 1766.571652][T25144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1766.572431][T21106] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1766.572485][T21106] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1766.572505][T21106] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1766.621389][T25144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1766.650285][T21106] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1766.674492][T21106] usb 1-1: USB disconnect, device number 121 [ 1766.714239][ T807] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1766.844161][ T807] usb 3-1: device descriptor read/64, error -71 [ 1767.892448][T25280] loop2: detected capacity change from 0 to 7 [ 1767.904965][T25280] Dev loop2: unable to read RDB block 7 [ 1767.904986][T25280] loop2: AHDI p1 p2 p3 [ 1767.905006][T25280] loop2: partition table partially beyond EOD, truncated [ 1767.905197][T25280] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1767.905215][T25280] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1767.944245][ T807] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1768.040083][ T6067] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1768.074732][ T807] usb 3-1: device descriptor read/64, error -71 [ 1768.193304][ T807] usb usb3-port1: attempt power cycle [ 1769.311856][T25144] team0: Port device team_slave_0 added [ 1769.564911][T25144] team0: Port device team_slave_1 added [ 1770.656614][ T6067] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.937578][T25301] tipc: Enabling of bearer rejected, already enabled [ 1772.240161][ T6067] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.344215][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1772.381820][T25144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1772.381837][T25144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.381861][T25144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1772.395179][T25144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1772.395197][T25144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1772.395224][T25144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1772.503342][ T31] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1772.503372][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.503391][ T31] usb 4-1: Product: syz [ 1772.503399][ T31] usb 4-1: Manufacturer: syz [ 1772.503407][ T31] usb 4-1: SerialNumber: syz [ 1772.574199][ T807] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 1772.643542][ T6067] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.713640][ T807] usb 3-1: device descriptor read/64, error -71 [ 1772.758781][T24974] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1772.784211][ T31] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1772.784245][ T31] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1772.784256][ T31] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1772.991360][ T31] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1773.016422][ T31] usb 4-1: USB disconnect, device number 9 [ 1773.073705][T24974] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1773.134211][ T807] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1773.205643][T25144] hsr_slave_0: entered promiscuous mode [ 1773.206940][T25144] hsr_slave_1: entered promiscuous mode [ 1773.207842][T25144] debugfs: 'hsr0' already exists in 'hsr' [ 1773.207865][T25144] Cannot create hsr debugfs directory [ 1773.209364][T24974] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1773.284115][ T807] usb 3-1: device descriptor read/64, error -71 [ 1773.297565][T24974] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1773.394477][ T807] usb usb3-port1: attempt power cycle [ 1773.694152][T16139] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1773.757820][ T807] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1773.789036][ T807] usb 3-1: device descriptor read/8, error -71 [ 1773.869022][T16139] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1773.869051][T16139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1773.869071][T16139] usb 1-1: Product: syz [ 1773.869086][T16139] usb 1-1: Manufacturer: syz [ 1773.869100][T16139] usb 1-1: SerialNumber: syz [ 1774.044659][ T807] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1774.073210][ T807] usb 3-1: device descriptor read/8, error -71 [ 1774.085171][ T6067] bridge_slave_1: left allmulticast mode [ 1774.085196][ T6067] bridge_slave_1: left promiscuous mode [ 1774.085386][ T6067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.155496][ T6067] bridge_slave_0: left allmulticast mode [ 1774.155525][ T6067] bridge_slave_0: left promiscuous mode [ 1774.155714][ T6067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.174694][ T807] usb usb3-port1: unable to enumerate USB device [ 1774.193334][T16139] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1774.193391][T16139] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1774.193411][T16139] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1774.245674][T16139] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1774.293146][T16139] usb 1-1: USB disconnect, device number 122 [ 1778.165931][ T6067] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1778.204165][T21106] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1778.224688][ T6067] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1778.253528][ T6067] bond0 (unregistering): Released all slaves [ 1778.365084][T21106] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1778.365103][T21106] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.365115][T21106] usb 3-1: Product: syz [ 1778.365123][T21106] usb 3-1: Manufacturer: syz [ 1778.365130][T21106] usb 3-1: SerialNumber: syz [ 1778.501955][T21106] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1778.501990][T21106] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1778.502002][T21106] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1778.567301][T21106] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1778.574658][T21106] usb 3-1: USB disconnect, device number 118 [ 1780.096375][ T6067] hsr_slave_0: left promiscuous mode [ 1780.134228][ T6067] hsr_slave_1: left promiscuous mode [ 1780.135263][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1780.135289][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1780.186754][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1780.186784][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1780.275562][ T6067] veth1_macvtap: left promiscuous mode [ 1780.275627][ T6067] veth0_macvtap: left promiscuous mode [ 1780.275773][ T6067] veth1_vlan: left promiscuous mode [ 1780.275866][ T6067] veth0_vlan: left promiscuous mode [ 1780.354318][ T5800] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1780.494205][ T5800] usb 3-1: device descriptor read/64, error -71 [ 1780.763217][ T5800] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1780.914145][ T5800] usb 3-1: device descriptor read/64, error -71 [ 1781.024587][ T5800] usb usb3-port1: attempt power cycle [ 1781.324739][ T6067] team0 (unregistering): Port device team_slave_1 removed [ 1781.364168][ T5800] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1781.365364][ T6067] team0 (unregistering): Port device team_slave_0 removed [ 1781.389244][ T5800] usb 3-1: device descriptor read/8, error -71 [ 1781.634208][ T5800] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1781.655323][ T5800] usb 3-1: device descriptor read/8, error -71 [ 1781.760863][T25407] loop2: detected capacity change from 0 to 7 [ 1781.764670][T25407] Dev loop2: unable to read RDB block 7 [ 1781.764719][T25407] loop2: unable to read partition table [ 1781.764918][T25407] loop2: partition table beyond EOD, truncated [ 1781.766198][ T5800] usb usb3-port1: unable to enumerate USB device [ 1781.784385][T25407] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1781.928391][T25411] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5746'. [ 1782.012892][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5747'. [ 1782.012907][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5747'. [ 1782.113793][T24974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1782.139531][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5747'. [ 1782.139555][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5747'. [ 1782.156056][T24974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1782.186032][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1782.186185][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1782.442462][T21958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1782.442606][T21958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1784.705942][T24974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1784.708963][T25144] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1784.769317][T25144] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1784.854741][T25144] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1784.924262][T25144] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1785.341732][ T37] audit: type=1326 audit(1772224040.348:2887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25436 comm="syz.0.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1785.342868][ T37] audit: type=1326 audit(1772224040.348:2888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25436 comm="syz.0.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1785.343410][ T37] audit: type=1326 audit(1772224040.348:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25436 comm="syz.0.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1785.344043][ T37] audit: type=1326 audit(1772224040.348:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25436 comm="syz.0.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1785.375334][ T37] audit: type=1326 audit(1772224040.388:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25436 comm="syz.0.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1785.381715][ T37] audit: type=1326 audit(1772224040.388:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25436 comm="syz.0.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1785.381972][ T37] audit: type=1326 audit(1772224040.388:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25436 comm="syz.0.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1785.382364][ T37] audit: type=1326 audit(1772224040.388:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25436 comm="syz.0.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1785.398861][ T37] audit: type=1326 audit(1772224040.408:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25436 comm="syz.0.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1785.418198][ T37] audit: type=1326 audit(1772224040.428:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25436 comm="syz.0.5750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1785.833363][T25144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1785.900690][T25144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1785.956289][ T6067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.956395][ T6067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1786.007341][ T6067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1786.008998][ T6067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1786.485752][T25481] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5756'. [ 1786.555837][T24974] veth0_vlan: entered promiscuous mode [ 1786.587230][T24974] veth1_vlan: entered promiscuous mode [ 1786.777917][T25488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5757'. [ 1786.777944][T25488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5757'. [ 1786.792282][T24974] veth0_macvtap: entered promiscuous mode [ 1786.807621][T24974] veth1_macvtap: entered promiscuous mode [ 1786.957053][T24974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1787.005542][T24974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1787.072330][T25488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5757'. [ 1787.072351][T25488] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5757'. [ 1787.072881][T21170] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.074650][T21170] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.074695][T21170] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.074731][T21170] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.759100][T25503] tipc: Enabling of bearer rejected, already enabled [ 1788.289715][ T5800] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1788.578986][ T5800] usb 4-1: device descriptor read/64, error -71 [ 1788.713610][ T6074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.713632][ T6074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.788475][T25144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1788.814092][ T5800] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1788.834119][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1788.834141][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1788.945025][ T5800] usb 4-1: device descriptor read/64, error -71 [ 1789.015767][T25516] loop2: detected capacity change from 0 to 7 [ 1789.048881][T25516] Dev loop2: unable to read RDB block 7 [ 1789.048950][T25516] loop2: unable to read partition table [ 1789.049163][T25516] loop2: partition table beyond EOD, truncated [ 1789.049204][T25516] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1789.054986][ T5800] usb usb4-port1: attempt power cycle [ 1790.274120][ T5800] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1790.310937][T25533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'. [ 1790.474989][T25533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'. [ 1790.485547][ T5800] usb 4-1: device not accepting address 12, error -71 [ 1790.616476][T25144] veth0_vlan: entered promiscuous mode [ 1790.642203][T25144] veth1_vlan: entered promiscuous mode [ 1790.692969][T25144] veth0_macvtap: entered promiscuous mode [ 1790.705349][T25144] veth1_macvtap: entered promiscuous mode [ 1790.736992][T25144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1790.810904][T25144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1791.038729][T25543] tipc: Enabling of bearer rejected, already enabled [ 1791.605083][T21170] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.750305][T21170] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.753837][T21170] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.772572][T21170] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.283032][ T807] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1792.506323][ T807] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.506352][ T807] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1792.506398][ T807] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1792.515214][ T807] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1792.515244][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.515263][ T807] usb 3-1: Product: syz [ 1792.515277][ T807] usb 3-1: Manufacturer: syz [ 1792.515292][ T807] usb 3-1: SerialNumber: syz [ 1792.933738][ T807] uvcvideo 3-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 1792.933773][ T807] uvcvideo 3-1:220.0: No valid video chain found. [ 1792.990387][ T807] usb 3-1: USB disconnect, device number 123 [ 1793.005666][T25569] loop2: detected capacity change from 0 to 7 [ 1793.009327][T25569] Dev loop2: unable to read RDB block 7 [ 1793.009357][T25569] loop2: unable to read partition table [ 1793.009477][T25569] loop2: partition table beyond EOD, truncated [ 1793.009502][T25569] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1793.153882][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.153905][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1794.424934][T21958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1794.424957][T21958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1795.064077][T16139] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1795.236904][T16139] usb 9-1: Using ep0 maxpacket: 8 [ 1795.238828][T16139] usb 9-1: config 0 has an invalid interface number: 33 but max is 1 [ 1795.238853][T16139] usb 9-1: config 0 has no interface number 1 [ 1795.238907][T16139] usb 9-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1795.238946][T16139] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 1795.296902][T16139] usb 9-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 1795.296933][T16139] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.296953][T16139] usb 9-1: Product: syz [ 1795.296967][T16139] usb 9-1: Manufacturer: syz [ 1795.296982][T16139] usb 9-1: SerialNumber: syz [ 1795.336575][T25596] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5791'. [ 1795.392787][T16139] usb 9-1: config 0 descriptor?? [ 1795.412164][T16139] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1795.618848][T25581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.619432][T25581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.678995][T25581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.693881][T25581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.704772][T25581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.705291][T25581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.731935][T25581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.732492][T25581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.768963][T25581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1795.769595][T25581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1795.844585][ T2366] pvrusb2: Invalid read control endpoint [ 1795.845514][ T2366] usb 9-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1795.845537][ T2366] usb 9-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1796.825906][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.825976][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.836017][T16139] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 1796.842371][T16139] usb 9-1: USB disconnect, device number 2 [ 1797.414364][T25630] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5805'. [ 1800.542360][T25666] overlayfs: failed to resolve './bus': -2 [ 1801.215939][T25670] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5820'. [ 1801.542035][T25681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5825'. [ 1801.875577][T25681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5825'. [ 1801.934077][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1802.174134][ T5800] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1802.206467][T25701] netlink: 56 bytes leftover after parsing attributes in process `syz.8.5834'. [ 1802.335666][ T31] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1802.335697][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.335716][ T31] usb 8-1: Product: syz [ 1802.335730][ T31] usb 8-1: Manufacturer: syz [ 1802.335744][ T31] usb 8-1: SerialNumber: syz [ 1802.339715][ T5800] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1802.339743][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.339763][ T5800] usb 4-1: Product: syz [ 1802.339777][ T5800] usb 4-1: Manufacturer: syz [ 1802.339792][ T5800] usb 4-1: SerialNumber: syz [ 1802.526536][T25703] overlayfs: failed to resolve './bus': -2 [ 1803.083347][ T31] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1803.083403][ T31] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1803.083423][ T31] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1803.281802][ T31] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1803.331907][ T31] usb 8-1: USB disconnect, device number 2 [ 1803.686237][ T5800] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1803.686289][ T5800] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1803.686309][ T5800] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1803.997817][ T5800] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1804.030374][ T5800] usb 4-1: USB disconnect, device number 14 [ 1804.434216][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1804.434240][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1804.513534][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1804.513560][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1805.493771][T25735] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5845'. [ 1810.470322][T25765] tipc: Enabling of bearer rejected, already enabled [ 1810.558119][T25764] tipc: Started in network mode [ 1810.558149][T25764] tipc: Node identity 7f000001, cluster identity 4711 [ 1810.558926][T25764] tipc: Enabled bearer , priority 10 [ 1812.806441][ T31] tipc: Node number set to 2130706433 [ 1813.053658][T25778] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5859'. [ 1813.852076][T25805] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5872'. [ 1815.969313][T25827] tipc: Enabling of bearer rejected, already enabled [ 1816.813016][T25836] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5884'. [ 1817.438215][T25862] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5895'. [ 1817.910830][T25868] tipc: Enabling of bearer rejected, already enabled [ 1819.013496][T25883] tipc: Enabling of bearer rejected, already enabled [ 1819.273137][T25893] netlink: 172 bytes leftover after parsing attributes in process `syz.0.5907'. [ 1825.642464][T25974] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5935'. [ 1825.782582][T25979] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5936'. [ 1826.194272][T22432] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1826.349015][T22432] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1826.349047][T22432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.349068][T22432] usb 1-1: Product: syz [ 1826.349083][T22432] usb 1-1: Manufacturer: syz [ 1826.349097][T22432] usb 1-1: SerialNumber: syz [ 1826.692545][T25997] tipc: Enabling of bearer rejected, already enabled [ 1827.386991][T22432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1827.387026][T22432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1827.387038][T22432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1828.229922][T26004] tipc: Enabling of bearer rejected, already enabled [ 1828.718889][T22432] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1828.754895][T22432] usb 1-1: USB disconnect, device number 123 [ 1828.836026][T26007] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5946'. [ 1829.118973][T26018] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5949'. [ 1829.331567][T26032] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5955'. [ 1831.385004][T26055] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5964'. [ 1831.979947][T26089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5976'. [ 1832.448815][T26100] tipc: Enabling of bearer rejected, already enabled [ 1833.219991][T26103] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5982'. [ 1833.471862][T26099] block nbd3: shutting down sockets [ 1837.864327][ T5800] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1839.597099][ T5800] usb 4-1: Using ep0 maxpacket: 32 [ 1839.603168][ T5800] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1839.603196][ T5800] usb 4-1: config 0 has no interface number 0 [ 1839.603240][ T5800] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1839.690281][ T5800] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1839.690313][ T5800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.690334][ T5800] usb 4-1: Product: syz [ 1839.690347][ T5800] usb 4-1: Manufacturer: syz [ 1839.690360][ T5800] usb 4-1: SerialNumber: syz [ 1839.771662][ T5800] usb 4-1: config 0 descriptor?? [ 1839.776745][T26192] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1840.012780][T26192] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1840.218229][ T5800] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1840.218494][ T5800] asix 4-1:0.188: probe with driver asix failed with error -61 [ 1840.274200][T26220] netlink: 204 bytes leftover after parsing attributes in process `syz.8.6034'. [ 1840.392276][T26225] netlink: 11522 bytes leftover after parsing attributes in process `syz.2.6037'. [ 1840.623340][T26237] netlink: 196 bytes leftover after parsing attributes in process `syz.8.6041'. [ 1840.867925][T26247] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6045'. [ 1841.120381][T26254] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6049'. [ 1841.383624][T26272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1841.472678][T26275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1841.500914][ T36] usb 4-1: USB disconnect, device number 15 [ 1841.596566][T10744] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1841.777150][T10744] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1841.777177][T10744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.777193][T10744] usb 1-1: Product: syz [ 1841.777206][T10744] usb 1-1: Manufacturer: syz [ 1841.777218][T10744] usb 1-1: SerialNumber: syz [ 1842.019672][T10744] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1842.019725][T10744] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1842.019746][T10744] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1842.088284][T10744] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1842.128294][T10744] usb 1-1: USB disconnect, device number 124 [ 1842.774485][T26322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6079'. [ 1842.774507][T26322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6079'. [ 1842.885648][T26322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6079'. [ 1842.885672][T26322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6079'. [ 1843.021396][T26335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6083'. [ 1843.284538][T26333] Illegal XDP return value 4294967274 on prog (id 246) dev syz_tun, expect packet loss! [ 1843.687565][ T5791] block nbd3: Receive control failed (result -32) [ 1844.113087][T26332] block nbd3: shutting down sockets [ 1844.263685][ T5862] kworker/1:4 (5862) used greatest stack depth: 15016 bytes left [ 1845.768337][T26368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1845.891825][T26371] __nla_validate_parse: 3 callbacks suppressed [ 1845.891848][T26371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6095'. [ 1845.891865][T26371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6095'. [ 1846.005127][T26371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6095'. [ 1846.005148][T26371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6095'. [ 1846.907848][ T5791] block nbd2: Receive control failed (result -32) [ 1846.927381][T26385] block nbd2: shutting down sockets [ 1847.944132][T21106] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1848.104183][T21106] usb 1-1: Using ep0 maxpacket: 8 [ 1849.106049][T21106] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1849.106077][T21106] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1849.106098][T21106] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1849.106119][T21106] usb 1-1: config 250 has no interface number 0 [ 1849.106164][T21106] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1849.106190][T21106] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1849.106215][T21106] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1849.106237][T21106] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1849.106261][T21106] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1849.106288][T21106] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1849.109347][T26444] netlink: 'syz.3.6122': attribute type 4 has an invalid length. [ 1849.112038][T21106] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1849.112064][T21106] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1849.112085][T21106] usb 1-1: Product: syz [ 1849.112099][T21106] usb 1-1: SerialNumber: syz [ 1849.225846][T21106] hub 1-1:250.228: bad descriptor, ignoring hub [ 1849.225884][T21106] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1849.481714][T21106] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 125 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1849.511222][T26451] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6124'. [ 1849.726229][T26454] loop2: detected capacity change from 0 to 7 [ 1849.786444][T21106] usb 1-1: reset high-speed USB device number 125 using dummy_hcd [ 1849.804387][T26454] Dev loop2: unable to read RDB block 7 [ 1849.804430][T26454] loop2: unable to read partition table [ 1849.804632][T26454] loop2: partition table beyond EOD, truncated [ 1849.804668][T26454] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1849.928232][ T5791] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1849.928267][ T5791] CPU: 0 UID: 0 PID: 5791 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1849.928283][ T5791] Tainted: [L]=SOFTLOCKUP [ 1849.928288][ T5791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1849.928295][ T5791] Workqueue: hci3 hci_rx_work [ 1849.928421][ T5791] Call Trace: [ 1849.928428][ T5791] [ 1849.928435][ T5791] dump_stack_lvl+0xe8/0x150 [ 1849.928483][ T5791] sysfs_create_dir_ns+0x271/0x2a0 [ 1849.928539][ T5791] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1849.928599][ T5791] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1849.928612][ T5791] ? rt_spin_unlock+0x160/0x200 [ 1849.928626][ T5791] kobject_add_internal+0x631/0xd10 [ 1849.928700][ T5791] kobject_add+0x163/0x240 [ 1849.928718][ T5791] ? __pfx_kobject_add+0x10/0x10 [ 1849.928738][ T5791] ? get_device_parent+0x370/0x3a0 [ 1849.928809][ T5791] device_add+0x408/0xb80 [ 1849.928826][ T5791] hci_conn_add_sysfs+0xd5/0x210 [ 1849.928878][ T5791] le_conn_complete_evt+0xf1d/0x1430 [ 1849.928939][ T5791] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1849.928955][ T5791] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1849.928970][ T5791] ? lockdep_hardirqs_on+0x7a/0x110 [ 1849.929004][ T5791] ? skb_pull_data+0xfb/0x200 [ 1849.929076][ T5791] hci_le_enh_conn_complete_evt+0x189/0x490 [ 1849.929094][ T5791] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 1849.929112][ T5791] hci_event_packet+0x7af/0x12c0 [ 1849.929151][ T5791] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1849.929167][ T5791] ? __pfx_hci_event_packet+0x10/0x10 [ 1849.929179][ T5791] ? rt_spin_unlock+0x14f/0x200 [ 1849.929196][ T5791] ? hci_send_to_monitor+0xe2/0x590 [ 1849.929214][ T5791] hci_rx_work+0x3ee/0x1030 [ 1849.929232][ T5791] ? process_scheduled_works+0xa25/0x1830 [ 1849.929260][ T5791] process_scheduled_works+0xb02/0x1830 [ 1849.929289][ T5791] ? __pfx_process_scheduled_works+0x10/0x10 [ 1849.929307][ T5791] ? assign_work+0x3d5/0x5e0 [ 1849.929324][ T5791] worker_thread+0xa50/0xfc0 [ 1849.929359][ T5791] kthread+0x388/0x470 [ 1849.929377][ T5791] ? __pfx_worker_thread+0x10/0x10 [ 1849.929401][ T5791] ? __pfx_kthread+0x10/0x10 [ 1849.929424][ T5791] ret_from_fork+0x51e/0xb90 [ 1849.929468][ T5791] ? __pfx_ret_from_fork+0x10/0x10 [ 1849.929491][ T5791] ? __switch_to+0xc7d/0x1450 [ 1849.929529][ T5791] ? __pfx_kthread+0x10/0x10 [ 1849.929542][ T5791] ret_from_fork_asm+0x1a/0x30 [ 1849.929563][ T5791] [ 1849.929719][ T5791] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1849.929744][ T5791] Bluetooth: hci3: failed to register connection device [ 1850.717672][T21106] usb 1-1: USB disconnect, device number 125 [ 1850.734265][T21106] usblp0: removed [ 1850.784475][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 1850.784493][ T37] audit: type=1326 audit(1772224105.798:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26437 comm="syz.2.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1850.784845][ T37] audit: type=1326 audit(1772224105.798:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26437 comm="syz.2.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1850.785782][ T37] audit: type=1326 audit(1772224105.798:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26437 comm="syz.2.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1850.786351][ T37] audit: type=1326 audit(1772224105.798:2906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26437 comm="syz.2.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1850.788037][ T37] audit: type=1326 audit(1772224105.798:2907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26437 comm="syz.2.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1850.788818][ T37] audit: type=1326 audit(1772224105.798:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26437 comm="syz.2.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1850.789291][ T37] audit: type=1326 audit(1772224105.798:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26437 comm="syz.2.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1850.790237][ T37] audit: type=1326 audit(1772224105.798:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26437 comm="syz.2.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1850.791573][ T37] audit: type=1326 audit(1772224105.798:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26437 comm="syz.2.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1851.061453][ T37] audit: type=1326 audit(1772224106.078:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26437 comm="syz.2.6120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1853.281606][ T36] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1853.435527][ T36] usb 4-1: Using ep0 maxpacket: 32 [ 1853.439827][ T36] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 1853.439854][ T36] usb 4-1: config 0 has no interface number 0 [ 1853.439900][ T36] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1853.477085][ T36] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1853.477108][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.477119][ T36] usb 4-1: Product: syz [ 1853.477127][ T36] usb 4-1: Manufacturer: syz [ 1853.477135][ T36] usb 4-1: SerialNumber: syz [ 1853.525003][ T36] usb 4-1: config 0 descriptor?? [ 1853.534617][T26492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1853.761247][T26492] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1853.965343][ T36] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1853.965622][ T36] asix 4-1:0.188: probe with driver asix failed with error -61 [ 1854.215955][T26517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6151'. [ 1855.478770][T26548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.497180][T26543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.572226][T26543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.577615][T26543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.646393][T26554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.667897][T26555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.713150][T26556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.738581][T26554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1856.047237][ T5800] usb 4-1: USB disconnect, device number 16 [ 1857.514372][T26590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1857.569782][T26590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1857.571125][T26592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6179'. [ 1857.631172][T26593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1857.637808][T26590] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1857.854091][T22432] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1858.009343][T22432] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1858.009368][T22432] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1858.009379][T22432] usb 8-1: Product: syz [ 1858.009386][T22432] usb 8-1: Manufacturer: syz [ 1858.009395][T22432] usb 8-1: SerialNumber: syz [ 1858.281316][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.281384][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.282364][ T2366] pvrusb2: request_firmware fatal error with code=-110 [ 1858.282379][ T2366] pvrusb2: Failure uploading firmware1 [ 1858.282387][ T2366] pvrusb2: Device initialization was not successful. [ 1858.282396][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1858.282405][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1858.282443][ T2366] pvrusb2: Failed to submit write-control URB status=-19 [ 1858.283193][ T2366] usb 9-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 1858.283214][ T2366] usb 9-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 1858.287893][T22432] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1858.287948][T22432] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1858.287967][T22432] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1858.304040][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1858.304058][ T37] audit: type=1326 audit(1772224113.308:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26578 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1858.304102][ T37] audit: type=1326 audit(1772224113.308:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26578 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1858.507673][T16139] pvrusb2: Device being rendered inoperable [ 1859.103211][T22432] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1859.193357][ T37] audit: type=1326 audit(1772224114.198:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26578 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1859.288558][T22432] usb 8-1: USB disconnect, device number 3 [ 1859.425547][ T37] audit: type=1326 audit(1772224114.438:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26578 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1859.425596][ T37] audit: type=1326 audit(1772224114.438:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26578 comm="syz.8.6173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1860.998837][T26627] tipc: Enabling of bearer rejected, already enabled [ 1861.601304][T26644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1861.764281][T26648] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1861.820423][T26645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1861.830831][T26645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1861.844254][ T1596] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1861.999879][ T1596] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1861.999909][ T1596] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.999929][ T1596] usb 4-1: Product: syz [ 1861.999943][ T1596] usb 4-1: Manufacturer: syz [ 1861.999957][ T1596] usb 4-1: SerialNumber: syz [ 1862.252282][ T1596] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1862.252341][ T1596] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1862.252361][ T1596] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1862.285987][ T37] audit: type=1326 audit(1772224117.298:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26633 comm="syz.0.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1862.309277][ T1596] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1862.323041][ T37] audit: type=1326 audit(1772224117.308:2920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26633 comm="syz.0.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1862.352991][ T1596] usb 4-1: USB disconnect, device number 17 [ 1862.353830][ T37] audit: type=1326 audit(1772224117.358:2921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26633 comm="syz.0.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1862.353877][ T37] audit: type=1326 audit(1772224117.358:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26633 comm="syz.0.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1862.412110][ T37] audit: type=1326 audit(1772224117.418:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26633 comm="syz.0.6191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1864.579668][T26676] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6208'. [ 1864.656527][T26677] netlink: 'syz.8.6207': attribute type 4 has an invalid length. [ 1864.894949][T24408] Bluetooth: hci3: command 0x2016 tx timeout [ 1865.235505][T26679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6209'. [ 1865.243273][T26679] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6209'. [ 1866.156345][T21106] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1866.157404][T26702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1866.306043][T26702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1866.308322][T21106] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1866.308351][T21106] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1866.308366][T21106] usb 8-1: Product: syz [ 1866.308374][T21106] usb 8-1: Manufacturer: syz [ 1866.308383][T21106] usb 8-1: SerialNumber: syz [ 1866.377199][T26702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1866.392143][T26702] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1866.559023][ T5800] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1866.559076][ T5800] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1866.568426][T21106] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1866.568483][T21106] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1866.568503][T21106] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1866.698770][ T6067] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1866.796052][T21106] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1866.805694][ T1166] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1867.118418][T24408] Bluetooth: hci3: command 0x2016 tx timeout [ 1868.797261][ T12] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1869.236626][T21106] usb 8-1: USB disconnect, device number 4 [ 1869.317500][T25607] udevd[25607]: setting owner of /dev/bus/usb/008/004 to uid=0, gid=0 failed: No such file or directory [ 1869.989783][T26735] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6228'. [ 1869.989818][T26735] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6228'. [ 1871.450643][T24408] Bluetooth: hci3: command 0x2016 tx timeout [ 1873.145990][T26756] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6236'. [ 1873.146244][T26756] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6236'. [ 1873.630978][T26765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1873.631226][T26765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6238'. [ 1875.409776][T26793] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1876.056270][T24408] Bluetooth: hci1: command 0x0406 tx timeout [ 1876.178553][T26798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6248'. [ 1876.178591][T26798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6248'. [ 1877.443656][T26815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6255'. [ 1877.447268][T26815] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6255'. [ 1877.657413][T26818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1877.692785][T26818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1877.752724][T26818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1878.284603][T26837] netlink: 196 bytes leftover after parsing attributes in process `syz.8.6262'. [ 1879.244712][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6271'. [ 1879.244735][T26861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6271'. [ 1879.244967][T26861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6271'. [ 1879.244988][T26861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6271'. [ 1879.394141][T26867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6274'. [ 1879.444797][T22671] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1880.584864][T26873] netlink: 'syz.2.6276': attribute type 4 has an invalid length. [ 1880.594729][T22671] usb 8-1: Using ep0 maxpacket: 16 [ 1880.610540][T22671] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1880.616366][T22671] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1880.616385][T22671] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.616395][T22671] usb 8-1: Product: syz [ 1880.616403][T22671] usb 8-1: Manufacturer: syz [ 1880.616411][T22671] usb 8-1: SerialNumber: syz [ 1880.659875][T22671] usb 8-1: config 0 descriptor?? [ 1881.234287][T22671] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1881.234320][T22671] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 1881.663512][T22671] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 1882.254223][T21106] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 1882.407466][T21106] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.407506][T21106] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1882.407531][T21106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1882.407555][T21106] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1882.407577][T21106] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1882.427847][T21106] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1882.427878][T21106] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1882.427896][T21106] usb 1-1: Product: syz [ 1882.427910][T21106] usb 1-1: Manufacturer: syz [ 1882.427924][T21106] usb 1-1: SerialNumber: syz [ 1882.446190][T21106] usb 1-1: config 0 descriptor?? [ 1882.521727][T22671] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1882.521758][T22671] em28xx 8-1:0.0: board has no eeprom [ 1882.594046][T22671] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1882.594074][T22671] em28xx 8-1:0.0: dvb set to bulk mode. [ 1882.594710][ T1596] em28xx 8-1:0.0: Binding DVB extension [ 1882.655016][T22671] usb 8-1: USB disconnect, device number 5 [ 1882.671708][T22671] em28xx 8-1:0.0: Disconnecting em28xx [ 1882.705878][T21106] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1882.705905][T21106] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1882.949085][T21106] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1882.949112][T21106] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1882.949132][T21106] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1882.953248][T26898] tipc: Enabling of bearer rejected, already enabled [ 1883.257591][T21106] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 1883.463532][ T1596] em28xx 8-1:0.0: Registering input extension [ 1883.472099][T22671] em28xx 8-1:0.0: Closing input extension [ 1883.590121][T22671] em28xx 8-1:0.0: Freeing device [ 1883.667066][T21106] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1883.667369][T21106] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 1883.710102][T21106] usb 1-1: USB disconnect, device number 126 [ 1884.947093][T26922] __nla_validate_parse: 2 callbacks suppressed [ 1884.947112][T26922] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6292'. [ 1884.975213][T26925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1885.379836][T26932] CUSE: info not properly terminated [ 1885.449930][T26925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1885.452701][T26925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1885.532448][ T807] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1885.532465][ T807] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1885.634570][T21958] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1885.724166][ T807] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1888.082074][ T6067] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1888.205815][ T807] usb 8-1: device descriptor read/all, error -71 [ 1888.227943][T21958] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1888.564460][T26961] netlink: 'syz.8.6307': attribute type 23 has an invalid length. [ 1888.564480][T26961] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6307'. [ 1889.212128][T26964] CUSE: info not properly terminated [ 1890.177113][T26975] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1892.256260][T26989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6313'. [ 1893.207077][T22671] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1893.669070][T22671] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1893.669101][T22671] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.669120][T22671] usb 8-1: Product: syz [ 1893.669134][T22671] usb 8-1: Manufacturer: syz [ 1893.669150][T22671] usb 8-1: SerialNumber: syz [ 1893.865036][T27003] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1894.614106][T22671] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1894.614165][T22671] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1894.614186][T22671] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1894.701029][T22671] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1894.725086][T22671] usb 8-1: USB disconnect, device number 8 [ 1895.268108][T27018] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6322'. [ 1895.696004][T27019] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1896.654313][T27030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1896.689283][T27030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1896.691097][T27030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1898.954097][ T5800] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1899.027069][T27023] Process accounting resumed [ 1899.144231][ T5800] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1899.144262][ T5800] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.144283][ T5800] usb 8-1: Product: syz [ 1899.144297][ T5800] usb 8-1: Manufacturer: syz [ 1899.144311][ T5800] usb 8-1: SerialNumber: syz [ 1899.484645][ T5800] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1899.484703][ T5800] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1899.484723][ T5800] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1899.638975][T27061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6337'. [ 1900.487217][ T5800] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1900.517041][ T5800] usb 8-1: USB disconnect, device number 9 [ 1902.040722][T27085] tipc: Enabling of bearer rejected, already enabled [ 1904.131316][T27103] loop2: detected capacity change from 0 to 7 [ 1904.170476][T27103] Dev loop2: unable to read RDB block 7 [ 1904.170520][T27103] loop2: unable to read partition table [ 1904.170722][T27103] loop2: partition table beyond EOD, truncated [ 1904.170739][T27103] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1904.314128][T22432] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1904.702201][T22432] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1904.702220][T22432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1904.702301][T22432] usb 1-1: Product: syz [ 1904.702311][T22432] usb 1-1: Manufacturer: syz [ 1904.702319][T22432] usb 1-1: SerialNumber: syz [ 1905.959512][T22432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1905.959571][T22432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1905.959591][T22432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1906.185868][T22432] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1906.230041][T22432] usb 1-1: USB disconnect, device number 127 [ 1907.929757][T27125] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1910.453131][T27135] loop2: detected capacity change from 0 to 7 [ 1910.467582][T27135] Dev loop2: unable to read RDB block 7 [ 1910.467629][T27135] loop2: unable to read partition table [ 1910.467873][T27135] loop2: partition table beyond EOD, truncated [ 1910.467930][T27135] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1911.177518][T27141] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6369'. [ 1911.429297][T27141] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6369'. [ 1913.288914][ T36] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1913.568699][ T36] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1913.568729][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1913.568748][ T36] usb 4-1: Product: syz [ 1913.568756][ T36] usb 4-1: Manufacturer: syz [ 1913.568763][ T36] usb 4-1: SerialNumber: syz [ 1913.719753][T27166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6376'. [ 1915.316623][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1915.316678][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1915.316698][ T36] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1915.387564][ T36] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1915.443575][ T36] usb 4-1: USB disconnect, device number 18 [ 1916.456334][T27174] CUSE: info not properly terminated [ 1916.524454][T27177] CUSE: info not properly terminated [ 1918.681695][T27194] CUSE: info not properly terminated [ 1918.897238][T27218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1918.897274][T27218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1919.199180][T27223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1919.199746][T27223] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6388'. [ 1919.814157][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.814220][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.917036][ T2366] pvrusb2: request_firmware fatal error with code=-110 [ 1919.917056][ T2366] pvrusb2: Failure uploading firmware1 [ 1919.917064][ T2366] pvrusb2: Device initialization was not successful. [ 1919.917073][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1919.917083][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1919.917982][T16139] pvrusb2: Device being rendered inoperable [ 1919.995051][T27217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6387'. [ 1919.995223][T27217] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6387'. [ 1920.118909][T27224] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6390'. [ 1920.119082][T27224] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6390'. [ 1920.124287][T22432] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1920.216492][T27229] netlink: 'syz.2.6391': attribute type 23 has an invalid length. [ 1920.216516][T27229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'. [ 1920.295979][T22432] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1920.296010][T22432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1920.296030][T22432] usb 1-1: Product: syz [ 1920.296044][T22432] usb 1-1: Manufacturer: syz [ 1920.296058][T22432] usb 1-1: SerialNumber: syz [ 1920.333628][T27229] netlink: 'syz.2.6391': attribute type 23 has an invalid length. [ 1920.333650][T27229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6391'. [ 1920.650988][T22432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1920.651096][T22432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1920.651130][T22432] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1920.745886][T22432] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1920.886004][T22432] usb 1-1: USB disconnect, device number 2 [ 1921.042537][T27242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1921.133386][T27250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1923.968281][T27270] __nla_validate_parse: 3 callbacks suppressed [ 1923.968324][T27270] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6403'. [ 1924.886128][T27273] netlink: 16146 bytes leftover after parsing attributes in process `syz.8.6405'. [ 1925.152093][T27277] netlink: 'syz.3.6406': attribute type 23 has an invalid length. [ 1925.152117][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6406'. [ 1925.539517][T27283] tipc: Started in network mode [ 1925.539722][T27283] tipc: Node identity 7f000001, cluster identity 4711 [ 1925.581522][T27283] tipc: Enabled bearer , priority 10 [ 1926.235069][T27277] netlink: 'syz.3.6406': attribute type 23 has an invalid length. [ 1926.235091][T27277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6406'. [ 1926.664106][T22671] tipc: Node number set to 2130706433 [ 1927.504184][T22432] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1927.524231][T27303] input: syz0 as /devices/virtual/input/input29 [ 1927.660335][T22432] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1927.660367][T22432] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.660388][T22432] usb 8-1: Product: syz [ 1927.660402][T22432] usb 8-1: Manufacturer: syz [ 1927.660416][T22432] usb 8-1: SerialNumber: syz [ 1927.949407][T22432] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1927.949449][T22432] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1927.949460][T22432] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1927.998827][T22432] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 1928.041427][T22432] usb 8-1: USB disconnect, device number 10 [ 1928.459790][T27315] netlink: 'syz.3.6420': attribute type 23 has an invalid length. [ 1928.459826][T27315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6420'. [ 1928.814772][T27315] netlink: 'syz.3.6420': attribute type 23 has an invalid length. [ 1928.814795][T27315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6420'. [ 1934.156628][T27362] CUSE: info not properly terminated [ 1934.504206][T16139] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1934.684613][T16139] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1934.684632][T16139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.684643][T16139] usb 1-1: Product: syz [ 1934.684650][T16139] usb 1-1: Manufacturer: syz [ 1934.684658][T16139] usb 1-1: SerialNumber: syz [ 1934.938207][T27369] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6438'. [ 1934.944974][T27369] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6438'. [ 1935.319647][T16139] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1935.319705][T16139] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1935.319724][T16139] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1935.385794][T16139] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1935.411615][T16139] usb 1-1: USB disconnect, device number 3 [ 1935.711241][T27378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6442'. [ 1935.711504][T27378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6442'. [ 1935.762953][T27379] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6441'. [ 1935.762981][T27379] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6441'. [ 1935.762996][T27379] netlink: 40 bytes leftover after parsing attributes in process `syz.8.6441'. [ 1936.602374][T27381] CUSE: info not properly terminated [ 1938.394130][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1938.544097][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 1938.546448][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1938.582359][ T31] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1938.582377][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1938.582387][ T31] usb 4-1: Product: syz [ 1938.582395][ T31] usb 4-1: Manufacturer: syz [ 1938.582402][ T31] usb 4-1: SerialNumber: syz [ 1938.635004][ T31] usb 4-1: config 0 descriptor?? [ 1938.660366][ T31] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1938.660390][ T31] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 1938.850602][T27397] tipc: Enabled bearer , priority 0 [ 1939.562940][ T31] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1939.611352][T27396] tipc: Disabling bearer [ 1939.979043][ T31] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1939.979078][ T31] em28xx 4-1:0.0: board has no eeprom [ 1940.084880][ T31] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1940.084910][ T31] em28xx 4-1:0.0: dvb set to bulk mode. [ 1940.086308][T27157] em28xx 4-1:0.0: Binding DVB extension [ 1940.122312][ T31] usb 4-1: USB disconnect, device number 19 [ 1940.139437][ T31] em28xx 4-1:0.0: Disconnecting em28xx [ 1940.238887][T27157] em28xx 4-1:0.0: Registering input extension [ 1940.239117][ T31] em28xx 4-1:0.0: Closing input extension [ 1940.341743][ T31] em28xx 4-1:0.0: Freeing device [ 1940.768951][T27416] tipc: Enabling of bearer rejected, already enabled [ 1942.008437][T27425] CUSE: info not properly terminated [ 1944.323919][T27441] tipc: Enabling of bearer rejected, already enabled [ 1945.287264][T27446] tipc: Enabled bearer , priority 0 [ 1945.468650][T27440] tipc: Disabling bearer [ 1945.997042][ T31] Process accounting resumed [ 1945.998347][T27455] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6467'. [ 1945.998516][T27455] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6467'. [ 1948.289899][T27485] CUSE: info not properly terminated [ 1948.434163][ T37] audit: type=1326 audit(1772224203.238:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27453 comm="syz.0.6466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1948.512253][ T37] audit: type=1326 audit(1772224203.498:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27453 comm="syz.0.6466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1948.551533][ T37] audit: type=1326 audit(1772224203.558:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27453 comm="syz.0.6466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1948.883469][ T37] audit: type=1326 audit(1772224203.888:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27453 comm="syz.0.6466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1948.883790][ T37] audit: type=1326 audit(1772224203.888:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27453 comm="syz.0.6466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06b22ec799 code=0x7ffc0000 [ 1948.974938][T27492] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6478'. [ 1948.974964][T27492] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6478'. [ 1949.044478][T27495] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6478'. [ 1949.044514][T27495] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6478'. [ 1951.484499][T27506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6481'. [ 1951.706428][T27513] 9pnet_virtio: no channels available for device #! ./file0 [ 1951.706428][T27513] [ 1951.707094][T27514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6482'. [ 1952.426431][ T37] audit: type=1326 audit(1772224207.438:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27507 comm="syz.2.6482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1952.432099][ T37] audit: type=1326 audit(1772224207.438:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27507 comm="syz.2.6482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1952.474475][ T37] audit: type=1326 audit(1772224207.488:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27507 comm="syz.2.6482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1952.486042][ T37] audit: type=1326 audit(1772224207.498:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27507 comm="syz.2.6482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1952.486093][ T37] audit: type=1326 audit(1772224207.498:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27507 comm="syz.2.6482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1952.811742][T27528] netlink: 11522 bytes leftover after parsing attributes in process `syz.8.6488'. [ 1954.412487][ T37] audit: type=1326 audit(1772224209.418:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27507 comm="syz.2.6482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f99f310c799 code=0x7ffc0000 [ 1956.276025][T27546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6494'. [ 1957.487025][T27558] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6498'. [ 1957.967876][T27563] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6500'. [ 1957.974514][T27563] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6500'. [ 1958.837630][T21106] IPVS: starting estimator thread 0... [ 1958.845543][ T37] audit: type=1326 audit(1772224213.858:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27554 comm="syz.8.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1958.845595][ T37] audit: type=1326 audit(1772224213.858:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27554 comm="syz.8.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1958.846331][ T37] audit: type=1326 audit(1772224213.858:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27554 comm="syz.8.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1958.847298][ T37] audit: type=1326 audit(1772224213.858:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27554 comm="syz.8.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1958.847571][ T37] audit: type=1326 audit(1772224213.858:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27554 comm="syz.8.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1958.847887][ T37] audit: type=1326 audit(1772224213.858:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27554 comm="syz.8.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1958.848584][ T37] audit: type=1326 audit(1772224213.858:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27554 comm="syz.8.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1958.857864][ T37] audit: type=1326 audit(1772224213.858:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27554 comm="syz.8.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1958.864222][ T37] audit: type=1326 audit(1772224213.868:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27554 comm="syz.8.6498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe32f2ec799 code=0x7ffc0000 [ 1958.934256][T27570] IPVS: using max 15 ests per chain, 36000 per kthread [ 1959.394940][T16139] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1959.528792][T27580] CUSE: info not properly terminated [ 1959.874838][T16139] usb 4-1: Using ep0 maxpacket: 8 [ 1959.897662][T16139] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1959.897691][T16139] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1959.897712][T16139] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1959.897730][T16139] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1959.897751][T16139] usb 4-1: config 250 has no interface number 0 [ 1959.897799][T16139] usb 4-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 1959.897826][T16139] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1959.968977][T16139] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1959.968995][T16139] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1959.969006][T16139] usb 4-1: Product: syz [ 1959.969014][T16139] usb 4-1: SerialNumber: syz [ 1960.012914][T16139] hub 4-1:250.228: bad descriptor, ignoring hub [ 1960.012953][T16139] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1960.054232][ T31] Process accounting resumed [ 1960.335777][ T807] usb 4-1: USB disconnect, device number 20 [ 1960.447762][T27589] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6506'. [ 1960.448662][T27589] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6506'. [ 1964.128434][T27607] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6509'. [ 1964.896406][T27611] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1966.328653][T27629] netlink: 196 bytes leftover after parsing attributes in process `syz.8.6520'. [ 1966.382859][T27625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6518'. [ 1966.383027][T27625] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6518'. [ 1966.442458][ T807] Process accounting resumed [ 1967.958387][T27641] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6523'. [ 1967.958607][T27641] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6523'. [ 1968.244727][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1968.504268][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 1968.534220][ T31] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 1968.534240][ T31] usb 4-1: config 250 has an invalid interface number: 228 but max is -1 [ 1968.534251][ T31] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 1968.534261][ T31] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1968.534271][ T31] usb 4-1: config 250 has no interface number 0 [ 1968.534300][ T31] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1968.534313][ T31] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1968.534325][ T31] usb 4-1: config 250 interface 228 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1968.534340][ T31] usb 4-1: config 250 interface 228 has no altsetting 0 [ 1968.536067][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1968.536093][ T31] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1968.536112][ T31] usb 4-1: Product: syz [ 1968.536120][ T31] usb 4-1: SerialNumber: syz [ 1968.751950][ T31] hub 4-1:250.228: bad descriptor, ignoring hub [ 1968.751985][ T31] hub 4-1:250.228: probe with driver hub failed with error -5 [ 1968.995866][ T31] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 1969.735672][T27653] netlink: 16146 bytes leftover after parsing attributes in process `syz.8.6528'. [ 1969.894594][T21106] usb 4-1: USB disconnect, device number 21 [ 1970.598000][T27664] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6532'. [ 1970.598025][T27664] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6532'. [ 1970.631048][T27664] gretap0: entered promiscuous mode [ 1970.655877][T27667] netlink: 196 bytes leftover after parsing attributes in process `syz.2.6533'. [ 1970.675930][T27664] gretap0: left promiscuous mode [ 1971.085244][T27672] 9pnet_virtio: no channels available for device /dev/nbd0 [ 1971.842561][T27672] tipc: Enabling of bearer rejected, already enabled [ 1972.152765][T27679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6537'. [ 1972.184613][T27679] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6537'. [ 1972.390601][T27683] CUSE: info not properly terminated [ 1972.686846][T27684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6537'. [ 1972.686883][T27684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6537'. [ 1972.726603][T27679] erspan0: entered promiscuous mode [ 1972.746597][T27679] gretap0: entered promiscuous mode [ 1973.868989][T27695] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1976.099202][T27713] netlink: 16146 bytes leftover after parsing attributes in process `syz.8.6548'. [ 1977.167935][T27722] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6551'. [ 1977.167974][T27722] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6551'. [ 1977.234428][T27725] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6551'. [ 1977.234464][T27725] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6551'. [ 1977.269659][T27722] erspan0: entered promiscuous mode [ 1977.287481][T27722] gretap0: entered promiscuous mode [ 1977.414365][T27722] debugfs: 'hsr1' already exists in 'hsr' [ 1977.414397][T27722] Cannot create hsr debugfs directory [ 1980.262115][T27752] netlink: 'syz.0.6555': attribute type 10 has an invalid length. [ 1980.583288][T27752] team0: Failed to send options change via netlink (err -105) [ 1980.583335][T27752] team0: Port device dummy0 added [ 1980.671685][T27739] ODEBUG: Out of memory. ODEBUG disabled [ 1981.316029][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.316097][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.322627][ C0] ------------[ cut here ]------------ [ 1981.322642][ C0] 1 [ 1981.322657][ C0] WARNING: kernel/time/timer.c:716 at stub_timer+0xa/0x20, CPU#0: ktimers/0/16 [ 1981.322738][ C0] Modules linked in: [ 1981.322765][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1981.322798][ C0] Tainted: [L]=SOFTLOCKUP [ 1981.322807][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1981.322822][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 1981.322845][ C0] Code: 0f 94 c0 5b 41 5e e9 05 0d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 1981.322867][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 1981.322887][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 1981.322904][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1981.322927][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 1981.322943][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 1981.322959][ C0] R13: 0000000100028f88 R14: 1ffff9200002af4c R15: ffffffff9999a460 [ 1981.322977][ C0] FS: 0000000000000000(0000) GS:ffff888126342000(0000) knlGS:0000000000000000 [ 1981.322996][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1981.323013][ C0] CR2: 00007ffcd5175fb0 CR3: 00000000404a6000 CR4: 00000000003526f0 [ 1981.323033][ C0] Call Trace: [ 1981.323042][ C0] [ 1981.323052][ C0] call_timer_fn+0x192/0x640 [ 1981.323079][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1981.323098][ C0] ? call_timer_fn+0xd4/0x640 [ 1981.323115][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1981.323146][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1981.323180][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1981.323203][ C0] __run_timer_base+0x6a3/0x9f0 [ 1981.323256][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1981.323310][ C0] run_timer_softirq+0xb7/0x170 [ 1981.323345][ C0] handle_softirqs+0x1de/0x6f0 [ 1981.323404][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1981.323439][ C0] run_ktimerd+0x69/0x100 [ 1981.323474][ C0] smpboot_thread_fn+0x541/0xa50 [ 1981.323511][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1981.323556][ C0] kthread+0x388/0x470 [ 1981.323581][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1981.323615][ C0] ? __pfx_kthread+0x10/0x10 [ 1981.323642][ C0] ret_from_fork+0x51e/0xb90 [ 1981.323679][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1981.323709][ C0] ? __switch_to+0xc7d/0x1450 [ 1981.323745][ C0] ? __pfx_kthread+0x10/0x10 [ 1981.323771][ C0] ret_from_fork_asm+0x1a/0x30 [ 1981.323813][ C0] [ 1981.323832][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1981.323852][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1981.323883][ C0] Tainted: [L]=SOFTLOCKUP [ 1981.323892][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1981.323906][ C0] Call Trace: [ 1981.323921][ C0] [ 1981.323931][ C0] vpanic+0x56c/0xa60 [ 1981.323970][ C0] ? __pfx__printk+0x10/0x10 [ 1981.323994][ C0] ? __pfx_vpanic+0x10/0x10 [ 1981.324027][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 1981.324073][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1981.324114][ C0] panic+0xc5/0xd0 [ 1981.324147][ C0] ? __pfx_panic+0x10/0x10 [ 1981.324192][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1981.324221][ C0] __warn+0x315/0x4f0 [ 1981.324253][ C0] ? stub_timer+0xa/0x20 [ 1981.324275][ C0] ? stub_timer+0xa/0x20 [ 1981.324298][ C0] __report_bug+0x29a/0x540 [ 1981.324399][ C0] ? stub_timer+0xa/0x20 [ 1981.324420][ C0] ? __pfx___report_bug+0x10/0x10 [ 1981.324448][ C0] ? add_lock_to_list+0xc7/0x100 [ 1981.324484][ C0] ? lockdep_unlock+0x5d/0xd0 [ 1981.324516][ C0] ? __lock_acquire+0x146e/0x2cf0 [ 1981.324549][ C0] ? stub_timer+0xa/0x20 [ 1981.324569][ C0] report_bug+0x16a/0x220 [ 1981.324599][ C0] ? stub_timer+0xa/0x20 [ 1981.324618][ C0] ? stub_timer+0xc/0x20 [ 1981.324637][ C0] handle_bug+0x98/0x200 [ 1981.324698][ C0] exc_invalid_op+0x1a/0x50 [ 1981.324732][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1981.324769][ C0] RIP: 0010:stub_timer+0xa/0x20 [ 1981.324790][ C0] Code: 0f 94 c0 5b 41 5e e9 05 0d 75 09 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa e8 f7 bc 13 00 90 <0f> 0b 90 c3 cc cc cc cc cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 [ 1981.324811][ C0] RSP: 0018:ffffc90000157a38 EFLAGS: 00010246 [ 1981.324832][ C0] RAX: ffffffff81b09639 RBX: 0000000080000000 RCX: ffff88801caa8000 [ 1981.324850][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1981.324866][ C0] RBP: ffffc90000157b30 R08: 0000000000000000 R09: 0000000000000100 [ 1981.324882][ C0] R10: dffffc0000000000 R11: ffffffff81b09630 R12: 0000000000000000 [ 1981.324900][ C0] R13: 0000000100028f88 R14: 1ffff9200002af4c R15: ffffffff9999a460 [ 1981.324930][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1981.324952][ C0] ? stub_timer+0x9/0x20 [ 1981.324980][ C0] ? stub_timer+0x9/0x20 [ 1981.324999][ C0] call_timer_fn+0x192/0x640 [ 1981.325022][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1981.325041][ C0] ? call_timer_fn+0xd4/0x640 [ 1981.325063][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1981.325098][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1981.325128][ C0] ? __pfx_stub_timer+0x10/0x10 [ 1981.325151][ C0] __run_timer_base+0x6a3/0x9f0 [ 1981.325203][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1981.325257][ C0] run_timer_softirq+0xb7/0x170 [ 1981.325292][ C0] handle_softirqs+0x1de/0x6f0 [ 1981.325336][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1981.325370][ C0] run_ktimerd+0x69/0x100 [ 1981.325405][ C0] smpboot_thread_fn+0x541/0xa50 [ 1981.325443][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 1981.325489][ C0] kthread+0x388/0x470 [ 1981.325514][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1981.325548][ C0] ? __pfx_kthread+0x10/0x10 [ 1981.325575][ C0] ret_from_fork+0x51e/0xb90 [ 1981.325611][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1981.325643][ C0] ? __switch_to+0xc7d/0x1450 [ 1981.325673][ C0] ? __pfx_kthread+0x10/0x10 [ 1981.325699][ C0] ret_from_fork_asm+0x1a/0x30 [ 1981.325741][ C0] [ 1981.326206][ C0] Kernel Offset: disabled