last executing test programs: 5.525373341s ago: executing program 0 (id=1379): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='rpc_socket_nospace\x00', r5, 0x0, 0x8000000000000000}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x30) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) unshare(0x64000600) 4.442245414s ago: executing program 2 (id=1394): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.279059107s ago: executing program 2 (id=1395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000014, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0xa, &(0x7f00000000c0)=0x100005, 0xfff8) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) connect$vsock_stream(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='cubic', 0x4) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 4.046554222s ago: executing program 2 (id=1397): bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xffffffffffffffb0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x50}, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x44) r4 = syz_io_uring_setup(0xbdf, &(0x7f0000000000)={0x0, 0x6d0a, 0x80, 0xfffffffd, 0x40000331, 0x0, r3}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="900000006404000126bd7000fddbdf257593497c80e5c6f9cb62d7aae5024792da358bc8c8eb4948cc28d09201842d7feb0ec94f477f111c86de644b4ae5150a6be26346291f25135db380cce2255911a27bf020f1f363fd18ed0c8de74df565c766b69c8ba06d0884eaab3d4fd6c50d807dd9a899952d19f94400bd8fce0b5859e8efad766309bb74b7a5d91203d25b1bdbc107000000000000001002a30000"], 0x90}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x2000, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x4]}, &(0x7f0000000100)=0x6) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 3.058814333s ago: executing program 4 (id=1401): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x11c, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00'}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x200000, 0x4) bind$xdp(r0, 0x0, 0x0) 2.405959615s ago: executing program 4 (id=1405): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 2.377406049s ago: executing program 4 (id=1406): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x81}, 0x18) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x4, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x70, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0xffffffff, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0x0, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xd, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7ffb, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x61, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x8, 0x8, 0x7, 0x59, 0x9, 0x20002, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x6, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x20000000, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.158119225s ago: executing program 4 (id=1408): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) 1.862781987s ago: executing program 0 (id=1412): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000f00), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x47bc, 0x2000, 0x0, 0x0, 0x0) 1.846009888s ago: executing program 3 (id=1414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_ALLOC_STREAMS(r2, 0x8008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="4a9800000a"]) 1.674834249s ago: executing program 3 (id=1416): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, 0x0, &(0x7f0000000440)) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x1574, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc83}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r7}}], 0x20, 0x2400e044}, 0xff0f) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x7, 0x18208, 0x8, 0x4e6a, r7}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r8}, 0x38) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = dup3(r1, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4804}, 0x18) recvmmsg(r9, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.546665274s ago: executing program 0 (id=1417): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0) msgget$private(0x0, 0x240) msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000) 1.240656693s ago: executing program 3 (id=1418): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r0, 0x0, 0x20000000000002, 0x2) 1.23225061s ago: executing program 4 (id=1419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000014, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f00000000c0)=0x100005, 0xfff8) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) connect$vsock_stream(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='cubic', 0x4) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xb0}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 942.774879ms ago: executing program 2 (id=1420): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000300)='tlb_flush\x00', r0}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x2000, 0x3, &(0x7f000004a000/0x2000)=nil) 693.877609ms ago: executing program 2 (id=1422): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 579.122209ms ago: executing program 0 (id=1423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000100)={0x1, 0x1, 0xa, 0xb, 0x2d, 0x0}) preadv2(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/180, 0xb4}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000000340)=""/113, 0x71}, {&(0x7f00000003c0)=""/137, 0x89}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000480)=""/75, 0x4b}], 0x7, 0x4, 0x3, 0x4) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000000)={0x7, 0xfffc, 0x1, 0x0, 0x5, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) 530.8982ms ago: executing program 1 (id=1424): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000380)=""/216, 0xd8, 0x0, &(0x7f00000011c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendto$inet(r1, &(0x7f00000021c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4e600f2e9ad2afe4c3589d2c1da6f7c555d88fe2f239c3e2b70d18fe425c689530bcc6074fa8a36a4905ac180027ce48ba990507140212a4cc54aa21e0342419741d6c454228160c4bd4be2c1516fc", 0x7f, 0x24000095, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_create1(0x80000) 484.984979ms ago: executing program 2 (id=1425): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r2, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 438.613085ms ago: executing program 1 (id=1426): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x250, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x220, 0x250, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0x6, 0x0, 0x39, 0x0, 0x0, 0x80000000, 0x3, 0x3}, {0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'veth0_to_batadv\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x81, 0x7, 0x2}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x400) 330.272375ms ago: executing program 0 (id=1427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x8, &(0x7f00000004c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 329.365497ms ago: executing program 1 (id=1428): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c00028014000700fe8000000000001800000000000000420400120008000a"], 0x58}}, 0x8000) 266.524489ms ago: executing program 0 (id=1429): syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) 218.992687ms ago: executing program 1 (id=1430): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000340, 0x200000000370, 0x2000000003a0], 0x0, 0x0, &(0x7f0000000340)=ANY=[]}, 0x78) 218.774417ms ago: executing program 3 (id=1431): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) 181.143762ms ago: executing program 4 (id=1432): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0x1a0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) 139.192503ms ago: executing program 3 (id=1433): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket(0x11, 0x800000003, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0x4c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 54.994452ms ago: executing program 1 (id=1434): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r1, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) close(r1) 7.908479ms ago: executing program 3 (id=1435): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) munlockall() sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r3, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r6, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) getrlimit(0x8, &(0x7f0000000b40)) 0s ago: executing program 1 (id=1436): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000380)=""/216, 0xd8, 0x0, &(0x7f00000011c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendto$inet(r1, &(0x7f00000021c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4e600f2e9ad2afe4c3589d2c1da6f7c555d88fe2f239c3e2b70d18fe425c689530bcc6074fa8a36a4905ac180027ce48ba990507140212a4cc54aa21e0342419741d6c454228160c4bd4be2c1516fc", 0x7f, 0x24000095, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) epoll_create1(0x80000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.71' (ED25519) to the list of known hosts. [ 66.942626][ T5810] cgroup: Unknown subsys name 'net' [ 67.073441][ T5810] cgroup: Unknown subsys name 'cpuset' [ 67.083379][ T5810] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.458590][ T5810] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.888801][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.897212][ T5824] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.905365][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.914517][ T5824] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.922406][ T5824] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.932104][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.940562][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.942560][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.948785][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.961440][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.964712][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.981368][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.988897][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.994019][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.996541][ T5832] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.005562][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.010426][ T5833] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.018934][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.033908][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.034382][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.042220][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.049237][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.057218][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.074520][ T5832] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.084685][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.484185][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.491120][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.761163][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 71.823920][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 71.885824][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 71.961275][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 72.048544][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 72.061901][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.069149][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.076819][ T5839] bridge_slave_0: entered allmulticast mode [ 72.084281][ T5839] bridge_slave_0: entered promiscuous mode [ 72.130849][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.138047][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.145362][ T5839] bridge_slave_1: entered allmulticast mode [ 72.152510][ T5839] bridge_slave_1: entered promiscuous mode [ 72.250675][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.257908][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.265548][ T5838] bridge_slave_0: entered allmulticast mode [ 72.272528][ T5838] bridge_slave_0: entered promiscuous mode [ 72.292583][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.313310][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.320567][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.327694][ T5838] bridge_slave_1: entered allmulticast mode [ 72.334903][ T5838] bridge_slave_1: entered promiscuous mode [ 72.358426][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.367822][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.375341][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.382609][ T5836] bridge_slave_0: entered allmulticast mode [ 72.389537][ T5836] bridge_slave_0: entered promiscuous mode [ 72.437577][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.445105][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.452872][ T5836] bridge_slave_1: entered allmulticast mode [ 72.460327][ T5836] bridge_slave_1: entered promiscuous mode [ 72.476621][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.484046][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.491545][ T5842] bridge_slave_0: entered allmulticast mode [ 72.498613][ T5842] bridge_slave_0: entered promiscuous mode [ 72.544295][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.553642][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.561563][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.568702][ T5842] bridge_slave_1: entered allmulticast mode [ 72.575834][ T5842] bridge_slave_1: entered promiscuous mode [ 72.582455][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.589617][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.597010][ T5840] bridge_slave_0: entered allmulticast mode [ 72.604217][ T5840] bridge_slave_0: entered promiscuous mode [ 72.613716][ T5839] team0: Port device team_slave_0 added [ 72.619908][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.627130][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.634500][ T5840] bridge_slave_1: entered allmulticast mode [ 72.641725][ T5840] bridge_slave_1: entered promiscuous mode [ 72.660884][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.695853][ T5839] team0: Port device team_slave_1 added [ 72.724529][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.769448][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.782070][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.793609][ T5838] team0: Port device team_slave_0 added [ 72.813689][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.837346][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.859904][ T5838] team0: Port device team_slave_1 added [ 72.878979][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.889258][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.896829][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.923174][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.959019][ T5836] team0: Port device team_slave_0 added [ 72.976866][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.984081][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.011490][ T52] Bluetooth: hci0: command tx timeout [ 73.017193][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.030260][ T5840] team0: Port device team_slave_0 added [ 73.048315][ T5836] team0: Port device team_slave_1 added [ 73.075434][ T5840] team0: Port device team_slave_1 added [ 73.080580][ T52] Bluetooth: hci4: command tx timeout [ 73.081242][ T5832] Bluetooth: hci3: command tx timeout [ 73.101656][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.108619][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.135316][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.159622][ T5842] team0: Port device team_slave_0 added [ 73.165458][ T5832] Bluetooth: hci1: command tx timeout [ 73.165477][ T52] Bluetooth: hci2: command tx timeout [ 73.168640][ T5842] team0: Port device team_slave_1 added [ 73.220585][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.227553][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.254114][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.288331][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.295569][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.322386][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.334391][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.341736][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.367999][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.385379][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.392580][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.419476][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.444421][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.451545][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.477626][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.489469][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.496468][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.522873][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.541541][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.548502][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.574917][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.592102][ T5839] hsr_slave_0: entered promiscuous mode [ 73.598488][ T5839] hsr_slave_1: entered promiscuous mode [ 73.663069][ T5838] hsr_slave_0: entered promiscuous mode [ 73.669316][ T5838] hsr_slave_1: entered promiscuous mode [ 73.676018][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 73.682682][ T5838] Cannot create hsr debugfs directory [ 73.782264][ T5842] hsr_slave_0: entered promiscuous mode [ 73.788801][ T5842] hsr_slave_1: entered promiscuous mode [ 73.795176][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 73.800944][ T5842] Cannot create hsr debugfs directory [ 73.840088][ T5836] hsr_slave_0: entered promiscuous mode [ 73.846519][ T5836] hsr_slave_1: entered promiscuous mode [ 73.853039][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 73.858769][ T5836] Cannot create hsr debugfs directory [ 73.870051][ T5840] hsr_slave_0: entered promiscuous mode [ 73.876328][ T5840] hsr_slave_1: entered promiscuous mode [ 73.883222][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 73.888951][ T5840] Cannot create hsr debugfs directory [ 74.397624][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.411469][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.431541][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.442507][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.501343][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.525361][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.549104][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.559144][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.618764][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.654069][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.666229][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.676768][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.761363][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.771362][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.782611][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.793359][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.887861][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.927240][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.947461][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.965979][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.973281][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.982464][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.993952][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.005344][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.022319][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.057388][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.064560][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.077079][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.090810][ T5832] Bluetooth: hci0: command tx timeout [ 75.109015][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.116207][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.126898][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.134045][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.160088][ T5832] Bluetooth: hci4: command tx timeout [ 75.160326][ T52] Bluetooth: hci3: command tx timeout [ 75.220759][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.240771][ T52] Bluetooth: hci1: command tx timeout [ 75.241123][ T5832] Bluetooth: hci2: command tx timeout [ 75.310959][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.319673][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.366533][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.373798][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.384616][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.391737][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.435230][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.459314][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.497015][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.504192][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.524390][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.535814][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.543027][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.601124][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.625503][ T5838] veth0_vlan: entered promiscuous mode [ 75.683204][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.707232][ T5838] veth1_vlan: entered promiscuous mode [ 75.718485][ T5839] veth0_vlan: entered promiscuous mode [ 75.733184][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.740449][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.764081][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.771292][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.802330][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.811098][ T5839] veth1_vlan: entered promiscuous mode [ 75.846198][ T5838] veth0_macvtap: entered promiscuous mode [ 75.860134][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.874467][ T5838] veth1_macvtap: entered promiscuous mode [ 75.897227][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.934519][ T5839] veth0_macvtap: entered promiscuous mode [ 75.957453][ T5839] veth1_macvtap: entered promiscuous mode [ 75.970998][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.993969][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.038488][ T5842] veth0_vlan: entered promiscuous mode [ 76.052942][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.063278][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.075801][ T5842] veth1_vlan: entered promiscuous mode [ 76.085129][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.094689][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.123927][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.134033][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.157350][ T5840] veth0_vlan: entered promiscuous mode [ 76.169151][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.207523][ T5840] veth1_vlan: entered promiscuous mode [ 76.215132][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.224344][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.255102][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.293526][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.332851][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.348287][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.388800][ T5840] veth0_macvtap: entered promiscuous mode [ 76.412077][ T5842] veth0_macvtap: entered promiscuous mode [ 76.427748][ T5840] veth1_macvtap: entered promiscuous mode [ 76.458156][ T5842] veth1_macvtap: entered promiscuous mode [ 76.475242][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.488035][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.495936][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.513536][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.526416][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.540999][ T5836] veth0_vlan: entered promiscuous mode [ 76.554938][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.577756][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.623408][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.645236][ T3533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.654211][ T3533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.665047][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.677495][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.692426][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.704290][ T5836] veth1_vlan: entered promiscuous mode [ 76.712444][ T3533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.722757][ T3533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.750327][ T3533] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.783015][ T3533] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.827174][ T3533] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.880365][ T3533] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.910162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.918684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.970348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.999507][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.063523][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.092846][ T5836] veth0_macvtap: entered promiscuous mode [ 77.161226][ T5832] Bluetooth: hci0: command tx timeout [ 77.240957][ T5832] Bluetooth: hci4: command tx timeout [ 77.241152][ T52] Bluetooth: hci3: command tx timeout [ 77.268594][ T5836] veth1_macvtap: entered promiscuous mode [ 77.284746][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.306573][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.314814][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.320876][ T52] Bluetooth: hci1: command tx timeout [ 77.324693][ T5832] Bluetooth: hci2: command tx timeout [ 77.340535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.342783][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.558107][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.597655][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.653741][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.687360][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.784141][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.804837][ T5925] loop8: detected capacity change from 0 to 7 [ 77.817900][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.853500][ T5820] Dev loop8: unable to read RDB block 7 [ 77.883859][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.917464][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.931765][ T5820] loop8: AHDI p1 p2 p3 [ 77.935982][ T5820] loop8: partition table partially beyond EOD, truncated [ 77.959387][ T5820] loop8: p1 start 1601398130 is beyond EOD, truncated [ 77.978270][ T5820] loop8: p2 start 1702059890 is beyond EOD, truncated [ 78.017939][ T5925] Dev loop8: unable to read RDB block 7 [ 78.037327][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.042564][ T5925] loop8: AHDI p1 p2 p3 [ 78.090975][ T5925] loop8: partition table partially beyond EOD, truncated [ 78.108970][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.131870][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.201414][ T5925] loop8: p1 start 1601398130 is beyond EOD, truncated [ 78.222653][ T5925] loop8: p2 start 1702059890 is beyond EOD, truncated [ 78.300834][ T5926] Dev loop8: unable to read RDB block 7 [ 78.302955][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.320335][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.331815][ T5926] loop8: AHDI p1 p2 p3 [ 78.349686][ T5926] loop8: partition table partially beyond EOD, truncated [ 78.420274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.434758][ T5926] loop8: p1 start 1601398130 is beyond EOD, truncated [ 78.473462][ T5926] loop8: p2 start 1702059890 is beyond EOD, truncated [ 78.568664][ T5933] fuse: root generation should be zero [ 78.730821][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.740433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.980630][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.991058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 79.130460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 79.240780][ T5832] Bluetooth: hci0: command tx timeout [ 79.287945][ T5954] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13'. [ 79.322809][ T5832] Bluetooth: hci3: command tx timeout [ 79.328365][ T52] Bluetooth: hci4: command tx timeout [ 79.404490][ T5832] Bluetooth: hci1: command tx timeout [ 79.410365][ T52] Bluetooth: hci2: command tx timeout [ 79.456971][ T5945] nvme_fabrics: missing parameter 'transport=%s' [ 79.464369][ T5945] nvme_fabrics: missing parameter 'nqn=%s' [ 79.735953][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.776002][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.802835][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.849221][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.891356][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.923260][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.969937][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.982212][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 80.008776][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 80.068596][ T43] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 80.099252][ T43] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz1 [ 80.363527][ T5976] fido_id[5976]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.381428][ T5982] syzkaller1: entered promiscuous mode [ 80.386954][ T5982] syzkaller1: entered allmulticast mode [ 80.464511][ T5959] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.578517][ T5959] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 80.635383][ T5985] geneve2: entered allmulticast mode [ 80.663157][ T5959] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.663190][ T5959] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 80.687715][ T5959] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.688817][ T5959] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 80.724428][ T5959] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.724452][ T5959] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 80.782291][ T5959] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 80.782306][ T5959] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 80.908077][ T5990] input: syz1 as /devices/virtual/input/input5 [ 80.908186][ T5990] input: failed to attach handler leds to device input5, error: -6 [ 81.634428][ T6009] binder_alloc: 6005: binder_alloc_buf, no vma [ 82.397592][ T6028] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 82.512175][ T6030] syzkaller1: entered promiscuous mode [ 82.557062][ T6030] syzkaller1: entered allmulticast mode [ 83.039061][ T6045] wg1: entered promiscuous mode [ 83.049890][ T6045] wg1: entered allmulticast mode [ 85.001970][ T6093] syzkaller1: entered promiscuous mode [ 85.017844][ T6093] syzkaller1: entered allmulticast mode [ 85.092226][ T6095] netlink: 68 bytes leftover after parsing attributes in process `syz.1.46'. [ 85.177208][ T6095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 85.220390][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 85.229285][ T6095] netlink: 'syz.1.46': attribute type 11 has an invalid length. [ 85.726445][ T6108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 85.733904][ T6108] IPv6: NLM_F_CREATE should be set when creating new route [ 85.805001][ T6113] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 86.146619][ T6120] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.887134][ T10] cfg80211: failed to load regulatory.db [ 87.408967][ T6153] syzkaller1: entered promiscuous mode [ 87.445875][ T6153] syzkaller1: entered allmulticast mode [ 87.694186][ T6161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.701492][ T6161] IPv6: NLM_F_CREATE should be set when creating new route [ 87.945494][ T6167] loop2: detected capacity change from 0 to 7 [ 87.966816][ T5820] Dev loop2: unable to read RDB block 7 [ 87.979142][ T5820] loop2: unable to read partition table [ 88.010078][ T5820] loop2: partition table beyond EOD, truncated [ 88.074004][ T6167] Dev loop2: unable to read RDB block 7 [ 88.093768][ T6167] loop2: unable to read partition table [ 88.120344][ T6167] loop2: partition table beyond EOD, truncated [ 88.201002][ T6167] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 88.400047][ T5906] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.573184][ T6184] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET) [ 88.595354][ T5906] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 88.648555][ T5906] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 88.709571][ T5906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 88.757663][ T5906] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 88.823259][ T5906] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 88.863597][ T5906] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 88.903200][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 88.940049][ T5906] usb 1-1: Product: syz [ 88.969796][ T5906] usb 1-1: Manufacturer: syz [ 89.043254][ T5906] cdc_wdm 1-1:1.0: skipping garbage [ 89.069770][ T5906] cdc_wdm 1-1:1.0: skipping garbage [ 89.098445][ T5906] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 89.149780][ T5906] cdc_wdm 1-1:1.0: Unknown control protocol [ 89.275211][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 89.282042][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 89.288410][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 89.294992][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 89.301276][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 89.307850][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 89.314131][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 89.320729][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 89.327207][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 89.333798][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 89.340056][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 89.346634][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 89.352858][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 89.359432][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 89.365664][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 89.372238][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 89.378463][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 89.385058][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 89.391331][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 89.397910][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 89.414028][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 89.422805][ T43] usb 1-1: USB disconnect, device number 2 [ 89.458093][ T6208] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.519835][ T5906] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.699936][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 90.741245][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.769881][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.807279][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 90.842666][ T5906] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 90.924947][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.053569][ T5906] usb 2-1: config 0 descriptor?? [ 91.113261][ T6238] netlink: 'syz.4.80': attribute type 4 has an invalid length. [ 91.727960][ T5906] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0002/input/input6 [ 91.835087][ T5906] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0002/input/input7 [ 91.957136][ T5906] kye 0003:0458:5011.0002: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 92.073431][ T5906] usb 2-1: USB disconnect, device number 2 [ 92.141443][ T6244] fido_id[6244]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 92.649876][ T6251] Zero length message leads to an empty skb [ 92.903514][ T6255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.85'. [ 93.121883][ T6231] wg1: entered promiscuous mode [ 93.127469][ T6231] wg1: entered allmulticast mode [ 93.885297][ T6274] binder: 6273:6274 unknown command 0 [ 93.899101][ T6274] binder: 6273:6274 ioctl c0306201 200000000300 returned -22 [ 94.055828][ T6281] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 94.063096][ T6281] IPv6: NLM_F_CREATE should be set when creating new route [ 94.184811][ T6289] netlink: 68 bytes leftover after parsing attributes in process `syz.1.99'. [ 96.461139][ T6297] wg1: entered promiscuous mode [ 96.466052][ T6297] wg1: entered allmulticast mode [ 96.471290][ T5887] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.658443][ T5952] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.671944][ T5887] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 96.680651][ T5887] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 96.718443][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.738649][ T5887] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.757815][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 96.766715][ T5887] usb 4-1: Product: syz [ 96.772953][ T5887] usb 4-1: Manufacturer: syz [ 96.788771][ T5887] usb 4-1: SerialNumber: syz [ 96.809947][ T5952] usb 1-1: Using ep0 maxpacket: 8 [ 96.817227][ T5952] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 96.826891][ T5952] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.831178][ T5887] usb 4-1: config 0 descriptor?? [ 96.836903][ T5952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.859881][ T5887] hub 4-1:0.0: bad descriptor, ignoring hub [ 96.866105][ T5887] hub 4-1:0.0: probe with driver hub failed with error -5 [ 96.874116][ T5952] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.883434][ T5887] usb 4-1: selecting invalid altsetting 0 [ 96.922839][ T5952] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.987608][ T5952] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.046896][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.339669][ T5952] usb 1-1: usb_control_msg returned -32 [ 97.345622][ T5952] usbtmc 1-1:16.0: can't read capabilities [ 97.380931][ T6324] usb 4-1: reset high-speed USB device number 2 using dummy_hcd [ 97.540866][ T6324] usb 4-1: device firmware changed [ 97.554703][ T5887] usb 4-1: USB disconnect, device number 2 [ 97.789957][ T5887] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 98.006737][ T5887] usb 4-1: config 1 interface 0 has no altsetting 0 [ 98.020993][ T5887] usb 4-1: New USB device found, idVendor=0eef, idProduct=720c, bcdDevice= 0.40 [ 98.032434][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.058466][ T5887] usb 4-1: Product: syz [ 98.063790][ T5887] usb 4-1: Manufacturer: syz [ 98.068551][ T5887] usb 4-1: SerialNumber: syz [ 98.381216][ T5887] usbhid 4-1:1.0: can't add hid device: -71 [ 98.414234][ T5887] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 98.481717][ T5887] usb 4-1: USB disconnect, device number 3 [ 99.387059][ T6369] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 99.432491][ T5952] usb 1-1: USB disconnect, device number 3 [ 99.785523][ T6384] netlink: 56 bytes leftover after parsing attributes in process `syz.3.132'. [ 101.723097][ T6423] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.774572][ T6424] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 101.781308][ T6424] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 101.928888][ T6424] vhci_hcd vhci_hcd.0: Device attached [ 102.085253][ T6425] vhci_hcd: connection closed [ 102.087250][ T13] vhci_hcd: stop threads [ 102.107378][ T13] vhci_hcd: release socket [ 102.128763][ T13] vhci_hcd: disconnect device [ 102.161882][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 103.419829][ T5886] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.627162][ T5886] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 103.639785][ T5886] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 103.669789][ T5886] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.689050][ T5886] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.700482][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 103.754827][ T5886] usb 3-1: Product: syz [ 103.773189][ T5886] usb 3-1: Manufacturer: syz [ 103.777823][ T5886] usb 3-1: SerialNumber: syz [ 103.802664][ T5886] usb 3-1: config 0 descriptor?? [ 103.815449][ T5886] hub 3-1:0.0: bad descriptor, ignoring hub [ 103.850215][ T5886] hub 3-1:0.0: probe with driver hub failed with error -5 [ 103.882260][ T5886] usb 3-1: selecting invalid altsetting 0 [ 104.048498][ T6470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 104.870295][ T6478] binder: 6475:6478 ioctl c0306201 200000000300 returned -22 [ 107.607113][ T6513] binder: 6512:6513 ioctl c0306201 200000000300 returned -22 [ 107.854239][ T6522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.180'. [ 107.943212][ T5952] usb 3-1: USB disconnect, device number 2 [ 108.349333][ T6538] binder: 6536:6538 ioctl c0306201 200000000300 returned -22 [ 109.755986][ T6568] binder: 6567:6568 ioctl c0306201 200000000300 returned -22 [ 110.978865][ T6599] syzkaller1: entered promiscuous mode [ 110.988884][ T6599] syzkaller1: entered allmulticast mode [ 111.911057][ T6629] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.918339][ T6629] IPv6: NLM_F_CREATE should be set when creating new route [ 113.717243][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.228'. [ 113.942324][ T6641] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.182491][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.190874][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.847971][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 117.294196][ T6710] nvme_fabrics: unknown parameter or missing value ':syz1:E:00000000002147483648:'.}*@/:(]#@$&-]' in ctrl creation request [ 117.566250][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 121.464852][ T6789] tipc: Started in network mode [ 121.470340][ T6789] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 121.477714][ T6789] tipc: Enabled bearer , priority 0 [ 122.091994][ T6800] block device autoloading is deprecated and will be removed. [ 122.229782][ T5906] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.382844][ T5906] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.409462][ T5906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 122.460706][ T5906] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.481380][ T5952] tipc: Node number set to 11578026 [ 122.498851][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.524084][ T5906] usb 1-1: Product: syz [ 122.533854][ T5906] usb 1-1: Manufacturer: syz [ 122.546354][ T5906] usb 1-1: SerialNumber: syz [ 122.575336][ T5906] usb 1-1: config 0 descriptor?? [ 122.625714][ T5906] usb 1-1: selecting invalid altsetting 0 [ 122.891926][ T5908] usb 1-1: USB disconnect, device number 4 [ 123.090961][ T5952] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.132278][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.287'. [ 123.269785][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 123.293628][ T5952] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 123.330140][ T5952] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.349753][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.399888][ T5952] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.418777][ T5952] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.456593][ T5952] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.470530][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.758855][ T5952] usb 5-1: usb_control_msg returned -32 [ 123.908097][ T5952] usbtmc 5-1:16.0: can't read capabilities [ 123.933748][ T5952] usb 5-1: USB disconnect, device number 2 [ 124.562776][ T30] audit: type=1326 audit(1760235614.168:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6846 comm="syz.3.299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x0 [ 125.006302][ T6860] kthread_run failed with err -4 [ 126.299834][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.397169][ T6892] netlink: 'syz.2.313': attribute type 12 has an invalid length. [ 126.460990][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 126.483972][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 126.498073][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.523750][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.547468][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.695310][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.728021][ T6897] netlink: 'syz.2.315': attribute type 4 has an invalid length. [ 126.769864][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.783871][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.009952][ T10] usb 1-1: usb_control_msg returned -32 [ 127.020335][ T10] usbtmc 1-1:16.0: can't read capabilities [ 127.095161][ T10] usb 1-1: USB disconnect, device number 5 [ 127.970055][ T30] audit: type=1326 audit(1760235617.598:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6909 comm="syz.0.320" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc1338eec9 code=0x0 [ 128.975551][ T6928] netlink: 'syz.1.326': attribute type 4 has an invalid length. [ 129.922224][ T6948] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 129.928933][ T6948] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 130.605763][ T6957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.613334][ T6957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.688724][ T6957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.703030][ T6957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.646364][ T6964] netlink: 'syz.3.337': attribute type 4 has an invalid length. [ 132.152861][ T6981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 132.368731][ T6986] tipc: Enabled bearer , priority 0 [ 132.376433][ T6986] syzkaller0: entered promiscuous mode [ 132.382047][ T6986] syzkaller0: entered allmulticast mode [ 132.438560][ T6986] tipc: Resetting bearer [ 132.572999][ T6985] tipc: Resetting bearer [ 132.679664][ T6985] tipc: Disabling bearer [ 132.926211][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.934946][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.509927][ T7014] netlink: 'syz.2.357': attribute type 4 has an invalid length. [ 134.419150][ T7035] netlink: 68 bytes leftover after parsing attributes in process `syz.3.364'. [ 137.933167][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 140.839385][ T7122] syz.1.402: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 140.902367][ T7122] CPU: 1 UID: 0 PID: 7122 Comm: syz.1.402 Not tainted syzkaller #0 PREEMPT(full) [ 140.902392][ T7122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 140.902410][ T7122] Call Trace: [ 140.902418][ T7122] [ 140.902426][ T7122] dump_stack_lvl+0x189/0x250 [ 140.902450][ T7122] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 140.902472][ T7122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.902490][ T7122] ? __pfx__printk+0x10/0x10 [ 140.902509][ T7122] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 140.902527][ T7122] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 140.902552][ T7122] warn_alloc+0x214/0x310 [ 140.902580][ T7122] ? __pfx_warn_alloc+0x10/0x10 [ 140.902609][ T7122] ? __get_vm_area_node+0x28f/0x300 [ 140.902629][ T7122] ? hash_ipportip_create+0x358/0xfe0 [ 140.902653][ T7122] __vmalloc_node_range_noprof+0x690/0x12d0 [ 140.902673][ T7122] ? alloc_vmap_area+0xda0/0x14c0 [ 140.902715][ T7122] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 140.902735][ T7122] ? hash_ipportip_create+0x358/0xfe0 [ 140.902756][ T7122] ? __get_vm_area_node+0x28f/0x300 [ 140.902777][ T7122] ? hash_ipportip_create+0x358/0xfe0 [ 140.902797][ T7122] __vmalloc_node_range_noprof+0x578/0x12d0 [ 140.902818][ T7122] ? hash_ipportip_create+0x358/0xfe0 [ 140.902837][ T7122] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 140.902885][ T7122] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 140.902906][ T7122] ? hash_ipportip_create+0x358/0xfe0 [ 140.902927][ T7122] ? rcu_is_watching+0x15/0xb0 [ 140.902953][ T7122] ? hash_ipportip_create+0x358/0xfe0 [ 140.902973][ T7122] __kvmalloc_node_noprof+0x674/0x910 [ 140.902995][ T7122] ? hash_ipportip_create+0x358/0xfe0 [ 140.903013][ T7122] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 140.903033][ T7122] ? hash_ipportip_create+0x2fe/0xfe0 [ 140.903058][ T7122] hash_ipportip_create+0x358/0xfe0 [ 140.903085][ T7122] ? __nla_parse+0x40/0x60 [ 140.903107][ T7122] ? __pfx_hash_ipportip_create+0x10/0x10 [ 140.903128][ T7122] ip_set_create+0xa97/0x1940 [ 140.903150][ T7122] ? ip_set_create+0x4a2/0x1940 [ 140.903191][ T7122] ? __pfx_ip_set_create+0x10/0x10 [ 140.903246][ T7122] nfnetlink_rcv_msg+0xb4d/0x1130 [ 140.903270][ T7122] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 140.903309][ T7122] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 140.903329][ T7122] ? kasan_save_track+0x4f/0x80 [ 140.903395][ T7122] netlink_rcv_skb+0x208/0x470 [ 140.903418][ T7122] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.903437][ T7122] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 140.903460][ T7122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.903496][ T7122] ? bpf_lsm_capable+0x9/0x20 [ 140.903512][ T7122] ? security_capable+0x7e/0x2e0 [ 140.903536][ T7122] nfnetlink_rcv+0x282/0x2590 [ 140.903560][ T7122] ? __dev_queue_xmit+0x27b/0x3b50 [ 140.903579][ T7122] ? __dev_queue_xmit+0x1d79/0x3b50 [ 140.903595][ T7122] ? kasan_save_track+0x3e/0x80 [ 140.903613][ T7122] ? __kasan_slab_alloc+0x6c/0x80 [ 140.903639][ T7122] ? __dev_queue_xmit+0x27b/0x3b50 [ 140.903671][ T7122] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 140.903693][ T7122] ? __pfx___dev_queue_xmit+0x10/0x10 [ 140.903726][ T7122] ? ref_tracker_free+0x63a/0x7d0 [ 140.903745][ T7122] ? __asan_memcpy+0x40/0x70 [ 140.903762][ T7122] ? __pfx_ref_tracker_free+0x10/0x10 [ 140.903779][ T7122] ? __skb_clone+0x63/0x7a0 [ 140.903802][ T7122] ? __skb_clone+0x483/0x7a0 [ 140.903830][ T7122] ? skb_clone+0x246/0x3a0 [ 140.903851][ T7122] ? __netlink_deliver_tap+0x807/0x850 [ 140.903875][ T7122] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.903907][ T7122] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.903939][ T7122] netlink_unicast+0x82f/0x9e0 [ 140.903970][ T7122] ? __pfx_netlink_unicast+0x10/0x10 [ 140.903995][ T7122] ? netlink_sendmsg+0x642/0xb30 [ 140.904016][ T7122] ? skb_put+0x11b/0x210 [ 140.904044][ T7122] netlink_sendmsg+0x805/0xb30 [ 140.904078][ T7122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.904103][ T7122] ? aa_sock_msg_perm+0xf1/0x1d0 [ 140.904124][ T7122] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.904143][ T7122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.904167][ T7122] __sock_sendmsg+0x21c/0x270 [ 140.904197][ T7122] ____sys_sendmsg+0x505/0x830 [ 140.904231][ T7122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.904265][ T7122] ? import_iovec+0x74/0xa0 [ 140.904293][ T7122] ___sys_sendmsg+0x21f/0x2a0 [ 140.904323][ T7122] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.904385][ T7122] ? __fget_files+0x2a/0x420 [ 140.904406][ T7122] ? __fget_files+0x3a0/0x420 [ 140.904437][ T7122] __x64_sys_sendmsg+0x19b/0x260 [ 140.904457][ T7122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.904498][ T7122] ? do_syscall_64+0xbe/0xfa0 [ 140.904520][ T7122] do_syscall_64+0xfa/0xfa0 [ 140.904535][ T7122] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.904552][ T7122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.904570][ T7122] ? clear_bhb_loop+0x60/0xb0 [ 140.904592][ T7122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.904609][ T7122] RIP: 0033:0x7f64c718eec9 [ 140.904635][ T7122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.904649][ T7122] RSP: 002b:00007f64c80a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.904669][ T7122] RAX: ffffffffffffffda RBX: 00007f64c73e5fa0 RCX: 00007f64c718eec9 [ 140.904684][ T7122] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 140.904695][ T7122] RBP: 00007f64c7211f91 R08: 0000000000000000 R09: 0000000000000000 [ 140.904708][ T7122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.904719][ T7122] R13: 00007f64c73e6038 R14: 00007f64c73e5fa0 R15: 00007f64c750fa28 [ 140.904750][ T7122] [ 140.904800][ T7122] Mem-Info: [ 141.462099][ T7122] active_anon:13462 inactive_anon:0 isolated_anon:0 [ 141.462099][ T7122] active_file:12548 inactive_file:39924 isolated_file:0 [ 141.462099][ T7122] unevictable:768 dirty:174 writeback:0 [ 141.462099][ T7122] slab_reclaimable:10332 slab_unreclaimable:96170 [ 141.462099][ T7122] mapped:32578 shmem:8310 pagetables:1478 [ 141.462099][ T7122] sec_pagetables:0 bounce:0 [ 141.462099][ T7122] kernel_misc_reclaimable:0 [ 141.462099][ T7122] free:1278283 free_pcp:14794 free_cma:0 [ 141.536387][ T7122] Node 0 active_anon:50500kB inactive_anon:0kB active_file:50140kB inactive_file:159496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128960kB dirty:696kB writeback:0kB shmem:31704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12040kB pagetables:5168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 141.570992][ T7122] Node 1 active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 141.601879][ T7122] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.632537][ T7122] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 141.638794][ T7122] Node 0 DMA32 free:1209600kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51876kB inactive_anon:0kB active_file:50140kB inactive_file:159496kB unevictable:1536kB writepending:696kB zspages:0kB present:3129332kB managed:2561628kB mlocked:0kB bounce:0kB free_pcp:41320kB local_pcp:18628kB free_cma:0kB [ 141.672747][ T7122] lowmem_reserve[]: 0 0 1 1 1 [ 141.677723][ T7122] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.709895][ T10] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 141.732967][ T7122] lowmem_reserve[]: 0 0 0 0 0 [ 141.738508][ T7122] Node 1 Normal free:3888172kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22176kB local_pcp:9728kB free_cma:0kB [ 141.793715][ T7122] lowmem_reserve[]: 0 0 0 0 0 [ 141.798490][ T7122] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 141.813993][ T7122] Node 0 DMA32: 457*4kB (UME) 304*8kB (UM) 161*16kB (UME) 268*32kB (UME) 140*64kB (UME) 65*128kB (UME) 32*256kB (ME) 3*512kB (UM) 0*1024kB 2*2048kB (UM) 285*4096kB (UM) = 1213876kB [ 141.833500][ T7122] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 141.846194][ T7122] Node 1 Normal: 237*4kB (UME) 43*8kB (UE) 44*16kB (UE) 55*32kB (UE) 14*64kB (UME) 8*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 946*4096kB (M) = 3888172kB [ 141.864667][ T7122] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.874638][ T7122] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.888149][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 141.895811][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 141.908903][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 141.920980][ T7122] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.931104][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 141.945177][ T7122] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.964775][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 141.975983][ T7122] 59104 total pagecache pages [ 141.986100][ T7122] 0 pages in swap cache [ 141.997605][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 142.005482][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.017488][ T7122] Free swap = 124996kB [ 142.022469][ T7122] Total swap = 124996kB [ 142.026633][ T7122] 2097051 pages RAM [ 142.032088][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.044211][ T7122] 0 pages HighMem/MovableOnly [ 142.049309][ T7122] 424554 pages reserved [ 142.059743][ T7122] 0 pages cma reserved [ 142.065186][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.095713][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.118633][ T10] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 142.130835][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.149962][ T10] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.169748][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.191143][ T10] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.232980][ T10] usb 5-1: string descriptor 0 read error: -22 [ 142.241500][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 142.274350][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.307633][ T10] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 142.364752][ T7167] wg1: entered promiscuous mode [ 142.369661][ T7167] wg1: entered allmulticast mode [ 142.521053][ T5952] usb 5-1: USB disconnect, device number 3 [ 143.523272][ T7185] netlink: del zone limit has 8 unknown bytes [ 143.588343][ T7187] netlink: 48 bytes leftover after parsing attributes in process `syz.2.429'. [ 144.211431][ T7200] netlink: 68 bytes leftover after parsing attributes in process `syz.4.435'. [ 144.345082][ T7206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 144.442367][ T5952] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 144.466997][ T30] audit: type=1326 audit(1760235634.108:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 144.519850][ T30] audit: type=1326 audit(1760235634.108:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 144.559765][ T30] audit: type=1326 audit(1760235634.108:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 144.599915][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 144.615642][ T30] audit: type=1326 audit(1760235634.108:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 144.636276][ T5952] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 144.659799][ T5952] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.668322][ T30] audit: type=1326 audit(1760235634.118:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 144.673693][ T7213] netlink: 48 bytes leftover after parsing attributes in process `syz.3.441'. [ 144.710546][ T5952] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.729854][ T30] audit: type=1326 audit(1760235634.118:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 144.754559][ T5952] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.774945][ T5952] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.792469][ T7124] Set syz1 is full, maxelem 2 reached [ 144.808886][ T30] audit: type=1326 audit(1760235634.118:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 144.839158][ T5952] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 144.870741][ T5952] usb 3-1: New USB device strings: Mfr=234, Product=255, SerialNumber=0 [ 144.879125][ T5952] usb 3-1: Product: syz [ 144.885205][ T30] audit: type=1326 audit(1760235634.118:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 144.929822][ T5952] usb 3-1: Manufacturer: syz [ 144.969786][ T30] audit: type=1326 audit(1760235634.128:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7209 comm="syz.3.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 145.022631][ T30] audit: type=1326 audit(1760235634.138:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7211 comm="syz.3.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f01b5dc1785 code=0x7ffc0000 [ 145.132698][ T5908] IPVS: starting estimator thread 0... [ 145.193640][ T5952] usb 3-1: GET_CAPABILITIES returned 0 [ 145.199176][ T5952] usbtmc 3-1:16.0: can't read capabilities [ 145.240075][ T7227] IPVS: using max 29 ests per chain, 69600 per kthread [ 145.318732][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 145.828018][ T7246] netlink: 48 bytes leftover after parsing attributes in process `syz.3.457'. [ 145.869336][ T7248] tipc: Started in network mode [ 145.894636][ T7248] tipc: Node identity 3e15eca91e3f, cluster identity 4711 [ 145.927246][ T7248] tipc: Enabled bearer , priority 0 [ 146.099153][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.143841][ T7247] tipc: Disabling bearer [ 146.255778][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.417758][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.595411][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.018750][ T36] bridge_slave_1: left allmulticast mode [ 147.069865][ T36] bridge_slave_1: left promiscuous mode [ 147.079848][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.181939][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 147.203484][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 147.204437][ T36] bridge_slave_0: left allmulticast mode [ 147.216575][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 147.224948][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 147.233292][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 147.268850][ T36] bridge_slave_0: left promiscuous mode [ 147.275212][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.776237][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.860582][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.881854][ T36] bond0 (unregistering): Released all slaves [ 148.204261][ T36] tipc: Disabling bearer [ 148.264219][ T7288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.468'. [ 148.274191][ T36] tipc: Left network mode [ 149.224638][ T36] hsr_slave_0: left promiscuous mode [ 149.241904][ T36] hsr_slave_1: left promiscuous mode [ 149.257299][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.310878][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.321541][ T52] Bluetooth: hci3: command tx timeout [ 149.483531][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.501717][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.541420][ T36] veth1_macvtap: left promiscuous mode [ 149.547368][ T36] veth0_macvtap: left promiscuous mode [ 149.554836][ T7306] netlink: 68 bytes leftover after parsing attributes in process `syz.1.471'. [ 149.565247][ T36] veth1_vlan: left promiscuous mode [ 149.571000][ T36] veth0_vlan: left promiscuous mode [ 150.378181][ T36] team0 (unregistering): Port device team_slave_1 removed [ 150.416438][ T36] team0 (unregistering): Port device team_slave_0 removed [ 150.441827][ T7202] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 150.459614][ T5908] usb 3-1: USB disconnect, device number 3 [ 150.735137][ T7279] chnl_net:caif_netlink_parms(): no params data found [ 151.041662][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 151.041679][ T30] audit: type=1326 audit(1760235640.688:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 151.202382][ T30] audit: type=1326 audit(1760235640.688:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 151.237305][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.261945][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.269193][ T7279] bridge_slave_0: entered allmulticast mode [ 151.284668][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'. [ 151.289843][ T30] audit: type=1326 audit(1760235640.718:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 151.326685][ T7332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.478'. [ 151.347547][ T7279] bridge_slave_0: entered promiscuous mode [ 151.357093][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.365273][ T30] audit: type=1326 audit(1760235640.718:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 151.391090][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.399964][ T52] Bluetooth: hci3: command tx timeout [ 151.409987][ T7279] bridge_slave_1: entered allmulticast mode [ 151.429824][ T7279] bridge_slave_1: entered promiscuous mode [ 151.446859][ T30] audit: type=1326 audit(1760235640.718:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 151.726658][ T30] audit: type=1326 audit(1760235640.798:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 151.749350][ T30] audit: type=1326 audit(1760235640.798:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7318 comm="syz.2.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 151.925322][ T7279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.984221][ T7279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.005309][ T7352] pim6reg: entered allmulticast mode [ 152.087946][ T7353] pim6reg: left allmulticast mode [ 152.251486][ T7279] team0: Port device team_slave_0 added [ 152.301723][ T7279] team0: Port device team_slave_1 added [ 152.323611][ T36] IPVS: stop unused estimator thread 0... [ 152.542830][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.570176][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.671158][ T7279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.721384][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.729860][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.756385][ T7279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.952390][ T7385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.497'. [ 152.959413][ T7279] hsr_slave_0: entered promiscuous mode [ 152.992367][ T7279] hsr_slave_1: entered promiscuous mode [ 153.016397][ T7279] debugfs: 'hsr0' already exists in 'hsr' [ 153.055663][ T7279] Cannot create hsr debugfs directory [ 153.410946][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.502'. [ 153.448407][ T7400] netlink: 68 bytes leftover after parsing attributes in process `syz.4.501'. [ 153.486452][ T52] Bluetooth: hci3: command tx timeout [ 153.676542][ T30] audit: type=1326 audit(1760235643.308:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 153.768519][ T30] audit: type=1326 audit(1760235643.308:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 153.845846][ T30] audit: type=1326 audit(1760235643.318:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.3.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 154.522105][ T7279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 154.573009][ T7279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 154.611044][ T7279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 154.657973][ T7279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 154.853812][ T7452] netlink: 68 bytes leftover after parsing attributes in process `syz.2.515'. [ 154.971513][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.028313][ T7279] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.072343][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.079628][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.121305][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.128434][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.374427][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.518644][ T7279] veth0_vlan: entered promiscuous mode [ 155.559990][ T52] Bluetooth: hci3: command tx timeout [ 155.603018][ T7279] veth1_vlan: entered promiscuous mode [ 155.758088][ T7279] veth0_macvtap: entered promiscuous mode [ 155.820820][ T7279] veth1_macvtap: entered promiscuous mode [ 155.969418][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.000180][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.024919][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.056683][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.083385][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.095321][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.126734][ T7487] program syz.4.524 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.284761][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.328621][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.642171][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.668922][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.641289][ T7533] binder: 7532:7533 ioctl c0306201 0 returned -14 [ 158.029869][ T5908] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 158.216528][ T5908] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 158.238229][ T5908] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.257920][ T5908] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.267388][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.285719][ T5908] usb 3-1: Product: syz [ 158.302599][ T5908] usb 3-1: Manufacturer: syz [ 158.310914][ T5908] usb 3-1: SerialNumber: syz [ 158.463789][ T5908] usb 3-1: config 0 descriptor?? [ 158.516851][ T5908] usb 3-1: selecting invalid altsetting 0 [ 158.712553][ T5908] usb 3-1: USB disconnect, device number 4 [ 159.214210][ T7572] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 160.747816][ T7608] binder: 7605:7608 ioctl c0306201 0 returned -14 [ 162.040925][ T43] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.301527][ T43] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 162.312211][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 162.323783][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 162.340483][ T43] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 162.357316][ T43] usb 5-1: Product: syz [ 162.363572][ T43] usb 5-1: Manufacturer: syz [ 162.374012][ T43] usb 5-1: SerialNumber: syz [ 162.388526][ T43] usb 5-1: config 0 descriptor?? [ 162.403817][ T43] usb 5-1: selecting invalid altsetting 0 [ 162.611811][ T43] usb 5-1: USB disconnect, device number 4 [ 162.668743][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.856223][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 163.856240][ T30] audit: type=1326 audit(1760235653.498:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 163.938451][ T30] audit: type=1326 audit(1760235653.528:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 163.998962][ T30] audit: type=1326 audit(1760235653.528:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 164.035141][ T30] audit: type=1326 audit(1760235653.528:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 164.058722][ T30] audit: type=1326 audit(1760235653.528:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 164.082191][ T30] audit: type=1326 audit(1760235653.528:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 164.104479][ T30] audit: type=1326 audit(1760235653.528:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 164.127287][ T30] audit: type=1326 audit(1760235653.528:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89b4d8d710 code=0x7ffc0000 [ 164.150895][ T30] audit: type=1326 audit(1760235653.528:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 164.173222][ T30] audit: type=1326 audit(1760235653.528:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7657 comm="syz.2.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 164.219827][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 164.371799][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.382159][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.392791][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 164.407456][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 164.428926][ T10] usb 2-1: Product: syz [ 164.438688][ T10] usb 2-1: Manufacturer: syz [ 164.481872][ T10] usb 2-1: SerialNumber: syz [ 164.505583][ T10] usb 2-1: config 0 descriptor?? [ 164.533899][ T10] usb 2-1: selecting invalid altsetting 0 [ 164.771780][ T43] usb 2-1: USB disconnect, device number 3 [ 164.864645][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.063116][ T7681] xt_TCPMSS: Only works on TCP SYN packets [ 165.671640][ T7703] hub 9-0:1.0: USB hub found [ 165.676742][ T7703] hub 9-0:1.0: 1 port detected [ 165.879365][ T7710] netlink: 'syz.3.596': attribute type 1 has an invalid length. [ 166.040256][ T7716] bond1: entered allmulticast mode [ 166.459874][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 166.635687][ T5886] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 166.659801][ T5886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 166.672733][ T5886] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 166.691903][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 166.716158][ T5886] usb 1-1: Product: syz [ 166.725924][ T5886] usb 1-1: Manufacturer: syz [ 166.739888][ T5886] usb 1-1: SerialNumber: syz [ 166.754304][ T5886] usb 1-1: config 0 descriptor?? [ 166.790377][ T5886] usb 1-1: selecting invalid altsetting 0 [ 166.998453][ T43] usb 1-1: USB disconnect, device number 6 [ 167.347330][ T7750] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 167.553660][ T7754] fuse: Bad value for 'fd' [ 167.709432][ T7761] capability: warning: `syz.0.616' uses deprecated v2 capabilities in a way that may be insecure [ 167.822085][ T7763] raw_sendmsg: syz.2.617 forgot to set AF_INET. Fix it! [ 167.863422][ T10] IPVS: starting estimator thread 0... [ 167.980257][ T7768] IPVS: using max 28 ests per chain, 67200 per kthread [ 169.015589][ T7800] netlink: 'syz.4.631': attribute type 4 has an invalid length. [ 170.296794][ T7838] mmap: syz.1.648 (7838) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 171.415115][ T7853] pim6reg: entered allmulticast mode [ 171.426991][ T7856] binder: BINDER_SET_CONTEXT_MGR already set [ 171.456610][ T7856] binder: 7855:7856 ioctl 4018620d 200000004a80 returned -16 [ 171.459808][ T7854] pim6reg: left allmulticast mode [ 171.950240][ T5952] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 172.112905][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 172.121688][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 172.143239][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.165768][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 172.174277][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 172.185818][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.198444][ T5952] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 172.207062][ T5952] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 172.232146][ T5952] usb 4-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 172.250287][ T5952] usb 4-1: string descriptor 0 read error: -22 [ 172.256823][ T5952] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 172.292753][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.331714][ T5952] adutux 4-1:168.0: interrupt endpoints not found [ 172.531298][ T5887] usb 4-1: USB disconnect, device number 4 [ 173.191541][ T7921] program syz.0.683 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.301919][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 173.461788][ T5887] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 173.494260][ T30] kauditd_printk_skb: 97 callbacks suppressed [ 173.494275][ T30] audit: type=1326 audit(1760235663.138:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 173.497535][ T5887] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.523330][ T30] audit: type=1326 audit(1760235663.168:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 173.557082][ T5887] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.566926][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.577030][ T5887] usb 3-1: Product: syz [ 173.583409][ T5887] usb 3-1: Manufacturer: syz [ 173.592140][ T30] audit: type=1326 audit(1760235663.198:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 173.633433][ T5887] usb 3-1: SerialNumber: syz [ 173.682569][ T5887] usb 3-1: config 0 descriptor?? [ 173.687349][ T30] audit: type=1326 audit(1760235663.198:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 173.716986][ T5887] usb 3-1: selecting invalid altsetting 0 [ 173.776582][ T30] audit: type=1326 audit(1760235663.198:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 173.817321][ T30] audit: type=1326 audit(1760235663.198:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 173.844449][ T30] audit: type=1326 audit(1760235663.208:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 173.867083][ T30] audit: type=1326 audit(1760235663.208:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 173.890824][ T30] audit: type=1326 audit(1760235663.208:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 173.929202][ T30] audit: type=1326 audit(1760235663.208:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 173.955199][ T5887] usb 3-1: USB disconnect, device number 5 [ 174.015078][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.037400][ T7945] tipc: Started in network mode [ 174.050175][ T5952] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 174.054263][ T7945] tipc: Node identity 8acdc3396ed1, cluster identity 4711 [ 174.066641][ T7945] tipc: Enabled bearer , priority 0 [ 174.079963][ T7945] syzkaller0: entered promiscuous mode [ 174.085689][ T7945] syzkaller0: entered allmulticast mode [ 174.107195][ T7945] tipc: Resetting bearer [ 174.115934][ T7944] tipc: Resetting bearer [ 174.133852][ T7944] tipc: Disabling bearer [ 174.182884][ T5952] usb 1-1: device descriptor read/64, error -71 [ 174.273268][ T7952] program syz.3.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.419898][ T5952] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 174.484616][ T7958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 174.559773][ T5952] usb 1-1: device descriptor read/64, error -71 [ 174.690064][ T5952] usb usb1-port1: attempt power cycle [ 175.039764][ T5952] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 175.084477][ T5952] usb 1-1: device descriptor read/8, error -71 [ 175.109343][ T7969] process 'syz.3.701' launched './file1' with NULL argv: empty string added [ 175.340144][ T5952] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 175.360489][ T5952] usb 1-1: device descriptor read/8, error -71 [ 175.472841][ T5952] usb usb1-port1: unable to enumerate USB device [ 175.564496][ T7981] netlink: 'syz.1.706': attribute type 1 has an invalid length. [ 175.794572][ T7984] bond1: entered allmulticast mode [ 176.225959][ T8004] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.976779][ T8035] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 178.906188][ T8102] program syz.3.757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.057684][ T8108] bond2: entered allmulticast mode [ 179.125638][ T8113] netlink: del zone limit has 8 unknown bytes [ 179.854706][ T8133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.770'. [ 180.276379][ T8140] netlink: del zone limit has 8 unknown bytes [ 180.428906][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.775'. [ 180.592483][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 180.592501][ T30] audit: type=1326 audit(1760235670.238:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 180.650232][ T5908] hid_parser_main: 33 callbacks suppressed [ 180.650253][ T5908] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 180.676947][ T30] audit: type=1326 audit(1760235670.238:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 180.704793][ T5908] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 180.737760][ T30] audit: type=1326 audit(1760235670.278:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 180.762851][ T30] audit: type=1326 audit(1760235670.278:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 180.792921][ T30] audit: type=1326 audit(1760235670.278:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 180.815982][ T30] audit: type=1326 audit(1760235670.278:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 180.879768][ T30] audit: type=1326 audit(1760235670.278:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 180.939821][ T30] audit: type=1326 audit(1760235670.278:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 180.987619][ T30] audit: type=1326 audit(1760235670.278:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 181.010572][ T30] audit: type=1326 audit(1760235670.278:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8150 comm="syz.4.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 181.013318][ T8160] openvswitch: netlink: IP tunnel attribute has 3 unknown bytes. [ 183.018148][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 184.303040][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 186.258185][ T8316] netlink: del zone limit has 8 unknown bytes [ 186.345342][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 188.370434][ T8362] netlink: del zone limit has 8 unknown bytes [ 189.120393][ T8385] : renamed from vlan1 (while UP) [ 189.519936][ T8393] netlink: del zone limit has 8 unknown bytes [ 189.716201][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 189.716220][ T30] audit: type=1326 audit(1760235679.348:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 189.867383][ T30] audit: type=1326 audit(1760235679.388:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 189.912922][ T30] audit: type=1326 audit(1760235679.388:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 190.125420][ T30] audit: type=1326 audit(1760235679.388:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8398 comm="syz.2.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 190.289458][ T8415] netlink: 56 bytes leftover after parsing attributes in process `syz.4.890'. [ 190.982429][ T8446] syzkaller0: entered allmulticast mode [ 190.996381][ T8446] syzkaller0: entered promiscuous mode [ 191.018400][ T8446] syzkaller0 (unregistering): left allmulticast mode [ 191.026207][ T8446] syzkaller0 (unregistering): left promiscuous mode [ 191.366992][ T30] audit: type=1326 audit(1760235681.008:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 191.623737][ T30] audit: type=1326 audit(1760235681.008:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 191.722825][ T30] audit: type=1326 audit(1760235681.048:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 191.792988][ T30] audit: type=1326 audit(1760235681.048:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 191.899746][ T30] audit: type=1326 audit(1760235681.048:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8456 comm="syz.3.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b5d8eec9 code=0x7ffc0000 [ 192.741458][ T30] audit: type=1326 audit(1760235682.388:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8507 comm="syz.0.933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40aa78eec9 code=0x7ffc0000 [ 193.211612][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.936'. [ 193.224269][ T8514] tipc: Cannot configure node identity twice [ 193.406576][ T8522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.938'. [ 193.443478][ T8526] netlink: 'syz.4.941': attribute type 6 has an invalid length. [ 193.453795][ T8526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.941'. [ 194.113252][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 194.376561][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.384845][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.404030][ T8609] syz_tun: entered allmulticast mode [ 195.512488][ T8608] syz_tun: left allmulticast mode [ 195.797645][ T8618] netlink: 'syz.2.977': attribute type 1 has an invalid length. [ 195.837269][ T8616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.978'. [ 196.043084][ T8622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 196.215593][ T8619] bond1: entered allmulticast mode [ 196.393626][ T8629] bridge1: entered promiscuous mode [ 196.843115][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 197.055074][ T8658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.996'. [ 197.081479][ T8656] tipc: Started in network mode [ 197.086752][ T8656] tipc: Node identity 52ccf669c7f1, cluster identity 4711 [ 197.132508][ T8656] tipc: Enabled bearer , priority 0 [ 197.164742][ T8656] syzkaller0: entered promiscuous mode [ 197.179839][ T8656] syzkaller0: entered allmulticast mode [ 197.209411][ T8656] tipc: Resetting bearer [ 197.262405][ T8655] tipc: Resetting bearer [ 197.334546][ T8655] tipc: Disabling bearer [ 197.488819][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1000'. [ 197.792248][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 197.792265][ T30] audit: type=1326 audit(1760235687.438:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 197.843593][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1009'. [ 197.862896][ T30] audit: type=1326 audit(1760235687.438:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 197.924881][ T30] audit: type=1326 audit(1760235687.468:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 197.988348][ T30] audit: type=1326 audit(1760235687.468:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 198.031107][ T30] audit: type=1326 audit(1760235687.468:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 198.078698][ T30] audit: type=1326 audit(1760235687.478:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 198.124247][ T30] audit: type=1326 audit(1760235687.478:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 198.159252][ T30] audit: type=1326 audit(1760235687.478:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 198.183626][ T30] audit: type=1326 audit(1760235687.478:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 198.209206][ T30] audit: type=1326 audit(1760235687.478:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz.4.1008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 198.549771][ T5908] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 198.724340][ T5908] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.739916][ T5908] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 198.759566][ T5908] usb 3-1: New USB device strings: Mfr=180, Product=92, SerialNumber=0 [ 198.773649][ T5908] usb 3-1: Product: syz [ 198.783431][ T5908] usb 3-1: Manufacturer: syz [ 198.822838][ T5908] usb 3-1: config 0 descriptor?? [ 199.317720][ T10] IPVS: starting estimator thread 0... [ 199.421255][ T8710] IPVS: using max 26 ests per chain, 62400 per kthread [ 199.787491][ T8725] syzkaller0: entered allmulticast mode [ 199.808000][ T8725] syzkaller0: entered promiscuous mode [ 199.831531][ T8724] syzkaller0: left promiscuous mode [ 199.837129][ T8724] syzkaller0: left allmulticast mode [ 199.982005][ T8734] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1029'. [ 200.109934][ T43] IPVS: starting estimator thread 0... [ 200.220145][ T8739] IPVS: using max 29 ests per chain, 69600 per kthread [ 200.890296][ T8758] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1041'. [ 200.958295][ T8762] tipc: Enabled bearer , priority 10 [ 200.986175][ T5908] usb 3-1: USB disconnect, device number 6 [ 201.573707][ T8775] syzkaller0: entered allmulticast mode [ 201.605702][ T8775] syzkaller0: entered promiscuous mode [ 201.631949][ T8771] syzkaller0: left promiscuous mode [ 201.648767][ T8771] syzkaller0: left allmulticast mode [ 201.918610][ T8787] binder: 8786:8787 ioctl c0306201 0 returned -14 [ 202.079856][ T5952] tipc: Node number set to 539684009 [ 202.727804][ T8800] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 203.543042][ T8824] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1070'. [ 203.631235][ T8827] binder: 8826:8827 ioctl c0306201 0 returned -14 [ 203.721841][ T8829] syzkaller0: entered allmulticast mode [ 203.735389][ T8829] syzkaller0: entered promiscuous mode [ 203.746621][ T8828] syzkaller0: left promiscuous mode [ 203.752445][ T8828] syzkaller0: left allmulticast mode [ 204.421055][ T8854] syzkaller0: entered allmulticast mode [ 204.427536][ T8854] syzkaller0: entered promiscuous mode [ 204.433757][ T8853] syzkaller0: left promiscuous mode [ 204.439955][ T8853] syzkaller0: left allmulticast mode [ 204.671167][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 204.671184][ T30] audit: type=1326 audit(1760235694.308:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 204.761574][ T30] audit: type=1326 audit(1760235694.318:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 204.882801][ T30] audit: type=1326 audit(1760235694.358:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 204.940287][ T8863] bond2: entered allmulticast mode [ 205.081158][ T30] audit: type=1326 audit(1760235694.358:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 205.110578][ T30] audit: type=1326 audit(1760235694.358:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 205.140069][ T30] audit: type=1326 audit(1760235694.788:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 205.277523][ T30] audit: type=1326 audit(1760235694.788:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 205.446702][ T30] audit: type=1326 audit(1760235694.808:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 205.496195][ T30] audit: type=1326 audit(1760235694.808:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 205.551071][ T30] audit: type=1326 audit(1760235694.818:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8858 comm="syz.4.1086" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0493b8eec9 code=0x7ffc0000 [ 206.710689][ T8899] syzkaller0: entered allmulticast mode [ 206.895869][ T8899] syzkaller0: entered promiscuous mode [ 206.971867][ T8898] syzkaller0: left promiscuous mode [ 206.993664][ T8898] syzkaller0: left allmulticast mode [ 207.136276][ T8901] fuse: Bad value for 'group_id' [ 207.159920][ T8901] fuse: Bad value for 'group_id' [ 207.604261][ T8924] bond2: entered allmulticast mode [ 208.271375][ T8961] program syz.1.1126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.648068][ T8976] fuse: Bad value for 'group_id' [ 208.664591][ T8976] fuse: Bad value for 'group_id' [ 209.076751][ T8992] program syz.0.1139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.511538][ T9003] netlink: 'syz.3.1145': attribute type 4 has an invalid length. [ 209.543497][ T5906] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 209.710986][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 209.760305][ T5906] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 209.789414][ T5906] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 209.818146][ T5906] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 209.838647][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 209.863192][ T5906] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 209.891980][ T5906] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 209.913649][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.947899][ T5906] usbtmc 2-1:16.0: bulk endpoints not found [ 210.218069][ T9029] netlink: 'syz.3.1157': attribute type 4 has an invalid length. [ 211.174572][ T9062] netlink: 'syz.3.1172': attribute type 10 has an invalid length. [ 211.200112][ T9062] team0: Port device netdevsim0 added [ 211.213897][ T9062] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 211.220442][ T9062] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 211.241451][ T9062] vhci_hcd vhci_hcd.0: Device attached [ 211.249722][ T9065] vhci_hcd: connection closed [ 211.256451][ T36] vhci_hcd: stop threads [ 211.268376][ T36] vhci_hcd: release socket [ 211.279630][ T36] vhci_hcd: disconnect device [ 211.318547][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 211.318563][ T30] audit: type=1326 audit(1760235700.958:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 211.353402][ T30] audit: type=1326 audit(1760235700.998:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.2.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 211.397264][ T30] audit: type=1326 audit(1760235700.998:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 211.420724][ T30] audit: type=1326 audit(1760235700.998:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 211.443023][ T30] audit: type=1326 audit(1760235700.998:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 211.467278][ T30] audit: type=1326 audit(1760235700.998:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 211.489262][ T30] audit: type=1326 audit(1760235700.998:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 211.537226][ T30] audit: type=1326 audit(1760235700.998:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 211.559248][ T30] audit: type=1326 audit(1760235700.998:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 211.583690][ T30] audit: type=1326 audit(1760235701.018:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x7ffc0000 [ 211.629470][ T9075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 211.712888][ T9078] xt_CT: You must specify a L4 protocol and not use inversions on it [ 211.986528][ T9092] random: crng reseeded on system resumption [ 212.304176][ T5906] usb 2-1: USB disconnect, device number 4 [ 213.416758][ T9143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1206'. [ 214.920046][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 215.046122][ T9177] netlink: 'syz.4.1220': attribute type 10 has an invalid length. [ 215.074917][ T9177] team0: Device dummy0 is up. Set it down before adding it as a team port [ 215.109805][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 215.124280][ T5906] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 215.149900][ T5906] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 215.186733][ T5906] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.214919][ T5906] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 215.253395][ T5906] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 215.274684][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.297552][ T5906] usb 2-1: Product: syz [ 215.310181][ T5906] usb 2-1: Manufacturer: syz [ 215.325037][ T5906] usb 2-1: SerialNumber: syz [ 215.355626][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 215.394516][ T5906] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input8 [ 215.569781][ T5906] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 215.598475][ T5906] (id 0x00) [ 215.749879][ T5906] rc_core: IR keymap rc-imon-pad not found [ 215.755728][ T5906] Registered IR keymap rc-empty [ 215.760749][ T5906] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 215.800263][ T5906] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 215.833095][ T5906] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 215.850015][ T5906] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input9 [ 215.886971][ T5906] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:5> initialized [ 216.366435][ T9199] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.397116][ T9199] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 216.700898][ T9217] binder: 9216:9217 ioctl c0306201 0 returned -14 [ 217.099328][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 217.099345][ T30] audit: type=1326 audit(1760235706.738:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.1244" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x0 [ 217.208121][ T9245] binder: 9244:9245 ioctl c0306201 0 returned -14 [ 217.964256][ T5906] usb 2-1: USB disconnect, device number 5 [ 218.332813][ T9281] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1264'. [ 218.371546][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1264'. [ 218.397569][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 218.588414][ T30] audit: type=1326 audit(1760235708.228:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9288 comm="syz.2.1268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89b4d8eec9 code=0x0 [ 218.915389][ T5906] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 219.069803][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 219.077556][ T5906] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 219.110688][ T5906] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 219.140071][ T5906] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.156024][ T5906] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 219.195587][ T5906] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 219.208763][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.220927][ T5906] usb 4-1: Product: syz [ 219.225133][ T5906] usb 4-1: Manufacturer: syz [ 219.230577][ T5906] usb 4-1: SerialNumber: syz [ 219.273565][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 219.283256][ T5906] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input10 [ 219.489786][ T5906] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 219.509785][ T5906] (id 0x00) [ 219.554032][ T30] audit: type=1326 audit(1760235709.198:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40aa78eec9 code=0x7ffc0000 [ 219.605252][ T30] audit: type=1326 audit(1760235709.198:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40aa78eec9 code=0x7ffc0000 [ 219.629553][ T30] audit: type=1326 audit(1760235709.228:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f40aa78eec9 code=0x7ffc0000 [ 219.652409][ T5906] rc_core: IR keymap rc-imon-pad not found [ 219.658241][ T5906] Registered IR keymap rc-empty [ 219.666961][ T5906] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 219.678147][ T30] audit: type=1326 audit(1760235709.228:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40aa78ef03 code=0x7ffc0000 [ 219.709770][ T5906] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 219.720114][ T30] audit: type=1326 audit(1760235709.228:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40aa78ef03 code=0x7ffc0000 [ 219.743151][ T30] audit: type=1326 audit(1760235709.228:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40aa78eec9 code=0x7ffc0000 [ 219.766851][ T5906] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 219.790502][ T5906] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input11 [ 219.821722][ T5906] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:5> initialized [ 219.831351][ T30] audit: type=1326 audit(1760235709.228:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40aa78eec9 code=0x7ffc0000 [ 219.879884][ T30] audit: type=1326 audit(1760235709.228:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9316 comm="syz.0.1280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40aa78eec9 code=0x7ffc0000 [ 220.790022][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 220.964981][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 220.985209][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 221.000969][ T10] usb 5-1: can't read configurations, error -71 [ 221.105899][ T9354] fuse: Unknown parameter 'grou00000000000000000000' [ 221.236810][ T9357] ip6erspan0: entered promiscuous mode [ 221.549441][ T9373] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1304'. [ 221.876680][ T43] usb 4-1: USB disconnect, device number 5 [ 222.484080][ T9401] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1315'. [ 222.495239][ T9400] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1316'. [ 222.868871][ T9409] fuse: Unknown parameter 'grou00000000000000000000' [ 223.073348][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 223.214980][ T9419] syzkaller0: entered allmulticast mode [ 223.229736][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 223.238195][ T10] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 223.253288][ T9419] syzkaller0: entered promiscuous mode [ 223.253301][ T10] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 223.287205][ T10] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 223.306471][ T9419] syzkaller0 (unregistering): left allmulticast mode [ 223.316256][ T10] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 223.320284][ T9419] syzkaller0 (unregistering): left promiscuous mode [ 223.353640][ T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 223.363342][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.379271][ T10] usb 4-1: Product: syz [ 223.389486][ T10] usb 4-1: Manufacturer: syz [ 223.400974][ T10] usb 4-1: SerialNumber: syz [ 223.441026][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 223.456884][ T10] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input12 [ 223.649732][ T10] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 223.664523][ T10] (id 0x00) [ 223.666641][ T9427] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1328'. [ 223.677239][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1328'. [ 223.760399][ T10] rc_core: IR keymap rc-imon-pad not found [ 223.766232][ T10] Registered IR keymap rc-empty [ 223.772365][ T10] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 223.793822][ T10] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 223.851066][ T10] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 223.875010][ T10] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input13 [ 223.905163][ T10] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:6> initialized [ 224.424359][ T9454] fuse: Unknown parameter 'grou00000000000000000000' [ 225.004566][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 225.004583][ T30] audit: type=1326 audit(1760235714.648:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 225.041980][ T30] audit: type=1326 audit(1760235714.688:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 225.099804][ T30] audit: type=1326 audit(1760235714.688:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 225.123169][ T30] audit: type=1326 audit(1760235714.688:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 225.148874][ T30] audit: type=1326 audit(1760235714.688:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 225.171583][ T30] audit: type=1326 audit(1760235714.688:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 225.195206][ T30] audit: type=1326 audit(1760235714.688:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 225.218007][ T30] audit: type=1326 audit(1760235714.688:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 225.241968][ T30] audit: type=1326 audit(1760235714.688:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 225.269338][ T30] audit: type=1326 audit(1760235714.688:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9472 comm="syz.1.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 225.962740][ T5907] usb 4-1: USB disconnect, device number 6 [ 226.368699][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1372'. [ 226.390577][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1372'. [ 226.400462][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1372'. [ 226.478915][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1372'. [ 226.488844][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1372'. [ 226.499202][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1372'. [ 226.524934][ T9538] tipc: Enabled bearer , priority 0 [ 226.730887][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1372'. [ 226.750159][ T9528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1372'. [ 226.879737][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 227.074546][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 227.102848][ T5906] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 227.131125][ T5906] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 227.155746][ T5906] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 227.183271][ T9562] tipc: Enabled bearer , priority 0 [ 227.197464][ T5906] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 227.275565][ T5906] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 227.292956][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.310562][ T5906] usb 4-1: Product: syz [ 227.314922][ T5906] usb 4-1: Manufacturer: syz [ 227.319529][ T5906] usb 4-1: SerialNumber: syz [ 227.347290][ C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 227.371345][ T5906] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input14 [ 227.714412][ T9574] netlink: 'syz.2.1391': attribute type 21 has an invalid length. [ 227.839771][ T5887] tipc: Node number set to 3827090233 [ 227.859859][ T5906] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 227.879847][ T5906] (id 0x00) [ 228.021937][ T5906] rc_core: IR keymap rc-imon-pad not found [ 228.027804][ T5906] Registered IR keymap rc-empty [ 228.033145][ T5906] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 228.047866][ T5906] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 228.111119][ T5906] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 228.174305][ T5906] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input15 [ 228.209032][ T9591] fuse: Unknown parameter 'group_i00000000000000000000' [ 228.240400][ T5906] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:7> initialized [ 228.300653][ T5907] tipc: Node number set to 2503865961 [ 229.141432][ T9605] hub 9-0:1.0: USB hub found [ 229.154319][ T9605] hub 9-0:1.0: 1 port detected [ 229.926009][ T10] usb 4-1: USB disconnect, device number 7 [ 230.564696][ T9645] fuse: Unknown parameter 'grou00000000000000000000' [ 230.627217][ T9647] IPv6: Can't replace route, no match found [ 231.892137][ T9674] fuse: Unknown parameter 'group_id00000000000000000000' [ 231.916148][ T9676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.179135][ T9689] loop9: detected capacity change from 0 to 7 [ 232.197571][ T9689] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.213799][ T9689] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.228639][ T9692] tipc: Enabling of bearer rejected, already enabled [ 232.230195][ T9689] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.246796][ T9689] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.302389][ T9695] [ 232.304756][ T9695] ====================================================== [ 232.311780][ T9695] WARNING: possible circular locking dependency detected [ 232.318909][ T9695] syzkaller #0 Not tainted [ 232.323325][ T9695] ------------------------------------------------------ [ 232.330345][ T9695] syz.4.1432/9695 is trying to acquire lock: [ 232.336325][ T9695] ffff88801ae88220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 232.346709][ T9695] [ 232.346709][ T9695] but task is already holding lock: [ 232.354077][ T9695] ffff88802473f668 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 232.363855][ T9695] [ 232.363855][ T9695] which lock already depends on the new lock. [ 232.363855][ T9695] [ 232.373344][ T9699] __nla_validate_parse: 1 callbacks suppressed [ 232.373359][ T9699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1435'. [ 232.374250][ T9695] [ 232.374250][ T9695] the existing dependency chain (in reverse order) is: [ 232.374259][ T9695] [ 232.374259][ T9695] -> #2 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 232.407031][ T9695] lock_acquire+0x120/0x360 [ 232.412160][ T9695] blk_alloc_queue+0x538/0x620 [ 232.417460][ T9695] __blk_mq_alloc_disk+0x15c/0x340 [ 232.423110][ T9695] loop_add+0x411/0xad0 [ 232.427802][ T9695] loop_init+0xd9/0x170 [ 232.432486][ T9695] do_one_initcall+0x236/0x820 [ 232.437781][ T9695] do_initcall_level+0x104/0x190 [ 232.443252][ T9695] do_initcalls+0x59/0xa0 [ 232.448115][ T9695] kernel_init_freeable+0x334/0x4b0 [ 232.453846][ T9695] kernel_init+0x1d/0x1d0 [ 232.456164][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 232.456179][ T30] audit: type=1326 audit(1760235722.048:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 232.458699][ T9695] ret_from_fork+0x4bc/0x870 [ 232.458725][ T9695] ret_from_fork_asm+0x1a/0x30 [ 232.466864][ T30] audit: type=1326 audit(1760235722.048:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 232.487160][ T9695] [ 232.487160][ T9695] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 232.487199][ T9695] lock_acquire+0x120/0x360 [ 232.487225][ T9695] fs_reclaim_acquire+0x72/0x100 [ 232.487243][ T9695] kmem_cache_alloc_noprof+0x45/0x6e0 [ 232.487258][ T9695] __kernfs_iattrs+0xd9/0x320 [ 232.493852][ T30] audit: type=1326 audit(1760235722.048:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 232.497648][ T9695] kernfs_iop_setattr+0xea/0x3f0 [ 232.497679][ T9695] notify_change+0xc1a/0xf40 [ 232.521322][ T30] audit: type=1326 audit(1760235722.048:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 232.527051][ T9695] do_truncate+0x1a4/0x220 [ 232.527076][ T9695] path_openat+0x306c/0x3830 [ 232.532515][ T30] audit: type=1326 audit(1760235722.048:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 232.537515][ T9695] do_filp_open+0x1fa/0x410 [ 232.537536][ T9695] do_sys_openat2+0x121/0x1c0 [ 232.544036][ T30] audit: type=1326 audit(1760235722.048:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 232.548593][ T9695] __x64_sys_openat+0x138/0x170 [ 232.548625][ T9695] do_syscall_64+0xfa/0xfa0 [ 232.578747][ T30] audit: type=1326 audit(1760235722.048:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 232.581459][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.581483][ T9695] [ 232.581483][ T9695] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 232.581514][ T9695] validate_chain+0xb9b/0x2140 [ 232.604645][ T30] audit: type=1326 audit(1760235722.048:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 232.608629][ T9695] __lock_acquire+0xab9/0xd20 [ 232.608655][ T9695] lock_acquire+0x120/0x360 [ 232.614323][ T30] audit: type=1326 audit(1760235722.048:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 232.636108][ T9695] down_read+0x46/0x2e0 [ 232.636135][ T9695] kernfs_iop_getattr+0x9e/0x450 [ 232.636162][ T9695] vfs_getattr_nosec+0x2e1/0x430 [ 232.636183][ T9695] loop_assign_backing_file+0x222/0x400 [ 232.636206][ T9695] lo_ioctl+0x167f/0x1c50 [ 232.636225][ T9695] blkdev_ioctl+0x5af/0x6d0 [ 232.636243][ T9695] __se_sys_ioctl+0xfc/0x170 [ 232.636256][ T9695] do_syscall_64+0xfa/0xfa0 [ 232.636269][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.636284][ T9695] [ 232.636284][ T9695] other info that might help us debug this: [ 232.636284][ T9695] [ 232.636290][ T9695] Chain exists of: [ 232.636290][ T9695] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 232.636290][ T9695] [ 232.636330][ T9695] Possible unsafe locking scenario: [ 232.636330][ T9695] [ 232.636335][ T9695] CPU0 CPU1 [ 232.636341][ T9695] ---- ---- [ 232.636347][ T9695] lock(&q->q_usage_counter(io)#26); [ 232.636365][ T9695] lock(fs_reclaim); [ 232.636379][ T9695] lock(&q->q_usage_counter(io)#26); [ 232.636398][ T9695] rlock(&root->kernfs_iattr_rwsem); [ 232.636410][ T9695] [ 232.636410][ T9695] *** DEADLOCK *** [ 232.636410][ T9695] [ 232.636415][ T9695] 3 locks held by syz.4.1432/9695: [ 232.643299][ T30] audit: type=1326 audit(1760235722.048:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.1.1437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c718eec9 code=0x7ffc0000 [ 232.646606][ T9695] #0: ffff888143750440 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x11e4/0x1c50 [ 232.936580][ T9695] #1: ffff88802473f668 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 232.936638][ T9695] #2: ffff88802473f6a0 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: lo_ioctl+0x1604/0x1c50 [ 232.936682][ T9695] [ 232.936682][ T9695] stack backtrace: [ 232.936700][ T9695] CPU: 0 UID: 0 PID: 9695 Comm: syz.4.1432 Not tainted syzkaller #0 PREEMPT(full) [ 232.936716][ T9695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.936724][ T9695] Call Trace: [ 232.936732][ T9695] [ 232.936739][ T9695] dump_stack_lvl+0x189/0x250 [ 232.936761][ T9695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.936775][ T9695] ? __pfx__printk+0x10/0x10 [ 232.936792][ T9695] print_circular_bug+0x2ee/0x310 [ 232.936815][ T9695] check_noncircular+0x134/0x160 [ 232.936837][ T9695] validate_chain+0xb9b/0x2140 [ 232.936857][ T9695] ? tomoyo_path_perm+0x1e3/0x4b0 [ 232.936885][ T9695] __lock_acquire+0xab9/0xd20 [ 232.936904][ T9695] ? kernfs_iop_getattr+0x9e/0x450 [ 232.936924][ T9695] lock_acquire+0x120/0x360 [ 232.936940][ T9695] ? kernfs_iop_getattr+0x9e/0x450 [ 232.936963][ T9695] down_read+0x46/0x2e0 [ 232.936980][ T9695] ? kernfs_iop_getattr+0x9e/0x450 [ 232.936999][ T9695] kernfs_iop_getattr+0x9e/0x450 [ 232.937021][ T9695] vfs_getattr_nosec+0x2e1/0x430 [ 232.937040][ T9695] loop_assign_backing_file+0x222/0x400 [ 232.937062][ T9695] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 232.937082][ T9695] ? schedule+0x91/0x360 [ 232.937106][ T9695] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 232.937130][ T9695] lo_ioctl+0x167f/0x1c50 [ 232.937150][ T9695] ? __pfx_lo_ioctl+0x10/0x10 [ 232.937168][ T9695] ? is_bpf_text_address+0x26/0x2b0 [ 232.937187][ T9695] ? kernel_text_address+0xa5/0xe0 [ 232.937203][ T9695] ? __kernel_text_address+0xd/0x40 [ 232.937218][ T9695] ? unwind_get_return_address+0x4d/0x90 [ 232.937238][ T9695] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 232.937252][ T9695] ? arch_stack_walk+0xfc/0x150 [ 232.937276][ T9695] ? __lock_acquire+0xab9/0xd20 [ 232.937295][ T9695] ? __lock_acquire+0xab9/0xd20 [ 232.937312][ T9695] ? __lock_acquire+0xab9/0xd20 [ 232.937332][ T9695] ? __lock_acquire+0xab9/0xd20 [ 232.937352][ T9695] ? __lock_acquire+0xab9/0xd20 [ 232.937373][ T9695] ? is_bpf_text_address+0x26/0x2b0 [ 232.937393][ T9695] ? is_bpf_text_address+0x292/0x2b0 [ 232.937411][ T9695] ? is_bpf_text_address+0x26/0x2b0 [ 232.937430][ T9695] ? kernel_text_address+0xa5/0xe0 [ 232.937445][ T9695] ? __kernel_text_address+0xd/0x40 [ 232.937460][ T9695] ? unwind_get_return_address+0x4d/0x90 [ 232.937479][ T9695] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 232.937492][ T9695] ? arch_stack_walk+0xfc/0x150 [ 232.937515][ T9695] ? stack_trace_save+0x9c/0xe0 [ 232.937528][ T9695] ? __pfx_stack_trace_save+0x10/0x10 [ 232.937542][ T9695] ? stack_depot_save_flags+0x40/0x860 [ 232.937557][ T9695] ? kasan_save_track+0x4f/0x80 [ 232.937570][ T9695] ? kasan_save_track+0x3e/0x80 [ 232.937584][ T9695] ? __kasan_save_free_info+0x46/0x50 [ 232.937603][ T9695] ? __kasan_slab_free+0x5c/0x80 [ 232.937617][ T9695] ? kfree+0x19a/0x6d0 [ 232.937628][ T9695] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 232.937647][ T9695] ? security_file_ioctl+0xcb/0x2d0 [ 232.937665][ T9695] ? __se_sys_ioctl+0x47/0x170 [ 232.937676][ T9695] ? do_syscall_64+0xfa/0xfa0 [ 232.937688][ T9695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.937709][ T9695] ? __asan_memset+0x22/0x50 [ 232.937721][ T9695] ? blk_get_meta_cap+0x18c/0x750 [ 232.937738][ T9695] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 232.937754][ T9695] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.937767][ T9695] ? blkdev_common_ioctl+0xff7/0x2550 [ 232.937784][ T9695] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 232.937804][ T9695] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 232.937821][ T9695] ? do_vfs_ioctl+0xbe8/0x1430 [ 232.937832][ T9695] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 232.937852][ T9695] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 232.937864][ T9695] ? css_rstat_updated+0x23a/0x4f0 [ 232.937886][ T9695] ? __pfx_css_rstat_updated+0x10/0x10 [ 232.937912][ T9695] ? __pfx_lo_ioctl+0x10/0x10 [ 232.937931][ T9695] blkdev_ioctl+0x5af/0x6d0 [ 232.937947][ T9695] ? __pfx_blkdev_ioctl+0x10/0x10 [ 232.937962][ T9695] ? __fget_files+0x3a0/0x420 [ 232.937978][ T9695] ? __fget_files+0x2a/0x420 [ 232.937995][ T9695] ? bpf_lsm_file_ioctl+0x9/0x20 [ 232.938013][ T9695] ? __pfx_blkdev_ioctl+0x10/0x10 [ 232.938029][ T9695] __se_sys_ioctl+0xfc/0x170 [ 232.938042][ T9695] do_syscall_64+0xfa/0xfa0 [ 232.938054][ T9695] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.938067][ T9695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.938080][ T9695] ? clear_bhb_loop+0x60/0xb0 [ 232.938095][ T9695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.938109][ T9695] RIP: 0033:0x7f0493b8eec9 [ 232.938133][ T9695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.938146][ T9695] RSP: 002b:00007f0494a91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.938160][ T9695] RAX: ffffffffffffffda RBX: 00007f0493de6090 RCX: 00007f0493b8eec9 [ 232.938171][ T9695] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000004 [ 232.938180][ T9695] RBP: 00007f0493c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 232.938189][ T9695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.938197][ T9695] R13: 00007f0493de6128 R14: 00007f0493de6090 R15: 00007f0493f0fa28 [ 232.938213][ T9695] [ 232.960053][ T9689] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.960158][ T9689] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.960224][ T9689] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.960267][ T9689] ldm_validate_partition_table(): Disk read failed. [ 232.960299][ T9689] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.960360][ T9689] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.960421][ T9689] Buffer I/O error on dev loop9, logical block 0, async page read [ 232.962706][ T9689] Dev loop9: unable to read RDB block 0 [ 232.962875][ T9689] loop9: unable to read partition table [ 232.963001][ T9689] loop9: partition table beyond EOD, truncated [ 232.963030][ T9689] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 232.963030][ T9689] ) failed (rc=-5) [ 232.990663][ T7948] ldm_validate_partition_table(): Disk read failed. [ 232.990972][ T7948] Dev loop9: unable to read RDB block 0 [ 232.991144][ T7948] loop9: unable to read partition table [ 232.991271][ T7948] loop9: partition table beyond EOD, truncated [ 232.992531][ T9695] ldm_validate_partition_table(): Disk read failed. [ 232.992716][ T9695] Dev loop9: unable to read RDB block 0 [ 233.612135][ T9695] loop9: unable to read partition table [ 233.617836][ T9695] loop9: partition table beyond EOD, truncated [ 233.638101][ T9695] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 233.638101][ T9695] ) failed (rc=-5)