last executing test programs: 38.899103699s ago: executing program 3 (id=1712): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, 0x0, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000001f00)) r2 = socket$pppoe(0x18, 0x1, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 38.746890172s ago: executing program 3 (id=1715): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x5, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x86, 0xfff, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) close_range(r0, 0xffffffffffffffff, 0x0) 38.568221245s ago: executing program 3 (id=1720): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 37.510676321s ago: executing program 3 (id=1725): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c040000) unshare(0x2c020400) 36.563104245s ago: executing program 3 (id=1731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000008000340000000000900020000000000020000000800010001"], 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000020301"], 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 35.680090048s ago: executing program 3 (id=1733): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 20.565190667s ago: executing program 32 (id=1733): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 16.156354165s ago: executing program 4 (id=1782): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) mlock2(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 15.030323292s ago: executing program 4 (id=1784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)="7f7cb80ab175f5ef067b221921726089ffe981a18c52b1e05dd7f6e97f17d16ca56b0167e7a07f7a8be5665bc10ad57d138f1d2fc06cea53b8dae7e4c44073ec3b6049b8343caa439e69bf42cab83185ae77299e1c5bc233920e282c97c818a153971714d58398675ea74499c9b27afd5748c868e6f86f40bab7f43b94da74369f9cdcad80d63a18138a384c4cf2638f0f8c73461700e3e22f46c63f49cdb5b3e8d1559b997f10d43e66e8c3e7ee954fc2f7161be8", 0xb5, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) 14.868355044s ago: executing program 1 (id=1785): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) 13.962714718s ago: executing program 4 (id=1786): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) sendmmsg$sock(r1, 0x0, 0x0, 0x20004874) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a0012000a000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000180)={0x8000, 0x10000, 0x8, 0x4d7}, 0x10) r4 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r5 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fchdir(r6) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r5, &(0x7f0000000040)='status\x00') syz_fuse_handle_req(r7, &(0x7f0000006cc0)="e5764a472ca256e4fa5b5c56951c8f08af5d99e71897669c71fa860cf20a75629af1256217099aca1bda14ba0aa9883f48db9ed5a33a3461dbad1b0cb88d915c13c46e3255dbcef87241d6e8bbdc0af465b5e10de7397890f60b7d673da3f4ada9fd0137de4362bb6075b0b60baa3480333acfd9bc4462c5a0ffb0c0db5d5ce6e5417030c6329e4e0668ccd1f4194092e759ed68ff784037033e0506fdcacd90c7f7ab82d418ff94dd32be27529b78f97f5a6e7617bec7306cc9907ced4a784a573da93140b49f73d9ad5d1058eac72ec68148d31397864a0b1050d28785a85a6acc3c646387d2566ff475585803538cb6d0d538505a48750034348a5e59b542c4c447b81e5bb821986f7b7ea2b5d484d0d015c4fe348942338c81fc84e5d3c9176dbfbfaff46d8ffdbe07755c44efdd2b07deae0312853736e0505a57c977334f43d0d7f6330924af8231eaf28da538745381d650ec1c2112eb5559aa618440bb5b32971e86cd5028035ebfe231b056206a13885da986a6ab7eb272f6a9ce00787c55e9d3e89895ccd3c3200b8a6f762c93b92bdea11733c02c07b42570e9eca34963c1e7df374283ab2cb95dfee7b22623cac2e4be2f09a5707b2df557f1e041296a3c830f4b01749e9996afbd9c29db8febca4aa67b541fca5b9a80231ff8f8da50db95870f39c717e14548248af8948ee0c56dd6f85f7d4f1fa3d979029130813ac8ea51d7736434346b387c02fa3b0620d6aa765e58af683dc7cb7e8b4bf4b53ceddc289e3dec9ff8ea5eededf4fbe3e2204b1a3f1f2a70563aa0db8ca938d23aab42570eb97a03e420f14d1e32b2ae3927c4fd58be2154e5bc8b6aca8aafbe9bad78a6d0177c6f42ea763969339d55424b2f84233f4aaf0f51ca58934b4845cc2a91f774a180bf38bc1b7fe917dc1652f924074a7343e7e07bae9de7823b9ac60e06ad9a89749715c3902f644fa284574bfa606f2d4e0113695d51ac90af285aa80647798f7f552786d72ad8251a11022780e5d4eb01255e74f40ca3826b4cbfb2fce8f482bdec9b50b3c1b50751e5424f53d5be1277cd1ddf0f15b452f04011b4de6d6ad5913b76713f527282eb9ff75187b281433df4b121b5b0c75a37e438608a4ae937060d7996b193ad52cc3d8850846273a94e3d718070064757c0374845a81d70ae139fc9af3df467437a0e0a8a058bcc0feeaf8d4379a690e3f7f96757827d1ff02e9dd287715fef9a5bc48399e102e804a4fe6cc7d04a0381a15c15f2409d1421fd52246b95b936be5327f4d03d172faa82d1198f8693b2385aadee482c2e2cfaf674d2d30953d65bd6bc7016fa22cead75c9f0bf24157020aad51c75d1c8b09830adc0f59a0da7ccfac3b0b7518dee240e32c81d30a62b50a170fbd510197ba1bfc4456aff6383d01624779e54131bb5aec4a0c1c09dae5951b5a62a2f8a1742bea3877adef6c8db75ba03f6730d770f460c686cc93032b4ab56db7a61d3b3f6e2d68b60de52daa2e922ae8207069f090261a7fab9d18ba52c1d191dd8949b3ac13082b9a4faffdce6a0fdb61ba07ceefd3242a228408598c4b4d7f5dbddfe3143221ac6bf7ca0cbe917d011cee0d5cf596c649e06fdabe45098b15fc27f3fd5a39ce9cab4bd3efe65837d600c7fbc3e91538dc54722636f918dd236274bd0aaad67f20adda5c565e793d4b24585ec4e4fdb315e3ed3de851a716ae8bcca394b1db7b467f88e490e75ed204cfaf507fb4740fe8b4e2d59f012c7ed42afc62e6ee446efe39c19bd0767f3691fdd5b8dbe89a040f407e7e6be6adc327d4bee9d8f4cc38731f024ec50dea800a18b9eb86643d10ce4cb8a867803d063093eec9df6656d924096a1554dc6ad7d5c5f35bfb51b404b7f6d82d545eea9d5ab6afb885cf59db15bbb6ed8dc8a6f6d6cf296a61308de0f91cf594def1df755db2385760d2973a381f49bc27138bb065ea75d203b25f543d07786d6d7b022785a5bb718dbdcd3021631b34f7722d9e835c235298e12151c59d1fc14fe36adc8257d7d2dd0dd5b02cabaae66dd7d9b18d8c2f45abe593baa6cb06d88bc5e4eeb573064761beb2163a2be2e6d39499d0b4ceaa5cfde49897e84b1fb0fea6a8ae061e90f16054e6cac934584ecac1706972a59de70b140fdd675764f5218b4553c964d095583335b744947de42bd7adaf22ca0199b12593d82ac4661449725fb1ed1693c36e91304c7a7f27357813bb388b5962c11ab282d8ac2e6c1f2f7bdc1838d75dbd67e7961ab4be3f052eb69664829bf85b13621965e72f86ac82992319a9cf70ad965b68f58ed889834c2aa20eec8e89a95bc1a92df6db2264f6ec7133567325b530212b05622225129c0fa5fa47f61fbc01b3d84cdbbe7bc597c953bf6c1c95e70eabe95cfc154d0d8fb9f3364e4c5fa6b2a0220fd2b0b3f472a925491f4b5c0259ee1730169e8503972d42f60b9380533d08750bf69a06913bed2fbfdcdcc2a7b727a33533242effa756ee8ebede0a64da858db32f3b6a9f37d3aea3dbf762a881e183308b41b3cb439ac8908811c3a57a45e65b9b21c25635c2fe4c3aff7da65b9c90ea47a3b906fba85464718c771387e29118f15d54b63694828f6377bc59bf5f1181027dca4c959eb27e060e9039a5f1fb955b332c9aebcc89be493185c15fdf9a9c74f96e5bba7d192d3263aaf701d36c37323780f1037930d2a2cb58591fa29acd2760e0873151c4570959df1106f435d2fc3a4f897186acf0a0f7be957b5b8efdf892abf99e4ec02a8e957707278c9ce279f1aa1c0f6f3f40e876a3b08959ea6a2f1c7ceb17fe599b33851d6fc4b93254379f0bf28e9954c8abc7151e110a38966f11defe13597bb30c003f6b98d88978c242f57ed3022360d686a0e762b035ba6eca21c86701953c2ffb4d0e9e259c29fb922a4f9138898e038e6925543c6c20777e18a5fadfa3a30ad55c6b8ae42489356764a7ada4565a73128dd7686ebd6a5d599c1f87a70e0534f16eb76dbf3c88e87772ebc7eaf27be2d693e86cdbb93029d9174872997bbc884adb46f6f3b7b560eb0da7ce0a2f0643c6271988321fd6a6597cf904beb1bc2c058c631b927b36fb938000031d79fd3e670746f89d0eea812b3f7e3007eb2f9ca952c1f794b1761d8f3f3e92b15869e9ff431d6280821bcaf374e636a16e1bdf721fff722287e135518163c78921b00e593a5d80efce94766cb197f224839ccebb7316c1f9471454eae766c76708e7cfa1f73e178235858e0f507528d63861bd363d639794c0087b12ce94719c5aa4778c0da6eca565b2c880a5b17cd42e852193e1962dd94862ba8e1f44831a8f708fdd8d03933e2967bd54571c0e8c2305288d87586cf621dc95c7e8d3f3264aea0ca799e098f0efb7ca9c42b686907b8a9da68c1e3e53274461ec3f4d1b60e5a6abf5f126d397ee0f6919e20950127ea092bad9af0c295b1133fb1fa39d974e1523d86f3bb23d238db4b5d025aeb59b7ffbce90ad38f4326a2dadc62b4ab9c62451126ab2a19221367f8bdae9abbbee8acd94f644e0cec7b4535bf4885f677400e727db3fa21cffbf5225e8c2c59bd03b09dd6a3141c6c2bacec5e6232e9f2534947d40ee7250e73fa700d475a58781878d46b91ecaa464af77282b5fe4581720e850e6c6cd720eff24e7fdd682cb278e3994ebd2502ef99d41d473244ac1acca4c36a1f2a0667fb784997c229e0ecd9b70bf3925ec1ca6ebaaa2c33a1e21fd099bd964fa1892b08096b7804fd588627ad549a62806352aeb49f4dbd3ff001e8f08f6dbe04aaa73aec27a822a1ccf03f08c08517c1af8111366ddc19fada67ce1c31092421db983a86ad01a974aabac8306929fdcfaeeb60c0527a1a800a1317e569fb6fd88f2245c3334f638b4b6665e7f2c6961b6594792218d3398f3cab22250f4be8e8700a57e1dc044f93701239016638ae6c21d53eb42d235ebe03f891e92111462de50b153e60e34263b09beb1dde74f488333d704bee63f67370de17b86c0541b9f4cb02fa2fc0e61f14273f6a3085068e945634440b65bc55fb48b35d763f27cc21eb37009f37c6548de6e6b75bf5d73ebe77ad4926bf03389a6e69d3d67fd40a821a224fb0b27ec005693aa3fc94cfc9ee8ab2ba3555bf1ec303cda06e2f092dd6be7f36befa648a81d953012fa9d09c9931d3e2cd1bf15449c3f93ce091bf4aa345fde77bde9c01bc0aba57f4a78ff383f96296043a40dcd9585a92aa07338ddeaa6809847ee28388c2bdf24d2ade550b0468648628211a99a5d124460533cf99458b0ac138683bb627b44dd3a93caa7d221d9792d63e2908516577885af4d13e5ab08a12307d4a17bbf84dd32ce5d5700cadf01bc297ed0013e1fd44899e0dab47a468099dfdb231588bf007d1544ea6701037b97746dd975535b1e7e37f285e8f4b56a297921513fef951341a5344384d97245f0269b047e02f2e8c6adcfc4d31721d566e1a5cb1b3e73d3f676c7e50cc1294d265b0c4427878c0b26800a7e9dd7d013912bdecd03be666ee2b540c1d70939c7df13f11a44e7d166c4fd3d60394a91c7a9044d141227b052f73f081141200a713af7f7f218ca478ed4448181e8c02ce0f093899620106af2d0d8896df8c5f075741bdd28571b34d5f0c2f89fc46f0900da9c9ed0bd9ad92aa5ec6e351ab7cf8e6da3242a38543e556f7ca1743b8a9cb983b4be8e4d082cea0862aa3bd9f1a03042db0875d2ea16248430575f8b6cfe03f7f4ee35465fad4c3daa404a22469bd3b422c3a5d537e9a3cf0bac559fd51ed3c090bb7efd0569cea9650a1fd9c4479790055960ea5e81a637a47394f4e8cf708a1651a4b32fd0da280f20f39be7d60804de18a3ac86b54428121614953c74155b885c5eb81e2a846b9f795fd1d218866f668b83484995da516f876f7557133d34345ccf78b06d90b438e924eb0ddcfdb7ec8df40aaf65284037d739b3762b15a926f85e95c2fa10cbd0d36a3d1463723cf28fb9c2fa175de373a5f555ec31d02bccc3fabd973e2f630a8c8bacf29beabfffd13b104158e2469a869294e92f7d682dcef4d5ddd388ce6eb4e10a64eae05d91725413e622dd6d313084d26a89e82e6b1394a1a20ee8c27981079611b56086199e888268a41d9f7a93e4a2e2e2bf6a37ee36112a15143789a38e77794e3c47b3313095448dff6de678ffbae2756a9f74b6d5107f2bb474850b845fc3ea7baa08f652e2d304197418e9d57de2686fd7dff13e3c6b9732597d0c8d15a8b80b99c951c1a2033c98cc6e155244974c420f80b7cb62dd5ce77f95a31c48f79d0353df38dac26ba9243e840dbc4c0ce343df6da7a9228e736baf181ce40adcc34170a56b2fd611de20a0d64f71320d2804ae0bbf937839690a1334358d0e9fb400e41cd718e29f0df31ca07ac5c64eba44ef0d13e362c09440114eabd7c2af6a6a75601fd7bf1d5ca7dd5fe09da13745db73d72792647ee8f3a5f6af295ad2d00df40b936aafd6780fbbcb194576af128ffd24fa5c135b8359f9fdbfbe9c626150528e62169a5f7f8490e90def090422d1f0f6417e38b22e8652181242e15b12b835a7ea89bf2693bfe4cbe486e15dd7e270883e4cb2901f41b3c4531c2c09c62c92ab85d666160f563e05c29c52347c88ac45384ed71bc1d5fdc67def268c2eec5768e1a219f483848be33aa7f508681729b583fc0a9345c1336f8799942214e821f801543fe7c2ab8dc52cb2107ef21ed9ccf4234df0a639b01a2621435a93876b399f07dd0e03ca699aa3aad421ccf84540ec4fc9402fb23bf5c555d3a34c72217d011e92d7e8e477e8786f5dedb503816dbeb5aab92e2888a0ca2da214b972ce0390fa9c7bccdc675bfbf5158ca30bcac7f650f1de05eb0a3846c6480289c28fce600a9d6c3dd9f480904497bbefd98e218347f46de84de345da1843e3f47063635a55645b9f9bb7829cf4ad7b434123593c9c3bce1f662975d37a9896be6dfc1f00b0a566adaecc57b8f5ff1eb9205480d1a6f08b2a46dfe1844a05a060b44bdd85cd93550b3fbc76c628c19bf6ce510e3e021145a8f81997679a6bdf841210101866cf0ebcc9ea2d34f58c0c91ecc813263dbfc72a1c188a42425ad88a8be82b9ea6367a996297c57c7ab89fac931822f501e529e583601ca6ec92613520c78e1baebb72745e4639b21162b6e71bdfd91623ad0633980c94cc733c113f25a8fc9d84c778d9cf0ec8120c2aca29578e8d9709240575e0009cd8fa84c98d9718a1d0d8efffd1229b74fe1d05024778df93b1d2db31ac5f18a06852e402165549ae0942554115b5add3d37b4f89cf78579b05bed44d5f358266abe7c78d79474cb6b3ec62b3ddcb2142bb4a19bb26ab92f66b240c38b0a7ac7c164558606f1bbec6977bf6700fbb3fedc09d4e388251ba8d4bbe7fc1eb5d47dec9a783e4543c664b97fd28a4f59dc3fe2e58e843b1f4aa4e5ccb06ee50608e3d39610f422924884df99c43cf2d5821eb16a476d75126d1107a75b20840873915b492f6e77bf40c09c51ef668ae71669ab49be50a885ed65b7a2641f143a7bdcdd35633779f0913e13d461b6fb1b15d2946ecf22e3008f2ad1fdb856da299e924f96566ce5184812d85641737cfef7aa447bd2c51b1d2e7f4f19a291fb20d1860dac1b0417478e5d0b244aac4262437910fb640a905a7b30853a40b83799e6677f1859ff90c8d7bf885923aa129b6917e5bc1647a99440f3317b5ca68aed8037809034ca38db679f2f108804a02a5383cb0be013849ed4d320e8bd9decdf2f109f6148142b8e5c504e2a01a1f5da2efe4d37712c7257785a2d7d3cb480b2f039768c6ff96a1be03bb0ef231b48d1cc83733387fb8628da569e4ea177e05fd49a6252c54e79bacf456de1dcacd37fd0dff3e763efdb5cd024a0be664af60b818de35206b792c986efec24924fecb2dd4f2b35f62c554572c3a1eed1d358bda4b9f7ba1b57cba1824914346461ed04a5f559fb1f5036179b7862f6a8e0cbb2ffc1190ea1e5172895103a3ad1c9d7e0836da723d88976d54520c045f5aee5c22c904143bd77fcebe94508d1b1cd552786678742c5fb9509b1b0301b997a0812a537a78e08af211b1e5d01c07b59b9b3a5d01850e05941c5d4a2bd5dc3a3c992b45908fa4b0178d838b467463dcff946bc6d48545ae40bb1080cac3c6fd6944d0099bdcab049c0e623e499f4a8799032c61ced17272264234a47edf1b3ae25c2988de8c9b98ded411544ce5eb5a273935eb1a437364d749462a40055ddfa62a8fdbc7a6c26a832a2c189a37348b5a3d24a637371d642d7dc6e6bbc9c937856f496b0e53c2a18bf9eca515d662ac3a9dadb56243e28916938b28af06f54e96a6095003f896a971076d738ca515d32c7e21cab0bd85e496a058d4db29f5ae50353bc61a30a5a517a071358f521fbf0cafb95c1fe1166a1778c15bb43c1288bf7f3bad6feddaeab14de1b8906718f167900bdeab2795323cc4f9a6d77a35176798a3ab27c3355f8a1d023dfc7070906060d0cc4556c04db5bf408beeea7fe7469dfad3c85a153ebade2709066d0e78172fe64e555d41259dd00da545ff59b3367116a46ac22e25ffdcbc3795776f554d978466498c8dd3d2cc115352c8bfca181a2a3fd12ec4b61dcd0e5b1cf02f6d2d490a74bf4ec989800aafcee06df27c968930cc1efe36b415db8171e5bdfb7db49237809e46d38b14199f568a0ffde0b237d753da9e98da14b397d206bcd1c28683a4089e8a37845f4e09a78f6309b533e497000fe128ff013f1f4797245ef4697e1a2e8979937b097eccbb547c7f553ad6eb48c7b1a683243fad52af0a72215909ce913d11e2ee5c2b0567e80ae525bc979c2d7f8535e6b4c615fd5a8486c2856fdf8e2d655bdcbcee6f1e324bcb6eec8329e4e0812e401c6453a118f9f75539cef47357e4a9de9f45e92a1acff4af09418350c735d833374fc5ddb14da4e54e70ce182978d7c2325d16e80d61b19bfe68dd24f5fe3c9561665757c7b6a5bf5e83e10eb516cd05613e4dd92ed3ed88b20d5296415a435597f238e95e2af59b8fb2eaffad91705d065a7ff040f0f8ddd9ee2b061d39dfa25f356dec3c755a1519e812e1974df360136aedd7e7548c87ed166f7baf50e4baae7b5693eeb3ee63f2689ace372d45466cc815cb11605bd453b2d918824c1b2f64e623e291c728a9e2e89c4d9cba3acd26af584c69945908c76259d299d3bb53e5b9ae821cfdde11a3de624cdaf569dc970d9af1174032d707b135e9bed30a638d3e13fe70520ad80e95ef39d5f6fb45b8edb017dd2b82b6c4656c546132df5b1c710e798133b15c4f05202e785c78150820f6ad47f6651c8df21bf5eb6ec851df349b13588e02220cdf25227bc63bf254b1e2364247adec4d5957a958da5577e3884754362d4c04b8985ba7f3827fd135a5978ee8a7ee2c0ca66755c1cbb76039b2821577b05636755e5474929b1db27e7088c0a4fc3f723f4427f4005bf4113d21c5fac806c1b9d0e78b1eba78ea74b55e3a4701d13074ed2324a9cc6dd16b21fe4a0b890cee10669b43775f55c73f38f44cbde28fa7dae1ba3c66ec25845f80be816ef93b66ef9c7b7ae86cc1580aa1ef612de516b302063aee622e03f47b0ba65532156634ac4511efcf53524e13e259f9786aefa745bef9eea6fb8c7a1f7556305f225f4cebb09306a97644112b8611e8e67476596de3db229fa3be432cdb2e1e4131cec8ea8c6d70395b374b85303e52cd6f23ecfea536b405b3aa065856b8530b3049acd7bb31ccbf9e02a8e4cdcca252142adc55563be912edcbc5a7210b7358dc9d9d2c9cdabe80de999de9cd40aa9f87295c549f42734a62df307f18c5d850774aab8df61042dd0add51554f7afaf4deb59f73c7238ddc78fdde7266fe479871f76cc037d822d23b3ccad7b591ee9b0c81eab7fe91a150b13f082674a6d079234ca4c1c2f49bc3b4df95a7ba7e9668c385b344060be72a39518c0685f8834fe1d37aa57a9109258f735a6143217166a2613a985f2e3a721b7e71a30a063c8b4f93898a2e4b478b513649a0cedda2a9f37b58145e0a75907d21a806e524a3f5e45297fd4c46280d951d8ada3a761f359164a5c0abb2573f0c65aac8b3542cc32f6a0bfb9484708a0caeefbf3616d03026c2f0614d17963de26d6db565cc463385d5872b5a865a517f55e0cdd817a8cb4f31aa2b1ea8c099ef96fb6d2e5864031d894b5923c474ff00aec195310b0c1aa82536e8e75dc9aba7605544ed86df31122aca480c22cb715ee8df04180e7d3040501379669f3de4adf2acf49a47b7564b52b85006430633fbcee176970d67857552ced405eae8ac2fa8e0c2d980795e7f854f842b811a919313d63164b04f8521225867d8af3ac59360ee7c5f8d3d0a738071a123a2a599c7e2bdbaa746c42f0af77e7b446ab223a0e585da5f403c9bd55a6af48fc8f2d251d53c49f64652991ca7549e282ab85611898896808fa8249bd600fae28b81ba815a798d12acdc97a2d6bfcae5833b6c0676ce65157675f28f73aeb10443c10c720398e3d75eb2cab9df437af68d25fe0fb282bbebf668da9a082c36889ee22bc13b1c2b9b7125c3270a87f09fe7da289906f7185d84064c5444fce22ab40d57ae504513019fe8e36bfe702083e545b94d1490000f9b5759cded7ca04415200c8e3bdc7a4534d73e8f97a757a2899d69132c3e0a4c7f5deed010e0c4f458c7f379810e304dd47548141ef906a7b96d939f61963d3fbc58b18c9de2903ffb7176025e38941e3e18398c5e387042d4f356d8d009225187cfe77bafb9316fd02e66f3469d4048e5b8f02188ae60f066e32c23ddebb2327996347c974cdf2f215037d96bfacbc7f1f65a95d66e60192d0d9d3902fd73935f281c3b3c50de162d0e9ca250278d32b810797de787fccb79e44e3e1a0a7e188b44971d41cc8fc11e9abb0b9a9cbd220b2c0a4f3fd8d7f8efddfe916bf3df7fc834453d32f61c850061d6d788c63d3f2dc42d0f54a64a09c0e1ffb51c15baef47c36ec8e319daa6ee46b51f2de27817b866a68b78089b5904bf1f9379990ac2a947f4c7dae0db2c17789e07d4b16f054889f6040709c812be047f53cec5fbc71d058772de66f539732abc8c7e75be4bbcec99119007493f6de01f68af52d2dbd594539c44ae4ec34908ef25ba46a02fc90d354a4a83cf2c588c4e1fe41966c0b2443875611cc9f21b08864ffa1f5072720eb756c4ff257e69e6e398b7e84a5904fc69db17879202ceb6c57fe6bd94ca578e3313a9a79538c840af82283a76dd7f53f5c3d8ec17c5be4c36136a53f0c46b14614e71dfe4ba7974ac4494311d4cda2fc7d0402acb637a9a6f491af9068c5c6fe71becfddb9fc07c785da5eddbb3a51043a0ae15aa9ddadd53f35dffed09a2127d3e0c5e1057ccec567791d9ce6e8082f0beb7ae912a4b30804abfa5347be87c6eff4fdb70b3064011950efd0ef30b84ee4b00f9247c2005a2dfa8e1c78ba0006185e2feeaea7f2c77d11c7e85499306ba769e404b6e6f7a7e5b45199817b31423eb439c50d850b22c1b63c4831f8da7ed462b0f8827f44c05df2e24673b360a58477e77b4835fae97e7d6375f0ccb339b4549652f20efeff931d14c0688713e78c81387ca6706258f9589090f2c8a4ef9e2cceb1775673f43f61f68736c966f757e6239ec7eb8ea70140f2c967a5a9f80f88b410f160aa14e083f6ff90f3324c59e4eb043e86117c362469e9c55a4689b137ccb04089e5d1ed875332083c41e8e3b28aad11472190b6dfddc18685e492fcf0a9c1f2ee287f7f1044f0bc98a9ad230978f97710839d1fc3e9f150cb03da9a1f55c608124ed27aa6b4c2c3cb7388432e15b02e55e1fcacee563c11f4f0ed9549fcd95d931243b95b394963da03982228f29a9501d7f1df7e44fec415fa7dc0edc1ec86850feb9f0dcd2d9dba983bbf44ff312462c73afc49519eb7440cd7d26ae73a137ae1c2b166d94730bf964452b4c82a49d110f48a894a427dc2cc4dacd66524b137ff54b49ec2938c829bf8934769c076001b54f280f862935a0cee4d69b3c3bf7773f2a7a235f9f188901f655e7b0bf790cfe49f5f079b90e0bad0fdd25e0c302af3687ba1feb58f3d3e78c34cb11f3dc494ddf4702fc009fd7c9e2671730709f60b83c75c1fea0738cbf87a19eff5698a39ecc8c22218be5f9426b225b52e3020b6782ece5451b716c975996afd0fc20fdad4acd8836ffd14d0ae932589be8ddb2b21328cec26d7321cc4cd5a2a01562b597abdd7f81f326c0a0f849d11053e4909db9cd9d18cbd4bdcea72bda5cc1cea86283c8fdebd5e55087cecced746f424bdf4358b65c958b84a2436025996e105425ed4784e2de1602b3ead37b87f104178f5a9db22ccbdae040b01e69b72aabc59c10af1e7f48b6701705b433fec40bbc07846d4c66b16f300906635e4fbf8ba61f2700b1726c6a4c14573fbb16d1af58f6301b41f7022a4c84651354e057d9383ecc10c32f07d332ddca591fd29", 0x2000, &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000fbffc810d804300a47ce010203010902240001000000000904"], 0x0) 12.839704645s ago: executing program 4 (id=1790): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 9.371520348s ago: executing program 0 (id=1798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x80, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x45ea5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x80}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000002c0)={0x0, 0x0}) 9.276190329s ago: executing program 5 (id=1772): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c040000) unshare(0x2c020400) 8.015009428s ago: executing program 0 (id=1799): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, {0xfff2}}}, 0x24}}, 0x0) 7.632165204s ago: executing program 0 (id=1800): r0 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x400826e, 0x40, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000c00)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 7.631915164s ago: executing program 0 (id=1801): r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) write(0xffffffffffffffff, &(0x7f00000006c0)="a6a8479a18e4509a465a7b7602ea9ca801e84b410ef18e44d07949dd4d2e51470cf0cb337ddddb9c3a2589d45c946199e2ecacf18ff29aa1d9cfdd56a976cdc658be0298a34332910805df149a0300b3373ca965659ec5248df756bd76a3f22ecc5db5b710fa345ed52f9af98b0be5cbc9587b76f35ff7bae5838ba0b75fd86417684cdf8ee678996eb57a4a7540ad0500e524b279d5fc6e08d4725439a953b58862f8dad53a7fc14ae08cc054e9c2b77db70300fd9b52825f", 0xb9) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03"], 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\xc1\xbf\xe81\x03\xe8\\\x7f\'\xe0\xa2\a\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8H$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2H\x13\xe4\xfb\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83', 0x2, 0x14, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x12, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x185}, 0x0, 0x0, 0x4, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 7.631652834s ago: executing program 0 (id=1802): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c"], 0xfc}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES8=r1], 0x188}}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) brk(0x400000ffc020) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) getpid() 7.613827304s ago: executing program 5 (id=1803): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000003c0)="4dfb04f0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x20040040}, 0xee) close(r7) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=@newtfilter={0x3c, 0x11, 0x111, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r6, {0xf, 0x9}, {0x5}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_POLICE={0x4}]}}]}, 0x3c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) sendfile(r0, r1, 0x0, 0xffffffff004) set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2) 7.536058075s ago: executing program 1 (id=1805): openat$dsp(0xffffffffffffff9c, 0x0, 0x1a003, 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$session_to_parent(0x12) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000400)={r9, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000100)={r10, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 7.412418027s ago: executing program 2 (id=1806): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x400, 0xf, 0x80, 0x7, 0x0, 0xff, 0xc, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x1]}}) 7.315798959s ago: executing program 2 (id=1807): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x60fe, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x7f}) 2.965627885s ago: executing program 5 (id=1808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000280)="7f7cb80ab175f5ef067b221921726089ffe981a18c52b1e05dd7f6e97f17d16ca56b0167e7a07f7a8be5665bc10ad57d138f1d2fc06cea53b8dae7e4c44073ec3b6049b8343caa439e69bf42cab83185ae77299e1c5bc233920e282c97c818a153971714d58398675ea74499c9b27afd5748c868e6f86f40bab7f43b94da74369f9cdcad80d63a18138a384c4cf2638f0f8c73461700e3e22f46c63f49cdb5b3e8d1559b997f10d43e66e8c3e7ee954fc2f7161be8", 0xb5, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffffffff, 0x88a03) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x0, 0xfffffffe, 0x2, 0x0, 0x101, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x2]}) 2.965250735s ago: executing program 4 (id=1809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, 0x0, 0x0, 0x8, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) keyctl$set_reqkey_keyring(0xe, 0x2) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x80, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r6, 0x40c89}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x45ea5}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_OKEY={0x8, 0x5, 0x6}]}}}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x80}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_ADDRESS={0xa}]}, 0x2c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, r8}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000002c0)={0x0, 0x0}) 2.961832655s ago: executing program 0 (id=1818): r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r0, &(0x7f0000000940), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 2.954763395s ago: executing program 1 (id=1810): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0xba, 0x9f}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0xfffffea6, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x9, "919f"}, @main=@item_012={0x1, 0x0, 0x9, "ed"}]}}, 0x0}, 0x0) 2.954599405s ago: executing program 2 (id=1811): r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000700)={{r1}, r2, 0x18, @inherit={0x50, &(0x7f0000000280)={0x0, 0x1, 0x3, 0x8, {0x1c, 0x46, 0xffff, 0x2afa, 0x1}, [0x7f]}}, @devid}) syz_emit_vhci(&(0x7f0000002300)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x1c}}}, 0x4) 1.582082456s ago: executing program 5 (id=1812): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000005b00), r1}}, 0x18) 1.581511896s ago: executing program 2 (id=1813): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c040000) unshare(0x2c020400) 1.496119777s ago: executing program 5 (id=1814): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000c5008005000100000000f8e5543d", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = syz_usb_connect(0x6, 0x75, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x2100000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) prlimit64(r5, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) write$P9_RSTATu(r8, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40186f40, &(0x7f0000000440)=0x1f) setns(r3, 0x24020000) r9 = syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r2, 0x4, &(0x7f0000000300)={&(0x7f0000000580)=""/73, 0x56}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000440)=ANY=[@ANYRES8=r5, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x2, &(0x7f0000000800)=ANY=[@ANYRESHEX=r4, @ANYRES16=r8, @ANYRESDEC=r1, @ANYRESOCT=r10, @ANYRES8=r5, @ANYRESDEC=r7, @ANYRESDEC=r1, @ANYRESDEC, @ANYRESHEX=r7, @ANYRES16=r8, @ANYRES8=r1, @ANYRES8=r0, @ANYBLOB="24796274c1d7dfb80f749e323110f7d4e770960377aac1e5fcac264587179de4f7ac0a7f00f657e1b922613eb12a11fc43af", @ANYRES16=r9], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x10000004}, 0x18) 1.438657128s ago: executing program 4 (id=1815): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0x1a3) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) ioctl$I2C_RDWR(r2, 0x707, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r11], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x8010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.30308125s ago: executing program 1 (id=1816): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000f00)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x74e, 0x19}}}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x716}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x4) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 1.100481293s ago: executing program 1 (id=1817): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2c060000) unshare(0xc000000) 202.193677ms ago: executing program 2 (id=1819): r0 = syz_io_uring_setup(0x1486, &(0x7f0000000140)={0x0, 0xbdbf, 0x1000, 0x2, 0x35c}, &(0x7f00000001c0), &(0x7f0000000200)) r1 = syz_io_uring_setup(0x3bfc, &(0x7f0000000240)={0x0, 0xfa7a, 0x20, 0x2, 0xa1, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r1, 0x19, &(0x7f0000000540)={0x1654538, 0xf84}, 0x0) 91.790799ms ago: executing program 5 (id=1820): bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000540), &(0x7f00000006c0)={[0x0, 0x0, &(0x7f0000000680)='/sys/kernel/mm/ksm/run\x00']}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 251.76µs ago: executing program 1 (id=1821): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r2) 0s ago: executing program 2 (id=1822): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1, 0x0, 0x103ff}) kernel console output (not intermixed with test programs): 5607] rdma_rxe: failed to add syz_tun [ 180.429132][ T5609] netlink: 48 bytes leftover after parsing attributes in process `syz.4.467'. [ 180.733257][ T5595] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 180.742686][ T5595] CUSE: unknown device info "3ܟ,̘" [ 180.744308][ T5595] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 180.744308][ T5595] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 180.749723][ T5595] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 180.761268][ T5621] fuse: Unknown parameter '0x0000000000000003' [ 180.797988][ T5595] CUSE: DEVNAME unspecified [ 181.077460][ T5630] loop1: detected capacity change from 0 to 8192 [ 181.107689][ T5630] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 181.131788][ T5630] REISERFS (device loop1): using ordered data mode [ 181.133672][ T5630] reiserfs: using flush barriers [ 181.162317][ T5630] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.200885][ T5630] REISERFS (device loop1): checking transaction log (loop1) [ 181.610860][ T5630] REISERFS (device loop1): Using tea hash to sort names [ 182.215930][ T5630] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 182.699271][ T5652] loop0: detected capacity change from 0 to 512 [ 183.019409][ T5654] syz.4.480 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 184.126532][ T5652] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 184.731883][ T5662] fuse: Unknown parameter '0x0000000000000003' [ 184.956569][ T5668] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 185.852949][ T5677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 186.200945][ T5686] rdma_rxe: rxe_register_device failed with error -23 [ 186.204046][ T5686] rdma_rxe: failed to add syz_tun [ 186.453866][ T5684] loop0: detected capacity change from 0 to 8192 [ 186.493057][ T5690] udc-core: couldn't find an available UDC or it's busy [ 186.495162][ T5690] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 187.049264][ T5684] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 187.179650][ T5684] REISERFS (device loop0): using ordered data mode [ 187.199066][ T5684] reiserfs: using flush barriers [ 187.209009][ T5684] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 187.241058][ T5684] REISERFS (device loop0): checking transaction log (loop0) [ 187.894663][ T5702] loop4: detected capacity change from 0 to 512 [ 188.007125][ T5702] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 188.445510][ T5707] fuse: Unknown parameter '0x0000000000000003' [ 188.489088][ T5684] REISERFS (device loop0): Using tea hash to sort names [ 188.492551][ T5684] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 188.563115][ T5710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.497'. [ 189.841693][ T5729] netlink: 'syz.4.504': attribute type 1 has an invalid length. [ 190.556651][ T5735] bond3 (unregistering): Released all slaves [ 191.528646][ T5748] loop3: detected capacity change from 0 to 512 [ 191.687023][ T5748] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 192.007690][ T5754] fuse: Unknown parameter '0x0000000000000003' [ 192.110101][ T5757] rdma_rxe: rxe_register_device failed with error -23 [ 192.128066][ T5757] rdma_rxe: failed to add syz_tun [ 192.311903][ T5760] tipc: Started in network mode [ 192.313435][ T5760] tipc: Node identity 4, cluster identity 4711 [ 192.315275][ T5760] tipc: Node number set to 4 [ 192.663305][ T5767] netlink: 'syz.0.526': attribute type 1 has an invalid length. [ 192.721937][ T5767] bond1 (unregistering): Released all slaves [ 193.722026][ T5775] loop4: detected capacity change from 0 to 8192 [ 193.904513][ T5775] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 193.907071][ T5775] REISERFS (device loop4): using ordered data mode [ 193.908921][ T5775] reiserfs: using flush barriers [ 193.913022][ T5775] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 193.920998][ T5775] REISERFS (device loop4): checking transaction log (loop4) [ 194.008089][ T5792] netlink: 'syz.2.519': attribute type 4 has an invalid length. [ 194.866327][ T5802] fuse: Unknown parameter '0x0000000000000003' [ 195.183092][ T5810] loop2: detected capacity change from 0 to 512 [ 195.805568][ T5810] EXT2-fs (loop2): warning: mounting ext3 filesystem as ext2 [ 197.550138][ T5775] REISERFS (device loop4): Using tea hash to sort names [ 197.559651][ T5775] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 197.635094][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.636800][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.957478][ T5892] fuse: Unknown parameter '0x0000000000000003' [ 199.033807][ T5886] netlink: 'syz.3.534': attribute type 1 has an invalid length. [ 199.395158][ T5901] device syzkaller0 entered promiscuous mode [ 199.467539][ T5886] bond1 (unregistering): Released all slaves [ 201.050035][ T5920] loop1: detected capacity change from 0 to 256 [ 202.995928][ T5978] netlink: 'syz.0.560': attribute type 1 has an invalid length. [ 204.126502][ T5978] bond1 (unregistering): Released all slaves [ 204.144863][ T5988] fuse: Unknown parameter 'fd0x0000000000000003' [ 206.076173][ T26] audit: type=1326 audit(206.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb84359a8 code=0x7ffc0000 [ 206.088802][ T26] audit: type=1326 audit(206.050:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffb84359a8 code=0x7ffc0000 [ 206.122994][ T6015] loop3: detected capacity change from 0 to 256 [ 206.133185][ T26] audit: type=1326 audit(206.050:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb84359a8 code=0x7ffc0000 [ 206.175790][ T26] audit: type=1326 audit(206.050:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb84359a8 code=0x7ffc0000 [ 206.210221][ T26] audit: type=1326 audit(206.050:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffffb84359a8 code=0x7ffc0000 [ 206.216359][ T26] audit: type=1326 audit(206.080:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb85497fc code=0x7ffc0000 [ 206.222485][ T26] audit: type=1326 audit(206.080:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb85497fc code=0x7ffc0000 [ 206.228414][ T26] audit: type=1326 audit(206.080:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb85497fc code=0x7ffc0000 [ 206.234474][ T26] audit: type=1326 audit(206.080:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb85497fc code=0x7ffc0000 [ 206.240574][ T26] audit: type=1326 audit(206.090:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6010 comm="syz.1.570" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb85497fc code=0x7ffc0000 [ 206.281806][ T6018] loop0: detected capacity change from 0 to 16 [ 206.409962][ T6018] erofs: (device loop0): mounted with root inode @ nid 36. [ 209.187259][ T6047] netlink: 'syz.4.574': attribute type 1 has an invalid length. [ 209.826840][ T6047] bond3 (unregistering): Released all slaves [ 210.173063][ T6065] fuse: Unknown parameter 'fd0x0000000000000003' [ 210.543849][ T6073] loop2: detected capacity change from 0 to 16 [ 210.560026][ T6073] erofs: (device loop2): mounted with root inode @ nid 36. [ 210.662532][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.664792][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.666935][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.679444][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.841305][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.843912][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.846001][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.848245][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.850967][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.853116][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.855281][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.857339][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.859578][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.861819][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.863864][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.865967][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.868034][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.870224][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.872881][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.875011][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.877231][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.879352][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.881605][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.883809][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.885837][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.887994][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.890169][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.892367][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.894435][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.896666][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.899013][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.901376][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 210.903955][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.331968][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.653720][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.661206][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.667054][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.671579][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.677494][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.680465][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.686182][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.702647][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.704782][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.706925][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.709008][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.743584][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.745896][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.748256][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.751948][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.915371][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.918084][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.920166][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.929748][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.932097][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.934349][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.936550][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.938664][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.940828][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.943006][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.945160][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.947259][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.949416][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.951714][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.953797][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.956136][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.958264][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.960543][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.962670][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.964759][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.967021][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 211.969315][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 212.469393][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 212.594522][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 212.596606][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 212.598663][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 212.675348][ T6105] udc-core: couldn't find an available UDC or it's busy [ 212.677332][ T6105] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 213.057877][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.060177][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.062459][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.064524][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.066680][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.068888][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.071067][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.073190][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.075356][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.077540][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.079615][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.081887][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.083951][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.086023][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.088103][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.090199][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.092552][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.094907][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.097162][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.099300][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.101499][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.103668][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.105717][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.107887][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.110083][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.112366][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.114515][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.116725][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.118786][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.120924][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.123096][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.125741][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.127934][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.130080][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.132481][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.134681][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.136719][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.138868][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.141146][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.143357][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.145456][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.147633][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.149700][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.152089][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.154204][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.156310][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.158471][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.160711][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.162890][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.165015][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.167221][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.169217][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.171518][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.173643][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.175877][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.178105][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.180317][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.182527][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.184806][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.186929][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.189131][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.191377][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.193647][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.195877][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.198056][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.200276][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.240079][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.242416][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.245323][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.247701][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.249965][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.256615][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: unknown main item tag 0x0 [ 213.257939][ T6109] netlink: 'syz.2.592': attribute type 1 has an invalid length. [ 213.262718][ T4015] hid-generic 2BD0:FFFFFFF7:8000.0003: hidraw0: HID v0.0d Device [syz1] on syz0 [ 213.306822][ T6109] bond2 (unregistering): Released all slaves [ 213.452825][ T6119] udc-core: couldn't find an available UDC or it's busy [ 213.458579][ T6119] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 213.549775][ T6125] udc-core: couldn't find an available UDC or it's busy [ 213.552022][ T6125] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 214.404341][ T6125] udc-core: couldn't find an available UDC or it's busy [ 214.415192][ T6125] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 214.578060][ T6130] ucma_write: process 297 (syz.0.598) changed security contexts after opening file descriptor, this is not allowed. [ 214.580580][ T6128] fido_id[6128]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 216.558497][ T6151] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 216.672796][ T6151] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.675402][ T6151] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.677824][ T6151] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.716521][ T6151] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 216.761441][ T6151] bond1: (slave geneve2): making interface the new active one [ 216.785244][ T6151] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 216.807646][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.606'. [ 216.849046][ T6166] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.327454][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 218.895663][ T6178] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 220.355405][ T6198] binder: 6196:6198 tried to acquire reference to desc 0, got 1 instead [ 220.424869][ T6202] binder: 6196:6202 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 220.442543][ T6202] binder: 6202 RLIMIT_NICE not set [ 220.448395][ T6202] binder: 6202 RLIMIT_NICE not set [ 220.457085][ T6202] binder: 6202 RLIMIT_NICE not set [ 220.458983][ T6202] binder_alloc: 6196: binder_alloc_buf, no vma [ 220.472584][ T6202] binder: 6196:6202 transaction failed 29189/-3, size 0-0 line 3085 [ 220.479593][ T6202] binder: send failed reply for transaction 27 to 6196:6198 [ 220.528206][ T4015] binder: undelivered TRANSACTION_ERROR: 29190 [ 220.586786][ T6178] bond2 (unregistering): Released all slaves [ 221.308400][ T6201] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 221.318970][ T6201] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 222.352240][ T6221] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 222.499052][ T6221] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.530528][ T6221] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.533028][ T6221] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.535399][ T6221] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.539369][ T6221] bond3: (slave geneve2): making interface the new active one [ 222.543312][ T6221] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 222.618043][ T6221] netlink: 28 bytes leftover after parsing attributes in process `syz.4.627'. [ 222.622060][ T6221] 8021q: adding VLAN 0 to HW filter on device bond3 [ 223.233705][ T6255] loop9: detected capacity change from 0 to 8 [ 224.227577][ T6255] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 224.229271][ T6255] loop9: partition table partially beyond EOD, truncated [ 224.232190][ T6255] loop9: p1 size 81768186 extends beyond EOD, truncated [ 224.475231][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 226.362633][ T6272] netlink: 'syz.4.641': attribute type 1 has an invalid length. [ 226.476146][ T6272] bond4 (unregistering): Released all slaves [ 226.576691][ T6282] netlink: 'syz.0.645': attribute type 1 has an invalid length. [ 226.663071][ T6287] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.686568][ T6287] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.689005][ T6287] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.768162][ T6287] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 226.772233][ T6287] bond1: (slave geneve2): making interface the new active one [ 226.775716][ T6287] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 226.900254][ T6282] netlink: 28 bytes leftover after parsing attributes in process `syz.0.645'. [ 226.904649][ T6282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.157800][ T6306] loop2: detected capacity change from 0 to 16 [ 227.189972][ T6308] udc-core: couldn't find an available UDC or it's busy [ 227.200476][ T6308] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 227.233159][ T6306] erofs: (device loop2): mounted with root inode @ nid 36. [ 227.502370][ T6306] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 227.517447][ T6306] erofs: (device loop2): z_erofs_readpage: failed to read, err [-117] [ 227.873747][ T6315] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 227.876696][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 227.879552][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 227.882214][ T6315] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 227.884830][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 227.887589][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 227.890273][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 227.895474][ T6315] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 227.898187][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 227.901587][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 227.904326][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 227.906947][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 227.909730][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 227.912416][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 227.916786][ T6315] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 227.919373][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 227.922015][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 227.924878][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 227.927410][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36 [ 227.930287][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 227.932916][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36 [ 227.935705][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 227.939172][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36 [ 227.941965][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 227.945380][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 227.949923][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 227.952604][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 227.955994][ T6315] attempt to access beyond end of device [ 227.955994][ T6315] loop2: rw=524288, want=312, limit=16 [ 227.959924][ T6315] attempt to access beyond end of device [ 227.959924][ T6315] loop2: rw=524288, want=1049280, limit=16 [ 227.965225][ T6315] attempt to access beyond end of device [ 227.965225][ T6315] loop2: rw=524288, want=24, limit=16 [ 227.969194][ T6315] attempt to access beyond end of device [ 227.969194][ T6315] loop2: rw=524288, want=736, limit=16 [ 227.972918][ T6315] attempt to access beyond end of device [ 227.972918][ T6315] loop2: rw=524288, want=776, limit=16 [ 227.976821][ T6315] attempt to access beyond end of device [ 227.976821][ T6315] loop2: rw=524288, want=848, limit=16 [ 227.980619][ T6315] attempt to access beyond end of device [ 227.980619][ T6315] loop2: rw=524288, want=13478624104, limit=16 [ 227.985228][ T6315] attempt to access beyond end of device [ 227.985228][ T6315] loop2: rw=524288, want=13478624080, limit=16 [ 228.003783][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 228.006570][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 228.009212][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 228.012418][ T6315] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 228.015042][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 228.017592][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 228.020408][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 228.023025][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 228.025766][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 228.028181][ T6315] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 228.030647][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 228.033258][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 228.035930][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 228.038598][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 228.041203][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 228.043969][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 228.046541][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 228.049326][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 228.051999][ T6315] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 228.054610][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 228.057279][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 228.060200][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 228.063143][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 228.065936][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 228.068545][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 228.360473][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 228.363289][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 228.367352][ T6315] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 228.369966][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 228.372597][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 228.375452][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 228.378175][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 228.381079][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 228.384247][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 228.387236][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 228.389879][ T6315] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 228.392600][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 228.395437][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 228.398122][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 228.400930][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 228.403729][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 228.406454][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 228.409534][ T6315] erofs: (device loop2): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36 [ 228.412262][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 228.414731][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 228.417550][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 228.420213][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 228.422784][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 228.425636][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 228.428226][ T6315] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 228.430941][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 228.433534][ T6315] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 228.436062][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 228.438597][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 228.441028][ T6315] erofs: (device loop2): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 228.443594][ T6315] attempt to access beyond end of device [ 228.443594][ T6315] loop2: rw=524288, want=56, limit=16 [ 228.446768][ T6315] attempt to access beyond end of device [ 228.446768][ T6315] loop2: rw=524288, want=24, limit=16 [ 228.711654][ T6323] loop0: detected capacity change from 0 to 16 [ 229.345445][ T6323] erofs: (device loop0): mounted with root inode @ nid 36. [ 229.646683][ T6323] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 229.654194][ T6323] erofs: (device loop0): z_erofs_readpage: failed to read, err [-117] [ 230.032791][ T6342] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 230.035794][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 230.038793][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 230.041688][ T6342] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 230.044552][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 230.047266][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 230.049968][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 230.052989][ T6342] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 230.055873][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 230.058666][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 230.061344][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 230.063969][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 230.066798][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 230.069402][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 230.072386][ T6342] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 230.075058][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 230.077683][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 230.080773][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 230.083506][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36 [ 230.086507][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 230.089541][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36 [ 230.093039][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 230.096020][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36 [ 230.099265][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 230.102275][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 230.105251][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 230.108091][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 230.114470][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 230.117476][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 230.120086][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 230.122798][ T6342] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 230.126046][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 230.128559][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 230.133727][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 230.136463][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 230.139347][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 230.142046][ T6342] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 230.144689][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 230.147264][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 230.149895][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 230.152675][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 230.155373][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 230.157946][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 230.160626][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 230.163418][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 230.166090][ T6342] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 230.168722][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 230.171351][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 230.174129][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 230.176705][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 230.179289][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 230.182028][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 230.184647][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 230.187508][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 230.190226][ T6342] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 230.193054][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 230.195634][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 230.198531][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 230.201259][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 230.204201][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 230.206800][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 230.209289][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 230.211957][ T6342] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 230.214499][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 230.217049][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 230.219780][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 230.222560][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 230.225089][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 230.228640][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 230.311338][ T6342] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36 [ 230.314153][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 230.316716][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 230.319545][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 230.322204][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 230.324782][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 230.327758][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 230.331444][ T6342] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 230.334400][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 230.337137][ T6342] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 230.339754][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 230.342490][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 230.345088][ T6342] erofs: (device loop0): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 230.835910][ T6348] netlink: 'syz.1.662': attribute type 1 has an invalid length. [ 230.872212][ T6348] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.874773][ T6348] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.877183][ T6348] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.879762][ T6348] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 230.885540][ T6348] bond1: (slave geneve2): making interface the new active one [ 230.888652][ T6348] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 230.909386][ T6351] netlink: 'syz.4.664': attribute type 1 has an invalid length. [ 230.982808][ T6358] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 230.987383][ T6348] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 231.009179][ T6351] bond4 (unregistering): Released all slaves [ 231.043087][ T6364] xt_addrtype: ipv6 does not support BROADCAST matching [ 231.170701][ T6360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.662'. [ 231.178811][ T6360] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.277609][ T6366] fuse: Unknown parameter 'fd0x0000000000000006' [ 231.281593][ T6366] netlink: 'syz.2.669': attribute type 4 has an invalid length. [ 233.241057][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 233.970010][ T6391] loop2: detected capacity change from 0 to 8192 [ 234.220894][ T6396] 9pnet_virtio: no channels available for device syz [ 234.931656][ T6391] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 234.989614][ T6400] loop3: detected capacity change from 0 to 16 [ 235.062066][ T6400] erofs: (device loop3): mounted with root inode @ nid 36. [ 235.207712][ T6400] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 235.236928][ T6400] erofs: (device loop3): z_erofs_readpage: failed to read, err [-117] [ 235.634667][ T6417] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 235.637639][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 235.640339][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 235.643161][ T6417] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 235.645997][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 40 @ nid 36 [ 235.648769][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 235.651597][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 235.654505][ T6417] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 235.657267][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 235.660180][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 235.663067][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 235.665785][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 235.668516][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 235.671298][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 235.674236][ T6417] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 15 of nid 36 [ 235.677027][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 235.679689][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 65535 of nid 36 [ 235.682742][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 15 @ nid 36 [ 235.685560][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 61439 of nid 36 [ 235.688509][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 14 @ nid 36 [ 235.691314][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 57343 of nid 36 [ 235.694232][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 13 @ nid 36 [ 235.697070][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 36863 of nid 36 [ 235.700012][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 235.702834][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 36 [ 235.705612][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36 [ 235.708411][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 0 @ nid 36 [ 235.711299][ T6417] handle_bad_sector: 16 callbacks suppressed [ 235.711314][ T6417] attempt to access beyond end of device [ 235.711314][ T6417] loop3: rw=524288, want=312, limit=16 [ 235.716456][ T6417] attempt to access beyond end of device [ 235.716456][ T6417] loop3: rw=524288, want=1049280, limit=16 [ 235.720021][ T6417] attempt to access beyond end of device [ 235.720021][ T6417] loop3: rw=524288, want=24, limit=16 [ 235.723183][ T6417] attempt to access beyond end of device [ 235.723183][ T6417] loop3: rw=524288, want=736, limit=16 [ 235.726488][ T6417] attempt to access beyond end of device [ 235.726488][ T6417] loop3: rw=524288, want=776, limit=16 [ 235.729658][ T6417] attempt to access beyond end of device [ 235.729658][ T6417] loop3: rw=524288, want=848, limit=16 [ 235.755378][ T6417] attempt to access beyond end of device [ 235.755378][ T6417] loop3: rw=524288, want=13478624104, limit=16 [ 235.794583][ T6417] attempt to access beyond end of device [ 235.794583][ T6417] loop3: rw=524288, want=13478624080, limit=16 [ 235.832001][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 235.834950][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 235.837527][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 235.840173][ T6417] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 235.842880][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 235.845497][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 235.848364][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 235.851310][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 344063 of nid 36 [ 235.854154][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 235.856735][ T6417] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 235.859533][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 235.932526][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 235.935269][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 235.937787][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 79 @ nid 36 [ 235.940244][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 235.942812][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 235.945296][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 235.948082][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 235.950622][ T6417] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 235.953224][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 75 @ nid 36 [ 235.955805][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 307199 of nid 36 [ 235.958600][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 74 @ nid 36 [ 235.961289][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 235.963841][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 235.966420][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 235.968929][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 290815 of nid 36 [ 235.971839][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 236.000509][ T6417] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 64 of nid 36 [ 236.003218][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 236.005904][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 266239 of nid 36 [ 236.008909][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 236.011658][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 262143 of nid 36 [ 236.014483][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 236.020456][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 236.026508][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 236.029243][ T6417] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 236.032088][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 58 @ nid 36 [ 236.035109][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 236.038196][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 236.076084][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 236.078692][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 236.081249][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 236.083892][ T6417] erofs: (device loop3): z_erofs_extent_lookback: unknown type 3 @ lcn 50 of nid 36 [ 236.086510][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 236.089066][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 208895 of nid 36 [ 236.091953][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 236.094501][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 236.097102][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 236.099926][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 236.102465][ T6417] erofs: (device loop3): z_erofs_map_blocks_iter: unknown type 3 @ offset 196607 of nid 36 [ 236.105215][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 47 @ nid 36 [ 236.107877][ T6417] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 236.110469][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 46 @ nid 36 [ 236.112958][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 45 @ nid 36 [ 236.115451][ T6417] erofs: (device loop3): z_erofs_readahead: readahead error at page 44 @ nid 36 [ 236.118193][ T6417] attempt to access beyond end of device [ 236.118193][ T6417] loop3: rw=524288, want=56, limit=16 [ 236.121370][ T6417] attempt to access beyond end of device [ 236.121370][ T6417] loop3: rw=524288, want=24, limit=16 [ 236.635781][ T6420] team0: No ports can be present during mode change [ 236.747575][ T6422] netlink: 'syz.0.687': attribute type 1 has an invalid length. [ 236.850178][ T6422] bond2 (unregistering): Released all slaves [ 237.010317][ T26] kauditd_printk_skb: 201 callbacks suppressed [ 237.010329][ T26] audit: type=1326 audit(236.970:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d0229a8 code=0x7ffc0000 [ 237.023262][ T26] audit: type=1326 audit(236.990:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff9d0229a8 code=0x7ffc0000 [ 237.029265][ T26] audit: type=1326 audit(236.990:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d0229a8 code=0x7ffc0000 [ 237.074378][ T26] audit: type=1326 audit(236.990:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=267 compat=0 ip=0xffff9d0229a8 code=0x7ffc0000 [ 237.089557][ T26] audit: type=1326 audit(236.990:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6433 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9d0229a8 code=0x7ffc0000 [ 237.129418][ T6438] udc-core: couldn't find an available UDC or it's busy [ 237.146990][ T6438] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 237.347133][ T6442] loop1: detected capacity change from 0 to 8192 [ 237.371306][ T6442] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 238.551692][ T6452] tmpfs: Bad value for 'mpol' [ 238.676050][ T6446] loop1: detected capacity change from 0 to 2048 [ 238.738410][ T6446] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 238.744093][ T4578] udevd[4578]: incorrect nilfs2 checksum on /dev/loop1 [ 238.788346][ T6463] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 238.910500][ T13] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 240.290810][ T13] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.392360][ T6488] tmpfs: Bad value for 'mpol' [ 240.943708][ T6487] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 241.034606][ T13] usb 1-1: not running at top speed; connect to a high speed hub [ 241.130079][ T6490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.161055][ T13] usb 1-1: config 1 has an invalid descriptor of length 203, skipping remainder of the config [ 241.180976][ T13] usb 1-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 241.187788][ T13] usb 1-1: config 1 interface 0 has no altsetting 0 [ 242.003649][ T6487] bond2 (unregistering): Released all slaves [ 242.085727][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.088567][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.091628][ T13] usb 1-1: Product: syz [ 242.140745][ T13] usb 1-1: can't set config #1, error -71 [ 242.143735][ T13] usb 1-1: USB disconnect, device number 11 [ 246.107809][ T6549] netlink: 'syz.3.731': attribute type 1 has an invalid length. [ 246.821893][ T6549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.883800][ T6549] bond2 (unregistering): Released all slaves [ 250.353062][ T4036] Bluetooth: Wrong link type (-22) [ 253.745036][ T6610] loop4: detected capacity change from 0 to 512 [ 253.758733][ T6612] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 253.956069][ T6610] EXT2-fs (loop4): warning: mounting ext3 filesystem as ext2 [ 253.989912][ T6612] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.326823][ T4093] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 256.329145][ T4093] Bluetooth: hci3: Injecting HCI hardware error event [ 256.331348][ T4029] Bluetooth: hci3: hardware error 0x00 [ 256.344340][ T6612] bond2 (unregistering): Released all slaves [ 259.071915][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.073765][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.514657][ T6667] loop3: detected capacity change from 0 to 512 [ 260.527264][ T6667] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 261.509983][ T6679] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 261.582775][ T6679] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.101286][ T6703] lo speed is unknown, defaulting to 1000 [ 268.258488][ T6734] netlink: 'syz.3.784': attribute type 1 has an invalid length. [ 268.299626][ T6736] loop2: detected capacity change from 0 to 2048 [ 268.317084][ T6734] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.382602][ T6736] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.352400][ T6740] loop2: detected capacity change from 0 to 32768 [ 270.486640][ T6740] XFS (loop2): Mounting V5 Filesystem [ 270.692412][ T6740] XFS (loop2): Ending clean mount [ 273.072312][ T4032] XFS (loop2): Unmounting Filesystem [ 273.381295][ T6784] loop4: detected capacity change from 0 to 2048 [ 273.418471][ T6784] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 273.831754][ T6792] loop2: detected capacity change from 0 to 128 [ 275.481405][ T6798] netlink: 'syz.4.798': attribute type 1 has an invalid length. [ 276.672723][ T6802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 277.853997][ T6822] tmpfs: Bad value for 'mpol' [ 281.493982][ T6841] loop0: detected capacity change from 0 to 32768 [ 281.513774][ T6838] loop1: detected capacity change from 0 to 32768 [ 282.571773][ T6838] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 282.585480][ T6841] XFS (loop0): Mounting V5 Filesystem [ 282.725100][ T4024] (syz-executor,4024,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 282.733035][ T6861] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 282.737620][ T6841] XFS (loop0): Ending clean mount [ 282.746417][ T4024] ocfs2: Unmounting device (7,1) on (node local) [ 282.780073][ T6861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 282.919782][ T4030] XFS (loop0): Unmounting Filesystem [ 282.973891][ T6864] loop1: detected capacity change from 0 to 128 [ 284.474026][ T6874] loop0: detected capacity change from 0 to 128 [ 284.547659][ T6871] udc-core: couldn't find an available UDC or it's busy [ 284.549606][ T6871] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 287.691535][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.824'. [ 288.533150][ T6902] udc-core: couldn't find an available UDC or it's busy [ 288.535209][ T6902] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 288.797046][ T6907] netlink: 'syz.4.828': attribute type 1 has an invalid length. [ 289.826260][ T6907] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.948669][ T6901] loop2: detected capacity change from 0 to 32768 [ 290.036975][ T6901] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 290.103717][ T4032] (syz-executor,4032,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 290.119009][ T4032] ocfs2: Unmounting device (7,2) on (node local) [ 290.248718][ T6929] input: syz0 as /devices/virtual/input/input7 [ 290.440353][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.837'. [ 292.405390][ T6965] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 293.093254][ T6967] 8021q: adding VLAN 0 to HW filter on device bond4 [ 293.538840][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.850'. [ 294.264757][ T6961] loop4: detected capacity change from 0 to 32768 [ 294.291709][ T6989] udc-core: couldn't find an available UDC or it's busy [ 294.293628][ T6989] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 294.457800][ T6961] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 294.529886][ T4025] (syz-executor,4025,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 294.536900][ T4025] ocfs2: Unmounting device (7,4) on (node local) [ 295.625316][ T7008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.858'. [ 295.627979][ T7008] device bridge_slave_1 left promiscuous mode [ 295.629865][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.612468][ T26] audit: type=1326 audit(295.710:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.4.857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 296.618641][ T26] audit: type=1326 audit(295.710:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.4.857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 296.768107][ T26] audit: type=1326 audit(295.750:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.4.857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=23 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 296.789214][ T26] audit: type=1326 audit(295.750:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.4.857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 296.796318][ T7008] device bridge_slave_0 left promiscuous mode [ 296.797990][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.846448][ T26] audit: type=1326 audit(295.780:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.4.857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 296.853107][ T26] audit: type=1326 audit(295.850:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.4.857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=47 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 296.859414][ T26] audit: type=1326 audit(295.850:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.4.857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 296.867191][ T26] audit: type=1326 audit(295.850:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.4.857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 296.879337][ T26] audit: type=1326 audit(295.850:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.4.857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 297.118514][ T26] audit: type=1326 audit(295.850:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7001 comm="syz.4.857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 297.894270][ T7024] netlink: 'syz.1.865': attribute type 1 has an invalid length. [ 299.062482][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.868'. [ 299.260726][ T7037] 8021q: adding VLAN 0 to HW filter on device bond2 [ 299.337390][ T7043] bond2 (unregistering): Released all slaves [ 301.640350][ T7047] loop3: detected capacity change from 0 to 32768 [ 302.541791][ T7047] JBD2: recovery failed [ 302.543097][ T7047] (syz.3.869,7047,1):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 302.545707][ T7047] (syz.3.869,7047,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 302.566517][ T7047] (syz.3.869,7047,1):ocfs2_check_volume:2493 ERROR: status = -5 [ 302.579974][ T7047] (syz.3.869,7047,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 302.633355][ T7047] (syz.3.869,7047,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 302.791356][ T7079] udc-core: couldn't find an available UDC or it's busy [ 302.793320][ T7079] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 303.199835][ T7081] udc-core: couldn't find an available UDC or it's busy [ 303.201853][ T7081] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 306.626461][ T7112] netlink: 'syz.0.888': attribute type 1 has an invalid length. [ 306.726130][ T7113] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.781407][ T7118] bond2 (unregistering): Released all slaves [ 307.068345][ T7125] binder: 7116:7125 ioctl c018620c 20000380 returned -1 [ 308.145411][ T7144] fuse: Bad value for 'fd' [ 308.391482][ T7152] netlink: 12 bytes leftover after parsing attributes in process `syz.3.897'. [ 309.582083][ T7151] tipc: Cannot configure node identity twice [ 312.291427][ T25] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 312.313296][ T7199] netlink: 'syz.4.914': attribute type 1 has an invalid length. [ 312.367754][ T7199] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.398912][ T7199] bond6 (unregistering): Released all slaves [ 313.500588][ T7211] 9pnet: Insufficient options for proto=fd [ 313.760563][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.763799][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.766461][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 313.780464][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 313.783426][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.651820][ T25] usb 1-1: config 0 descriptor?? [ 315.610809][ T25] usbhid 1-1:0.0: can't add hid device: -71 [ 315.612695][ T25] usbhid: probe of 1-1:0.0 failed with error -71 [ 316.309940][ T25] usb 1-1: USB disconnect, device number 12 [ 316.439452][ T7254] udc-core: couldn't find an available UDC or it's busy [ 316.544030][ T7254] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 317.643576][ T7264] udc-core: couldn't find an available UDC or it's busy [ 317.656855][ T7264] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 318.184938][ T7279] udc-core: couldn't find an available UDC or it's busy [ 318.186827][ T7279] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 320.517515][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.519556][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.600801][ T4015] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 320.965481][ T4015] usb 1-1: Using ep0 maxpacket: 32 [ 322.801791][ T4015] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.860500][ T4015] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 322.862716][ T4015] usb 1-1: can't read configurations, error -71 [ 324.031061][ T7353] udc-core: couldn't find an available UDC or it's busy [ 324.033056][ T7353] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 325.555292][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 325.606936][ T7377] udc-core: couldn't find an available UDC or it's busy [ 325.608984][ T7377] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 325.991854][ T7384] netlink: 'syz.0.988': attribute type 6 has an invalid length. [ 326.187801][ T7388] udc-core: couldn't find an available UDC or it's busy [ 326.189774][ T7388] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 326.839837][ T7399] Can't find a SQUASHFS superblock on nullb0 [ 328.857018][ T7411] netlink: 'syz.0.983': attribute type 10 has an invalid length. [ 329.281708][ T7411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.297883][ T7411] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 330.601546][ T7423] udc-core: couldn't find an available UDC or it's busy [ 330.610749][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 330.610762][ T26] audit: type=1326 audit(330.580:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7421 comm="syz.0.990" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x0 [ 330.611000][ T7423] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 330.980587][ T4072] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 331.182056][ T7433] Can't find a SQUASHFS superblock on nullb0 [ 331.270756][ T4072] usb 1-1: Using ep0 maxpacket: 8 [ 331.870988][ T4072] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 331.874277][ T4072] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 331.879889][ T4072] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 331.921855][ T4072] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 331.929695][ T4072] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.105295][ T4072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.032777][ T4072] usb 1-1: GET_CAPABILITIES returned 0 [ 333.034395][ T4072] usbtmc 1-1:16.0: can't read capabilities [ 333.051553][ T7443] binder: 7443 RLIMIT_NICE not set [ 334.402678][ T7452] netlink: 'syz.4.999': attribute type 10 has an invalid length. [ 334.529130][ T4072] usb 1-1: USB disconnect, device number 15 [ 334.549807][ T7452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.554648][ T7452] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 336.396735][ T7475] udc-core: couldn't find an available UDC or it's busy [ 336.398737][ T7475] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 337.590517][ T7486] Can't find a SQUASHFS superblock on nullb0 [ 338.217721][ T7496] udc-core: couldn't find an available UDC or it's busy [ 338.227969][ T7496] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 338.415500][ T7498] udc-core: couldn't find an available UDC or it's busy [ 338.417548][ T7498] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 339.451148][ T7508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1015'. [ 340.628409][ T7512] netlink: 'syz.1.1013': attribute type 10 has an invalid length. [ 340.662593][ T7512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.667350][ T7512] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 340.823544][ T7523] xt_addrtype: ipv6 does not support BROADCAST matching [ 340.897900][ T7527] udc-core: couldn't find an available UDC or it's busy [ 340.899942][ T7527] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 340.992393][ T7529] netlink: 'syz.3.1021': attribute type 1 has an invalid length. [ 341.566755][ T7539] udc-core: couldn't find an available UDC or it's busy [ 341.589457][ T7539] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 342.976800][ T7562] udc-core: couldn't find an available UDC or it's busy [ 342.978927][ T7562] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 343.201091][ T7563] netlink: 'syz.3.1030': attribute type 10 has an invalid length. [ 344.231851][ T7565] udc-core: couldn't find an available UDC or it's busy [ 344.233936][ T7565] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 344.565915][ T7571] udc-core: couldn't find an available UDC or it's busy [ 344.567878][ T7571] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 345.674839][ T7578] netlink: 'syz.4.1038': attribute type 1 has an invalid length. [ 345.897176][ T7585] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1040'. [ 346.242881][ T7592] ODEBUG: Out of memory. ODEBUG disabled [ 349.139623][ T7610] netlink: 'syz.2.1048': attribute type 10 has an invalid length. [ 349.160067][ T7610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.164642][ T7610] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 349.219946][ T7592] syz.0.1043 (7592): drop_caches: 2 [ 351.020528][ T7618] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1049'. [ 352.205119][ T7635] netlink: 'syz.3.1056': attribute type 1 has an invalid length. [ 354.110274][ T7663] netlink: 'syz.0.1064': attribute type 10 has an invalid length. [ 354.174888][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.177618][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.201214][ T7664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.203400][ T7664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.212557][ T7664] bond0: (slave batadv0): Releasing backup interface [ 359.135799][ T7696] udc-core: couldn't find an available UDC or it's busy [ 359.355112][ T7699] 9pnet_virtio: no channels available for device syz [ 360.099463][ T7696] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 360.168129][ T7704] udc-core: couldn't find an available UDC or it's busy [ 360.170253][ T7704] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 361.426577][ T7722] netlink: 'syz.4.1079': attribute type 10 has an invalid length. [ 362.315036][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.319593][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.330640][ T7722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.332774][ T7722] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.347302][ T7722] bond0: (slave batadv0): Releasing backup interface [ 363.717862][ T7745] udc-core: couldn't find an available UDC or it's busy [ 363.748561][ T7745] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 363.825648][ T7747] tipc: Enabled bearer , priority 0 [ 363.857552][ T7750] udc-core: couldn't find an available UDC or it's busy [ 363.860080][ T7750] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 363.866843][ T7747] tipc: Disabling bearer [ 365.223548][ T7780] netlink: 'syz.2.1101': attribute type 10 has an invalid length. [ 365.242498][ T7781] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1103'. [ 365.264022][ T7780] bond0: (slave batadv0): Releasing backup interface [ 366.136182][ T7791] input: syz0 as /devices/virtual/input/input8 [ 366.405844][ T7802] udc-core: couldn't find an available UDC or it's busy [ 366.407915][ T7802] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 366.426102][ T7804] udc-core: couldn't find an available UDC or it's busy [ 366.428082][ T7804] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 369.143688][ T26] audit: type=1326 audit(369.110:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 369.153511][ T26] audit: type=1326 audit(369.110:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 369.159324][ T26] audit: type=1326 audit(369.110:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 369.247570][ T26] audit: type=1326 audit(369.210:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 369.255994][ T26] audit: type=1326 audit(369.220:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 369.270417][ T26] audit: type=1326 audit(369.230:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 369.286274][ T26] audit: type=1326 audit(369.230:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 369.298335][ T26] audit: type=1326 audit(369.230:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffaaab39a8 code=0x7ffc0000 [ 369.312803][ T26] audit: type=1326 audit(369.240:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaabc77fc code=0x7ffc0000 [ 369.329544][ T26] audit: type=1326 audit(369.240:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.4.1123" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaabc77fc code=0x7ffc0000 [ 369.388918][ T7840] device veth1_macvtap left promiscuous mode [ 369.642510][ T7849] netlink: 'syz.0.1137': attribute type 1 has an invalid length. [ 369.664456][ T7849] 8021q: adding VLAN 0 to HW filter on device bond2 [ 369.690647][ T7849] bond2 (unregistering): Released all slaves [ 371.892780][ T7866] udc-core: couldn't find an available UDC or it's busy [ 371.894736][ T7866] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 372.491269][ T13] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 373.110530][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 373.230876][ T13] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 373.234111][ T13] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 373.237526][ T13] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 373.320917][ T13] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 373.324172][ T13] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 373.327375][ T13] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 373.410764][ T13] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 373.412814][ T13] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 373.416060][ T13] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 373.650633][ T13] usb 1-1: string descriptor 0 read error: -22 [ 373.652646][ T13] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 373.655707][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.703679][ T13] adutux 1-1:168.0: interrupt endpoints not found [ 375.160243][ T5394] usb 1-1: USB disconnect, device number 16 [ 375.618755][ T7910] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1146'. [ 375.687843][ T7915] netlink: 'syz.2.1148': attribute type 1 has an invalid length. [ 375.707106][ T7915] 8021q: adding VLAN 0 to HW filter on device bond3 [ 375.929862][ T7915] bond3 (unregistering): Released all slaves [ 376.557752][ T7934] udc-core: couldn't find an available UDC or it's busy [ 376.559812][ T7934] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 376.664207][ T7937] binder: 7936:7937 ioctl c0306201 20000080 returned -14 [ 376.673419][ T7937] binder: 7936:7937 tried to acquire reference to desc 0, got 1 instead [ 376.679483][ T7937] binder: 7936:7937 ioctl c0306201 20000140 returned -14 [ 376.684855][ T5394] binder: undelivered TRANSACTION_COMPLETE [ 376.703287][ T5394] binder: undelivered transaction 33, process died. [ 379.454928][ T7959] udc-core: couldn't find an available UDC or it's busy [ 379.456806][ T7959] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 379.611953][ T7963] Bluetooth: hci5: Frame reassembly failed (-84) [ 381.300423][ T4029] Bluetooth: hci5: sending frame failed (-49) [ 381.583684][ T7979] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 381.638910][ T7983] 8021q: adding VLAN 0 to HW filter on device bond7 [ 381.693830][ T7979] bond7 (unregistering): Released all slaves [ 382.070208][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.075972][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.571294][ T5080] Bluetooth: hci5: command 0x1003 tx timeout [ 383.573037][ T7968] Bluetooth: hci5: sending frame failed (-49) [ 384.167308][ T8017] block nbd0: NBD_DISCONNECT [ 384.772919][ T8018] udc-core: couldn't find an available UDC or it's busy [ 384.775095][ T8018] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 385.011015][ T8022] udc-core: couldn't find an available UDC or it's busy [ 385.012982][ T8022] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 385.593672][ T8030] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1189'. [ 385.763272][ T4072] Bluetooth: hci5: command 0x1001 tx timeout [ 385.767533][ T7968] Bluetooth: hci5: sending frame failed (-49) [ 385.773627][ T8030] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1189'. [ 387.938818][ T1533] Bluetooth: hci5: command 0x1009 tx timeout [ 388.323390][ T8054] netlink: 'syz.3.1196': attribute type 1 has an invalid length. [ 388.358958][ T8054] 8021q: adding VLAN 0 to HW filter on device bond7 [ 388.372383][ T8057] udc-core: couldn't find an available UDC or it's busy [ 388.374577][ T8057] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 388.421688][ T8054] bond7 (unregistering): Released all slaves [ 389.337268][ T8064] udc-core: couldn't find an available UDC or it's busy [ 389.339382][ T8064] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 389.380033][ T8066] netlink: 'syz.0.1211': attribute type 1 has an invalid length. [ 389.401489][ T8066] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.405800][ T8072] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'. [ 389.413844][ T8066] bond2 (unregistering): Released all slaves [ 391.097698][ T8107] syz.0.1219 sent an empty control message without MSG_MORE. [ 395.480264][ T8134] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 395.548626][ T8134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.609157][ T8134] bond2 (unregistering): Released all slaves [ 395.643849][ T8143] udc-core: couldn't find an available UDC or it's busy [ 395.654100][ T8143] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 399.855397][ T8179] udc-core: couldn't find an available UDC or it's busy [ 399.857396][ T8179] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 400.779990][ T8182] netlink: 'syz.0.1246': attribute type 1 has an invalid length. [ 400.827864][ T8182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.153689][ T8187] bond2 (unregistering): Released all slaves [ 401.452153][ T8194] device syzkaller1 entered promiscuous mode [ 405.845644][ T8243] netlink: 'syz.0.1263': attribute type 1 has an invalid length. [ 405.919413][ T8243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 406.001106][ T8243] bond2 (unregistering): Released all slaves [ 406.049315][ T8249] tipc: Can't bind to reserved service type 2 [ 406.093570][ T8253] udc-core: couldn't find an available UDC or it's busy [ 406.095679][ T8253] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 406.247551][ T8258] udc-core: couldn't find an available UDC or it's busy [ 406.264849][ T8258] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 407.652831][ T4092] hid-generic 0005:10CF:000B.0004: item fetching failed at offset 0/1 [ 407.655485][ T4092] hid-generic: probe of 0005:10CF:000B.0004 failed with error -22 [ 408.651670][ T8296] udc-core: couldn't find an available UDC or it's busy [ 408.654122][ T8296] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 408.805975][ T8304] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 408.808270][ T8304] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 408.815774][ T8304] vhci_hcd vhci_hcd.0: Device attached [ 408.819478][ T8305] vhci_hcd: connection closed [ 408.821406][ T5841] vhci_hcd: stop threads [ 408.824055][ T5841] vhci_hcd: release socket [ 408.825292][ T5841] vhci_hcd: disconnect device [ 410.395235][ T8317] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 410.666515][ T8317] 8021q: adding VLAN 0 to HW filter on device bond7 [ 410.682598][ T8317] bond7 (unregistering): Released all slaves [ 411.686593][ T8344] fuse: Unknown parameter 'fd0x0000000000000006' [ 411.736349][ T8344] netlink: 'syz.0.1290': attribute type 4 has an invalid length. [ 414.845396][ T8374] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 414.969785][ T8374] 8021q: adding VLAN 0 to HW filter on device bond7 [ 414.979986][ T8374] bond7 (unregistering): Released all slaves [ 415.053778][ T8383] tipc: Enabled bearer , priority 0 [ 415.692084][ T8371] tipc: Resetting bearer [ 415.776771][ T8371] tipc: Disabling bearer [ 420.651128][ T8447] fuse: Unknown parameter 'fd0x0000000000000006' [ 420.833299][ T8447] netlink: 'syz.1.1321': attribute type 4 has an invalid length. [ 421.354405][ T8443] sp0: Synchronizing with TNC [ 421.408183][ T8449] netlink: 'syz.0.1323': attribute type 1 has an invalid length. [ 421.603866][ T8449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 421.616556][ T8449] bond2 (unregistering): Released all slaves [ 423.464719][ T8484] udc-core: couldn't find an available UDC or it's busy [ 423.466818][ T8484] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 423.687312][ T8488] udc-core: couldn't find an available UDC or it's busy [ 423.689358][ T8488] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 425.210141][ T8503] fuse: Unknown parameter 'fd0x0000000000000006' [ 425.216058][ T8503] netlink: 'syz.4.1337': attribute type 4 has an invalid length. [ 426.566827][ T8513] udc-core: couldn't find an available UDC or it's busy [ 426.580876][ T8513] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 427.293419][ T8517] netlink: 'syz.0.1343': attribute type 1 has an invalid length. [ 427.368595][ T8519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 427.382705][ T8519] bond2 (unregistering): Released all slaves [ 428.420543][ T4085] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 428.427226][ T8539] ax25_connect(): syz.1.1351 uses autobind, please contact jreuter@yaina.de [ 429.149220][ T8550] fuse: Unknown parameter 'fd0x0000000000000006' [ 429.291475][ T8550] netlink: 'syz.2.1355': attribute type 4 has an invalid length. [ 430.049476][ T8557] netlink: 'syz.2.1359': attribute type 1 has an invalid length. [ 430.100582][ T4085] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.103466][ T4085] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 430.105295][ T8557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.105948][ T4085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.129737][ T4085] usb 1-1: config 0 descriptor?? [ 430.134642][ T8557] bond3 (unregistering): Released all slaves [ 430.178118][ T4085] rndis_wlan: probe of 1-1:0.0 failed with error -22 [ 430.181198][ T4085] rndis_host: probe of 1-1:0.0 failed with error -22 [ 430.421574][ T4093] usb 1-1: USB disconnect, device number 17 [ 431.431195][ T8575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1363'. [ 432.643746][ T8605] netlink: 'syz.4.1374': attribute type 1 has an invalid length. [ 432.668011][ T8605] 8021q: adding VLAN 0 to HW filter on device bond7 [ 432.697774][ T8605] bond7 (unregistering): Released all slaves [ 436.813836][ T8661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 437.038141][ T8661] device veth0_vlan left promiscuous mode [ 437.046643][ T8661] device veth0_vlan entered promiscuous mode [ 437.174193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.348598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.565059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.618057][ T4036] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 437.621153][ T4036] CPU: 1 PID: 4036 Comm: kworker/u5:4 Not tainted 5.15.186-syzkaller #0 [ 437.623514][ T4036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.626430][ T4036] Workqueue: hci1 hci_rx_work [ 437.627837][ T4036] Call trace: [ 437.628789][ T4036] dump_backtrace+0x0/0x43c [ 437.630077][ T4036] show_stack+0x2c/0x3c [ 437.631320][ T4036] __dump_stack+0x30/0x40 [ 437.632737][ T4036] dump_stack_lvl+0xf8/0x160 [ 437.634129][ T4036] dump_stack+0x1c/0x5c [ 437.635414][ T4036] sysfs_create_dir_ns+0x22c/0x24c [ 437.636906][ T4036] kobject_add_internal+0x590/0xc54 [ 437.638538][ T4036] kobject_add+0x134/0x1f8 [ 437.639785][ T4036] device_add+0x3f0/0xf94 [ 437.641104][ T4036] hci_conn_add_sysfs+0xbc/0x1cc [ 437.642683][ T4036] le_conn_complete_evt+0x9a4/0x11bc [ 437.644181][ T4036] hci_le_meta_evt+0x85c/0x3010 [ 437.645533][ T4036] hci_event_packet+0xd10/0x11bc [ 437.646944][ T4036] hci_rx_work+0x1cc/0x880 [ 437.648218][ T4036] process_one_work+0x79c/0x1140 [ 437.649656][ T4036] worker_thread+0x8f4/0x101c [ 437.651060][ T4036] kthread+0x374/0x454 [ 437.652305][ T4036] ret_from_fork+0x10/0x20 [ 437.653538][ C1] vkms_vblank_simulate: vblank timer overrun [ 437.659247][ T4036] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 437.663304][ T4036] Bluetooth: hci1: failed to register connection device [ 437.875227][ T8669] netlink: 'syz.0.1397': attribute type 1 has an invalid length. [ 438.213542][ T8677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.263005][ T8669] bond2 (unregistering): Released all slaves [ 440.519667][ T8707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1405'. [ 443.393731][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.395560][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.400166][ T8748] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 444.625694][ T8748] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.278367][ T8748] bond2 (unregistering): Released all slaves [ 445.459875][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1423'. [ 446.117313][ T8765] udc-core: couldn't find an available UDC or it's busy [ 446.119494][ T8765] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 446.163111][ T8761] device veth0_vlan left promiscuous mode [ 446.165409][ T8761] device veth0_vlan entered promiscuous mode [ 446.168736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 446.181595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 446.184282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 446.569543][ T8773] Can't find a SQUASHFS superblock on nullb0 [ 447.469426][ T4036] Bluetooth: hci4: link tx timeout [ 447.471269][ T4036] Bluetooth: hci4: killing stalled connection 00:00:00:00:00:00 [ 447.476113][ T4036] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 448.728348][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 448.731991][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.734146][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.580595][ T4085] usb 1-1: new low-speed USB device number 18 using dummy_hcd [ 449.656366][ T4093] Bluetooth: hci4: command 0x0406 tx timeout [ 449.945869][ T8812] netlink: 'syz.2.1441': attribute type 1 has an invalid length. [ 449.963941][ T8812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 449.975432][ T8812] bond3 (unregistering): Released all slaves [ 450.585274][ T8817] Can't find a SQUASHFS superblock on nullb0 [ 450.632328][ T8821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 450.710625][ T8821] device veth0_vlan left promiscuous mode [ 450.712926][ T8821] device veth0_vlan entered promiscuous mode [ 450.723194][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.727794][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.733589][ T1640] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 450.781751][ T4085] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 450.785363][ T4085] usb 1-1: config 0 has no interface number 0 [ 450.787152][ T4085] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 450.793551][ T4085] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 450.800069][ T4085] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 450.806072][ T4085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.047280][ T4085] usb 1-1: config 0 descriptor?? [ 451.066755][ T8798] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 451.838212][ T4134] Bluetooth: hci4: command 0x0406 tx timeout [ 451.920633][ T4085] usb 1-1: can't set config #0, error -71 [ 451.923723][ T4085] usb 1-1: USB disconnect, device number 18 [ 452.105868][ T8832] udc-core: couldn't find an available UDC or it's busy [ 452.113268][ T8832] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 452.116645][ T8830] block nbd2: shutting down sockets [ 452.756069][ T8840] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1448'. [ 453.811813][ T8856] 9pnet_virtio: no channels available for device syz [ 454.032181][ T8857] Can't find a SQUASHFS superblock on nullb0 [ 454.092999][ T8851] lo speed is unknown, defaulting to 1000 [ 454.217342][ T8864] netlink: 'syz.0.1458': attribute type 1 has an invalid length. [ 454.474598][ T8870] 8021q: adding VLAN 0 to HW filter on device bond2 [ 454.503687][ T8864] bond2 (unregistering): Released all slaves [ 456.590666][ T4036] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 456.733840][ T8903] udc-core: couldn't find an available UDC or it's busy [ 456.743417][ T8903] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 457.329620][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1473'. [ 457.799372][ T8927] udc-core: couldn't find an available UDC or it's busy [ 457.803636][ T8927] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 457.828150][ T8922] Can't find a SQUASHFS superblock on nullb0 [ 459.381308][ T8950] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1485'. [ 459.414857][ T8952] udc-core: couldn't find an available UDC or it's busy [ 459.416952][ T8952] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 459.992927][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 460.020193][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.038497][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 461.839787][ T8979] netlink: 'syz.3.1494': attribute type 2 has an invalid length. [ 461.849606][ T8979] netlink: 'syz.3.1494': attribute type 1 has an invalid length. [ 467.591940][ T9045] netlink: 'syz.1.1517': attribute type 4 has an invalid length. [ 471.283285][ T9139] netlink: 'syz.4.1541': attribute type 1 has an invalid length. [ 471.381984][ T9139] 8021q: adding VLAN 0 to HW filter on device bond7 [ 474.505535][ T9207] netlink: 'syz.4.1556': attribute type 1 has an invalid length. [ 474.541666][ T9207] 8021q: adding VLAN 0 to HW filter on device bond8 [ 474.778133][ T9225] udc-core: couldn't find an available UDC or it's busy [ 474.780112][ T9225] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 474.973349][ T9210] 9p: Unknown access argument ( [ 477.436445][ T4072] Bluetooth: hci5: command 0xfc11 tx timeout [ 477.521360][ T4036] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 478.592437][ T9258] netlink: 'syz.2.1575': attribute type 1 has an invalid length. [ 478.617801][ T9258] 8021q: adding VLAN 0 to HW filter on device bond3 [ 479.841624][ T4092] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 480.141539][ T4092] usb 1-1: Using ep0 maxpacket: 8 [ 480.550511][ T4092] usb 1-1: unable to get BOS descriptor or descriptor too short [ 480.650869][ T4092] usb 1-1: config 7 has an invalid interface number: 67 but max is 0 [ 480.653227][ T4092] usb 1-1: config 7 has no interface number 0 [ 482.628335][ T4092] usb 1-1: string descriptor 0 read error: -71 [ 482.630113][ T4092] usb 1-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16 [ 482.633839][ T4092] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.650561][ T4092] usb 1-1: can't set config #7, error -71 [ 482.657548][ T4092] usb 1-1: USB disconnect, device number 19 [ 483.862347][ T9333] udc-core: couldn't find an available UDC or it's busy [ 483.864588][ T9333] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 483.987640][ T9340] netlink: 'syz.3.1595': attribute type 1 has an invalid length. [ 484.028987][ T9340] 8021q: adding VLAN 0 to HW filter on device bond7 [ 484.045404][ T9340] bond7 (unregistering): Released all slaves [ 485.498712][ T26] kauditd_printk_skb: 1155 callbacks suppressed [ 485.498724][ T26] audit: type=1326 audit(485.460:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 485.512343][ T26] audit: type=1326 audit(485.470:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 485.522411][ T26] audit: type=1326 audit(485.480:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 485.528517][ T26] audit: type=1326 audit(485.480:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 485.538857][ T26] audit: type=1326 audit(485.480:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 485.549287][ T26] audit: type=1326 audit(485.480:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 485.557468][ T26] audit: type=1326 audit(485.480:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 485.672717][ T26] audit: type=1326 audit(485.480:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 485.687620][ T26] audit: type=1326 audit(485.480:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 485.701793][ T26] audit: type=1326 audit(485.490:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9348 comm="syz.0.1598" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 487.071321][ T9373] af_packet: tpacket_rcv: packet too big, clamped from 699 to 4294967286. macoff=82 [ 491.060136][ T9411] netlink: 'syz.3.1616': attribute type 1 has an invalid length. [ 491.066868][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 491.066880][ T26] audit: type=1326 audit(491.030:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7fc00000 [ 491.118322][ T9411] 8021q: adding VLAN 0 to HW filter on device bond7 [ 491.193644][ T26] audit: type=1326 audit(491.160:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.0.1612" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffff7ea8d9a8 code=0x7fc00000 [ 491.480157][ T9411] bond7 (unregistering): Released all slaves [ 493.216715][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.218935][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.224176][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.226139][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.228250][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.239321][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.241487][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.243633][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.245628][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.247532][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.249554][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.266417][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.268529][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.272430][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.274657][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.276686][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.278741][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.285494][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.455741][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x2 [ 493.457872][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.459971][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.462537][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.464598][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.466934][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.469077][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.472929][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.474985][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.477363][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.479420][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.482119][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.484177][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.486231][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.488668][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.492447][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.494447][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 493.497795][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.258407][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.260657][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.262768][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.264856][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.267023][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.268999][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.271542][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.273597][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.275985][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.278033][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.280070][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.282258][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.284350][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.286501][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.288632][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.291156][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.293365][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.295525][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.297570][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.299611][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.306670][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.308809][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.311894][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.314003][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.317305][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.319500][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.323020][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.325080][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.327069][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.329152][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.331536][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.333582][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.335606][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.337714][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.339910][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.344162][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.346322][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.348381][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.351775][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.353907][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.355962][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.358121][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.360199][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.363790][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.365954][ T4093] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 494.370305][ T4093] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.03 Device [syz1] on syz1 [ 494.638818][ T9464] fido_id[9464]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 495.503505][ T9485] netlink: 'syz.4.1642': attribute type 1 has an invalid length. [ 495.677083][ T9485] 8021q: adding VLAN 0 to HW filter on device bond9 [ 495.694314][ T9485] bond9 (unregistering): Released all slaves [ 495.721446][ T9477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1641'. [ 498.193690][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 498.198570][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1655'. [ 498.256935][ T9523] binder: 9522:9523 tried to acquire reference to desc 0, got 1 instead [ 498.259873][ T9523] binder: 9522:9523 got transaction with invalid data ptr [ 498.263427][ T9523] binder: 9522:9523 transaction failed 29201/-14, size 96-24 line 3186 [ 498.266602][ T4134] binder: undelivered TRANSACTION_ERROR: 29201 [ 498.323677][ T9527] udc-core: couldn't find an available UDC or it's busy [ 498.325819][ T9527] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 499.299116][ T9534] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1660'. [ 499.424228][ T9544] netlink: 'syz.4.1666': attribute type 1 has an invalid length. [ 499.446693][ T9542] bond9 (unregistering): Released all slaves [ 499.606326][ T9555] udc-core: couldn't find an available UDC or it's busy [ 499.608490][ T9555] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 500.802508][ T9567] udc-core: couldn't find an available UDC or it's busy [ 500.818757][ T9567] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 501.699099][ T9587] lo speed is unknown, defaulting to 1000 [ 502.889405][ T9600] netlink: 'syz.0.1684': attribute type 1 has an invalid length. [ 503.591963][ T9600] bond2 (unregistering): Released all slaves [ 503.666634][ T9609] lo speed is unknown, defaulting to 1000 [ 504.832381][ T2056] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.834184][ T2056] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.999026][ T9649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1701'. [ 506.593841][ T9663] netlink: 'syz.4.1708': attribute type 1 has an invalid length. [ 506.715131][ T9663] bond9 (unregistering): Released all slaves [ 508.943154][ T9681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 508.962623][ T9681] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1714'. [ 510.200737][ T9710] netlink: 'syz.1.1723': attribute type 1 has an invalid length. [ 510.609765][ T9710] bond2 (unregistering): Released all slaves [ 511.262246][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1731'. [ 512.063510][ T9742] xt_hashlimit: size too large, truncated to 1048576 [ 516.401106][ T9777] device vlan0 entered promiscuous mode [ 516.514620][ T9777] team0: Port device vlan0 added [ 517.219354][ T9788] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 517.229108][ T9790] udc-core: couldn't find an available UDC or it's busy [ 517.243337][ T9788] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 517.247092][ T9790] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 518.569834][ T9797] netlink: 'syz.0.1748': attribute type 1 has an invalid length. [ 519.507798][ T9797] bond2 (unregistering): Released all slaves [ 519.714139][ T9809] sp0: Synchronizing with TNC [ 525.354693][ T9860] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 525.452588][ T9860] bond9 (unregistering): Released all slaves [ 529.900403][ T9480] Bluetooth: hci5: command 0x0409 tx timeout [ 530.045063][ T9879] lo speed is unknown, defaulting to 1000 [ 530.617284][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1778'. [ 531.095706][ T9879] chnl_net:caif_netlink_parms(): no params data found [ 531.252431][ T9879] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.254650][ T9879] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.261711][ T9879] device bridge_slave_0 entered promiscuous mode [ 531.277875][ T9879] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.293809][ T9879] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.297028][ T9879] device bridge_slave_1 entered promiscuous mode [ 531.359846][ T9879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.385965][ T9879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.457054][ T9879] team0: Port device team_slave_0 added [ 531.474019][ T9879] team0: Port device team_slave_1 added [ 531.545112][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.547167][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.580510][ T9879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.588885][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 531.592036][ T9907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 531.607524][ T9879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.609437][ T9879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.673730][ T9879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.805376][ T9879] device hsr_slave_0 entered promiscuous mode [ 532.646170][ T5080] Bluetooth: hci5: command 0x041b tx timeout [ 532.700949][ T9879] device hsr_slave_1 entered promiscuous mode [ 532.745930][ T9879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 532.748116][ T9879] Cannot create hsr debugfs directory [ 532.756072][ T9922] netlink: 'syz.0.1783': attribute type 1 has an invalid length. [ 532.833058][ T9922] bond2 (unregistering): Released all slaves [ 533.689500][ T9879] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 533.745805][ T9879] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 533.804812][ T9879] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 533.863292][ T9938] netlink: 'syz.4.1786': attribute type 5 has an invalid length. [ 533.866231][ T9879] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 533.988504][ T9879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.000042][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.003913][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.013068][ T9879] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.027299][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 534.030227][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.033794][ T4152] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.035853][ T4152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.052126][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 534.065628][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 534.068395][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.075666][ T4152] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.077678][ T4152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.094238][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.104580][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.115647][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.124152][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.131643][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 534.638744][ T9879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.647596][ T9879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.670514][ T4071] Bluetooth: hci5: command 0x040f tx timeout [ 534.814147][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.817258][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 534.861849][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.864717][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.869256][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 534.872538][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 534.875247][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 534.924864][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.927204][ T4152] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.947747][ T9879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.169532][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 536.175814][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 536.204083][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 536.206941][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 536.221392][ T9879] device veth0_vlan entered promiscuous mode [ 536.224031][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 536.226643][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 536.252352][ T9879] device veth1_vlan entered promiscuous mode [ 536.311995][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 536.314679][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 536.317292][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.322256][ T5976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.329816][ T9879] device veth0_macvtap entered promiscuous mode [ 536.358665][ T9879] device veth1_macvtap entered promiscuous mode [ 536.419053][ T9879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.439203][ T9879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.472331][ T9879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.479094][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 536.482286][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 536.485052][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 536.853926][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 537.255914][ T9879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.268215][ T9982] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 537.274942][ T9879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.310633][ T4071] Bluetooth: hci5: command 0x0419 tx timeout [ 537.317208][ T9879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.325117][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 537.328019][ T5861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.344273][ T9879] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.346679][ T9879] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.376858][ T9879] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.397886][ T9879] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.403134][ T9984] netlink: 'syz.2.1797': attribute type 1 has an invalid length. [ 537.610869][ T9984] bond4 (unregistering): Released all slaves [ 537.633982][ T5824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.814610][ T5824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.286839][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 538.366336][ T5848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.368810][ T5848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.375686][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 540.038933][ T26] audit: type=1326 audit(540.000:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 540.063232][ T26] audit: type=1326 audit(540.030:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=187 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 540.080161][ T26] audit: type=1326 audit(540.040:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10006 comm="syz.0.1801" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 540.333609][ T26] audit: type=1326 audit(540.300:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 540.335889][T10011] netlink: 'syz.0.1802': attribute type 10 has an invalid length. [ 540.339735][ T26] audit: type=1326 audit(540.300:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=214 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 540.356882][ T26] audit: type=1326 audit(540.300:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 540.362802][ T26] audit: type=1326 audit(540.300:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 540.368694][ T26] audit: type=1326 audit(540.300:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 540.381719][ T26] audit: type=1326 audit(540.300:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 540.387603][ T26] audit: type=1326 audit(540.300:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10009 comm="syz.0.1802" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ea8d9a8 code=0x7ffc0000 [ 541.561962][T10029] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1803'. [ 544.859372][T10037] udc-core: couldn't find an available UDC or it's busy [ 544.861840][T10037] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 546.378050][T10054] netlink: 'syz.4.1815': attribute type 1 has an invalid length. [ 546.415602][T10054] bond9 (unregistering): Released all slaves [ 547.000517][T10062] ubi31: attaching mtd0 [ 547.519876][T10062] ubi31: scanning is finished [ 547.549281][T10062] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 653.090365][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 653.092259][ C0] (detected by 0, t=10502 jiffies, g=31005, q=43) [ 653.094155][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4295002602-4294992100), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 653.097720][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g31005 f0x0 RCU_GP_DONE_GPS(2) ->state=0x0 ->cpu=0 [ 653.100836][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 653.103594][ C0] rcu: RCU grace-period kthread stack dump: [ 653.105198][ C0] task:rcu_preempt state:R running task stack: 0 pid: 15 ppid: 2 flags:0x00000008 [ 653.108172][ C0] Call trace: [ 653.109042][ C0] __switch_to+0x2f4/0x558 [ 653.110235][ C0] __schedule+0xe00/0x1c0c [ 653.111375][ C0] preempt_schedule_common+0x138/0x218 [ 653.112859][ C0] preempt_schedule+0x64/0x84 [ 653.114147][ C0] _raw_spin_unlock_irq+0xe4/0x128 [ 653.115506][ C0] rcu_gp_init+0x384/0x17f0 [ 653.116729][ C0] rcu_gp_kthread+0x150/0x2a8 [ 653.117943][ C0] kthread+0x374/0x454 [ 653.119055][ C0] ret_from_fork+0x10/0x20 [ 653.120205][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 653.121907][ C0] Task dump for CPU 0: [ 653.122984][ C0] task:syz.2.1822 state:R running task stack: 0 pid:10075 ppid: 4032 flags:0x00000001 [ 653.125884][ C0] Call trace: [ 653.126761][ C0] dump_backtrace+0x0/0x43c [ 653.127945][ C0] show_stack+0x2c/0x3c [ 653.129002][ C0] sched_show_task+0x3c8/0x4b4 [ 653.130256][ C0] dump_cpu_task+0x84/0xa8 [ 653.131433][ C0] rcu_check_gp_kthread_starvation+0x1e8/0x274 [ 653.133091][ C0] print_other_cpu_stall+0x1a24/0x1c10 [ 653.134551][ C0] rcu_sched_clock_irq+0x1558/0x1810 [ 653.135939][ C0] update_process_times+0x1c4/0x260 [ 653.137348][ C0] tick_sched_timer+0x30c/0x4bc [ 653.138679][ C0] __hrtimer_run_queues+0x3fc/0xb6c [ 653.140087][ C0] hrtimer_interrupt+0x2bc/0xb5c [ 653.141362][ C0] arch_timer_handler_virt+0x74/0x88 [ 653.142755][ C0] handle_percpu_devid_irq+0x29c/0x76c [ 653.144187][ C0] handle_domain_irq+0x144/0x1fc [ 653.145525][ C0] gic_handle_irq+0x78/0x1c8 [ 653.146722][ C0] call_on_irq_stack+0x24/0x30 [ 653.147969][ C0] do_interrupt_handler+0x6c/0x88 [ 653.149312][ C0] el1_interrupt+0x30/0x58 [ 653.150509][ C0] el1h_64_irq_handler+0x18/0x24 [ 653.151810][ C0] el1h_64_irq+0x78/0x7c [ 653.152986][ C0] __sanitizer_cov_trace_pc+0x80/0xac [ 653.154417][ C0] invoke_syscall+0x98/0x2b8 [ 653.155616][ C0] el0_svc_common+0x138/0x258 [ 653.156922][ C0] do_el0_svc+0x58/0x14c [ 653.158109][ C0] el0_svc+0x78/0x1e0 [ 653.159163][ C0] el0t_64_sync_handler+0xcc/0xe4 [ 653.160490][ C0] el0t_64_sync+0x1a0/0x1a4