last executing test programs: 23m33.15917886s ago: executing program 3 (id=4): r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 23m32.993055047s ago: executing program 3 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) capset(&(0x7f0000000080)={0x20071026}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r1 = socket$inet6(0xa, 0x802, 0x88) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)='9', 0x1}], 0x1) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_CMDTEST(r7, 0x8050640a, &(0x7f00000000c0)={0x0, 0x30000, 0x80, 0x9, 0xb3b57418ccfbfe66, 0x182, 0xffffffff, 0x4, 0x4, 0x1, 0x0, 0x889f, 0x0, 0x0, 0x0}) close(r6) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x401, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) close_range(r1, 0xffffffffffffffff, 0x0) 23m32.108847376s ago: executing program 3 (id=6): syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a00000001090212"], 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) shmget(0x3, 0x1000, 0x40, &(0x7f0000ffd000/0x1000)=nil) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000003c0), 0x8002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) sendto$unix(r0, 0x0, 0x0, 0x40010, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000500)='!G', 0x2}, {0x0}], 0x2, 0x2, 0x2) 23m26.898940047s ago: executing program 3 (id=15): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 23m10.861986753s ago: executing program 32 (id=15): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 14m4.699719853s ago: executing program 0 (id=1147): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x1000410, &(0x7f0000000100), 0x6, 0x504, &(0x7f0000019940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), &(0x7f0000000540)=ANY=[], 0x9a, 0x3) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf65f2000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}, @ringbuf_query]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000003800)={{0x9, 0x4, 0x9, 0xffff7bb7, 'syz0\x00', 0x1}, 0x0, [0x7a, 0x3ff, 0x3, 0x8, 0x1, 0x5, 0x8, 0x0, 0x4, 0x9, 0x7fffffffffffffff, 0x8000000000000000, 0x9, 0x4, 0x400, 0x50b, 0x1ff, 0x0, 0xfff, 0x8c51, 0x6, 0x1, 0xff, 0xe64, 0x4, 0x9, 0x0, 0x100000001, 0x9, 0x0, 0x6, 0x662, 0x9, 0x200, 0xffffffffffff8000, 0x34fc, 0x7fffffff, 0x0, 0x1bae, 0x5, 0x3, 0x7fffffffffffffff, 0x1, 0x464, 0x9, 0x6, 0x0, 0x0, 0x8, 0xa8, 0x80000000, 0x1ff, 0x8, 0x2, 0x2, 0x4, 0x4, 0x7, 0x4, 0x9, 0x7, 0x5, 0xaa, 0x2, 0x7, 0x9, 0x1, 0x9, 0x1, 0x2, 0x100000000, 0x1, 0x10001, 0x2, 0x8, 0x0, 0xffff, 0x7fff, 0x8, 0x6, 0x4, 0x5692, 0xc, 0x7, 0x3, 0x8, 0x9, 0x4, 0x7, 0x7, 0x3, 0xc, 0x7, 0x4, 0x9, 0x1, 0x5, 0x9, 0xc, 0x1, 0x2, 0xa63, 0x4, 0x5, 0x39c000000000, 0x6, 0xd8, 0x5ab7, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x7, 0x2, 0x9, 0x6, 0x101, 0x7, 0x1, 0x6, 0xc75, 0x9, 0x8, 0xffffffffffffff01, 0x7, 0x2, 0xffffffff80000001, 0x0, 0xfffffffffffffffb, 0xd]}) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) 14m2.748536068s ago: executing program 0 (id=1150): r0 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x20002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x941) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 14m2.056623427s ago: executing program 0 (id=1152): socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000a300)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x90, 0x0, 0x0, {0x3, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x200, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x102, 0x8000, 0x0, 0x0, 0x0, 0x2000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000600)={&(0x7f0000000080)={0x50, 0x0, 0x4000007, {0x7, 0x28, 0x6, 0x33887e60, 0xfffc, 0x100, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000e00)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x23072d, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}}, 0x50) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000000), 0x0, 0x0, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 14m1.704082353s ago: executing program 0 (id=1154): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) pwrite64(r0, &(0x7f0000000880)='u', 0xf7d, 0x83) connect$unix(r0, &(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$kcm(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(0x0) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {0x0}], 0x2}, 0x44864) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000300), 0x4) 14m0.545639229s ago: executing program 0 (id=1156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000250001"], 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4008040) futex(0x0, 0x5, 0x800, 0x0, 0x0, 0x5000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456, {0x0, r3}}) unshare(0x2040400) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x133d, 0x3e000000, 0x8, 0x0, 0x0) 13m56.708256272s ago: executing program 0 (id=1161): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102030000000000000000000a00000a440002802c000180140003"], 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800) bind$xdp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 13m41.600737532s ago: executing program 33 (id=1161): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = socket$kcm(0x2, 0x3, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r2}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102030000000000000000000a00000a440002802c000180140003"], 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20008800) bind$xdp(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000, 0x0, 0x1f) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1}, 0x0) 16.00032931s ago: executing program 2 (id=2832): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x5, 0xa, 0xb}, {0x2, 0x5, 0x6, 0x7}, {0x5, 0x4, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010076000014000280180001004241544d414e5f56"], 0xfd12}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 15.0070398s ago: executing program 4 (id=2837): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'ip6tnl0\x00', 'nicvf0\x00', {}, {}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [], 'veth1\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x386) mount(0x0, &(0x7f0000000800)='.\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000006c0)='=\n\x9b\xa1Q\a\x00\n@\xf6\"2a\xd7\x1fch\x1a}#\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nR\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|\xd8ZE\x92\xb4\x18|\x14\xc8\x14\xab\xe3\xd2\xb8\xf9J\x13\xbc\xea\xccp;\xa5\xe8\r=\n\x9e\xfb\x17\"\xc4QJ\xdf\xa9\x02BQ\x11\b\xab\x14\xf7\x16\xde\xc3\x89\xc6d\xdd\x18\x01\xdd\xf3\xe2\xa5\xef\x02\x17T\x94\xb9\xd4v\xb1\xe3\xb7L\xe6>*\x11e\x18\xe7-\b\xe9\x87\x81,N\x1f\x94\xa4\xe5\xd6\xd4m\x92\xccg3jNvd\xd2O|c\xb3\xa0\xf2\xc6\\\x8a\'\xb3\x81S\x9b6\xf5\xb7\x93\v\xb0\aD\xb9\xf7>\xcf?\xea\xfb\xfc\xb9\x9d\xa5\xb5\xbc\xe2\xddUJN\xb2\xb7\x9c\xc3qk\x06\xdb\xd69\x8b\x00'/288) r1 = socket(0x28, 0x5, 0x0) r2 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0xffffffff}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0xf5, 0x0, 0x0, 0x0) 13.811411399s ago: executing program 2 (id=2839): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) 13.701680911s ago: executing program 4 (id=2840): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) 11.782418742s ago: executing program 2 (id=2841): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000640)=[{0x4, 0x5, 0xa, 0xb}, {0x2, 0x5, 0x6, 0x7}, {0x5, 0x4, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)=')', 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 10.317989498s ago: executing program 4 (id=2844): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 9.191384151s ago: executing program 5 (id=2845): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0xa200, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000240)={0x10, 0x1}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f0000001600)='e', 0x1}], 0x1) 8.559930224s ago: executing program 2 (id=2847): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) 8.052497715s ago: executing program 1 (id=2848): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000640)=[{0x4, 0x5, 0xa, 0xb}, {0x2, 0x5, 0x6, 0x7}, {0x5, 0x4, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010076000014000280180001004241544d414e5f56"], 0xfd12}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.278059073s ago: executing program 4 (id=2849): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000010880)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) 7.170070973s ago: executing program 1 (id=2850): socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0xfff2, 0x60, 0xf, 0x9}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f00000003c0)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3ef4, 0x81}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) 6.433530057s ago: executing program 5 (id=2851): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001140000000040500010006000000050005000a00000005000400000000000d000300686173683a6e6574000000000900"], 0x54}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd05"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x6, 0xa, 0x5, 0xfe00, 0xa1}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3004408c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000040001000000000000262bdd1aadbfc9f5d7911dde0ec2ba014944ad5aa531f0cf2c676adeb2d5b1dff42450e413f76518005f2baaa56d5e6b55ace0dbe1a545839ce295e48c3e02"], 0x1c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x50) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r9, 0x607, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc810}, 0x8000812) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000015000100000000000000000005000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) read$FUSE(r3, &(0x7f0000006a00)={0x2020}, 0x2020) 6.213457749s ago: executing program 1 (id=2852): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) 6.112999509s ago: executing program 5 (id=2853): openat$comedi(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) close(r4) 5.564919744s ago: executing program 2 (id=2854): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="85100000fdffffff182a0000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, &(0x7f0000000500), 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0xa, 0x1, 0x7c5e}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000640)=[{0x4, 0x5, 0xa, 0xb}, {0x2, 0x5, 0x6, 0x7}, {0x5, 0x4, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff}, 0x10, 0x0, r0}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010076000014000280180001004241544d414e5f56"], 0xfd12}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff00000000b80000000000000029000000040000000413000000000000fe39f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36800a09e12e5f0b6bdcf72f2e0738000000010c7a0180050000000000000009000000000000000400000000000000040000000000000000040000000000000b0000000000000000010005020bf4c910fc020000000000000000000000000000000000000000140000000000000029000000340000000000000000000000180000000000000029000000360000005e000000000000002000000000000000290000003712d9c3ba0000000000000000010000000000001400000000000000290000000b0000000000000200000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff02"], 0x188}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.853782745s ago: executing program 1 (id=2855): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 4.744082426s ago: executing program 5 (id=2856): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) 4.146932455s ago: executing program 2 (id=2857): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) 3.741944156s ago: executing program 5 (id=2858): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) 1.920963008s ago: executing program 5 (id=2859): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x7ffe, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}}], 0x28}}], 0x1, 0x4000084) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000"], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x800) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@mpls_getroute={0xa0, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x4cb1}, {0x1, 0x0, 0x1}, {0x9}, {0x8, 0x0, 0x1}, {0x39fe}, {0x1}, {0x1, 0x0, 0x1}, {0xb}, {0x3, 0x0, 0x1}, {0x81, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xc9, 0x0, 0x1}, {0x9}, {0x7ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x10, 0x0, 0x1}, {0x2}, {0x3, 0x0, 0x1}, {0x2}, {0x3bd2}, {0x9}, {0x3, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0xfffd2}, {0x8, 0x0, 0x1}, {0x9, 0x0, 0x1}, {}, {0xffff7}, {0x4, 0x0, 0x1}]}]}, 0xa0}}, 0x0) 1.662616354s ago: executing program 1 (id=2860): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = userfaultfd(0x80001) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x9, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x33, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000}) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) dup(r5) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x80000000, 0x0, 0x2, 0xffffffffffffffff, 0x2}, {0x0, 0x7, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 931.744337ms ago: executing program 1 (id=2861): socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0xfff2, 0x60, 0xf, 0x9}]}) timer_create(0x0, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x18, &(0x7f00000003c0)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x54}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3ef4, 0x81}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) 812.052119ms ago: executing program 4 (id=2862): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fchdir(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40801) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008844) openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000c00)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x4050000) 0s ago: executing program 4 (id=2863): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): 4.438053][ T8] usb 1-1: config 0 descriptor?? [ 354.453529][ T8] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 355.491701][ T8271] overlayfs: failed to resolve './file0': -2 [ 356.430973][ T2200] usb 1-1: USB disconnect, device number 18 [ 356.748599][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.571'. [ 357.161098][ T8289] netlink: 264 bytes leftover after parsing attributes in process `syz.0.570'. [ 359.748414][ T8314] overlayfs: failed to resolve './file0': -2 [ 359.915044][ T8320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.580'. [ 361.095763][ T8046] Bluetooth: hci1: Frame reassembly failed (-84) [ 363.002027][ T8346] overlayfs: failed to resolve './file0': -2 [ 363.068391][ T8344] netlink: 264 bytes leftover after parsing attributes in process `syz.0.588'. [ 363.166785][ T51] Bluetooth: hci1: command 0x1003 tx timeout [ 363.175681][ T5109] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 363.614215][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'. [ 364.634257][ T8371] exFAT-fs (nullb0): invalid boot record signature [ 364.642077][ T8371] exFAT-fs (nullb0): failed to read boot sector [ 364.649613][ T8371] exFAT-fs (nullb0): failed to recognize exfat type [ 365.036599][ T5894] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 365.163492][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.600'. [ 365.266845][ T5894] usb 5-1: Using ep0 maxpacket: 16 [ 365.278750][ T5894] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.307843][ T5894] usb 5-1: config 0 interface 0 has no altsetting 0 [ 365.316462][ T5894] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 365.342446][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.375245][ T5894] usb 5-1: config 0 descriptor?? [ 365.394382][ T5894] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 366.983065][ T8419] exFAT-fs (nullb0): invalid boot record signature [ 366.989698][ T8419] exFAT-fs (nullb0): failed to read boot sector [ 367.002234][ T8419] exFAT-fs (nullb0): failed to recognize exfat type [ 367.130696][ T8423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 367.788903][ T5848] usb 5-1: USB disconnect, device number 5 [ 369.148658][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 370.126001][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 370.316485][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 371.206669][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.226740][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 371.258988][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 371.280046][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.310834][ T9] usb 3-1: config 0 descriptor?? [ 371.335043][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 371.383578][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.629'. [ 371.598108][ T8502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'. [ 377.805315][ T2200] usb 3-1: USB disconnect, device number 15 [ 379.008703][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.307121][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 385.031073][ T8573] syzkaller0: entered promiscuous mode [ 385.047722][ T8573] syzkaller0: entered allmulticast mode [ 391.223182][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.651'. [ 399.341301][ T8617] netlink: 264 bytes leftover after parsing attributes in process `syz.1.657'. [ 399.632736][ T8630] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 405.131384][ T8649] overlayfs: missing 'lowerdir' [ 406.085794][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.668'. [ 407.281975][ T8669] syzkaller0: entered promiscuous mode [ 407.288631][ T8669] syzkaller0: entered allmulticast mode [ 409.835463][ T8690] xt_hashlimit: size too large, truncated to 1048576 [ 413.868695][ T8698] input: syz0 as /devices/virtual/input/input9 [ 415.517428][ T8707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 415.847713][ T8711] syz.2.682 uses obsolete (PF_INET,SOCK_PACKET) [ 416.194857][ T8713] netlink: 264 bytes leftover after parsing attributes in process `syz.0.684'. [ 416.416072][ T8720] Cannot find del_set index 0 as target [ 416.949105][ T8724] process 'syz.0.685' launched './file1' with NULL argv: empty string added [ 421.745388][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 422.806201][ T8735] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.827095][ T8735] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.836230][ T8735] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.849738][ T8735] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.995147][ T8735] syz.4.689 (8735) used greatest stack depth: 20328 bytes left [ 423.015190][ T8767] netlink: 264 bytes leftover after parsing attributes in process `syz.2.693'. [ 429.479451][ T8826] input: syz0 as /devices/virtual/input/input10 [ 430.169605][ T3510] Bluetooth: hci1: Frame reassembly failed (-84) [ 431.398938][ T8840] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 431.408117][ T8840] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 431.416650][ T8840] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 431.838928][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 432.323477][ T8852] netlink: 264 bytes leftover after parsing attributes in process `syz.0.714'. [ 432.455313][ T5109] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 432.471925][ T51] Bluetooth: hci1: command 0x1003 tx timeout [ 433.221676][ T8864] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 433.246590][ T8864] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 435.461610][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 435.846692][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 435.855625][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 435.876500][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.913684][ T9] usb 1-1: config 0 descriptor?? [ 435.931705][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 436.957774][ T9] gspca_nw80x: reg_w err -71 [ 436.962550][ T9] nw80x: probe of 1-1:0.0 failed with error -71 [ 437.011624][ T9] usb 1-1: USB disconnect, device number 19 [ 438.014206][ T8901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.727'. [ 438.435004][ T8907] netlink: 264 bytes leftover after parsing attributes in process `syz.2.728'. [ 440.370406][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.131167][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 445.246479][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 445.436712][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 445.454441][ T23] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.468199][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 445.474910][ T23] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 445.499407][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.518029][ T23] usb 5-1: config 0 descriptor?? [ 445.604537][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'. [ 445.698518][ T8946] Cannot find del_set index 0 as target [ 445.726574][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 446.417482][ T8954] netlink: 264 bytes leftover after parsing attributes in process `syz.1.738'. [ 446.494648][ T23] usbhid 5-1:0.0: can't add hid device: -71 [ 446.514910][ T23] usbhid: probe of 5-1:0.0 failed with error -71 [ 446.553262][ T23] usb 5-1: USB disconnect, device number 6 [ 449.808320][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 450.479711][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'. [ 451.002719][ T8991] netlink: 264 bytes leftover after parsing attributes in process `syz.1.749'. [ 451.054807][ T1133] Bluetooth: hci1: Frame reassembly failed (-84) [ 452.646549][ T8754] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 452.859643][ T8754] usb 1-1: Using ep0 maxpacket: 16 [ 452.867713][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.754'. [ 452.914930][ T8754] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.945088][ T8754] usb 1-1: config 0 interface 0 has no altsetting 0 [ 452.962292][ T8754] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 452.984423][ T8754] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.011457][ T8754] usb 1-1: config 0 descriptor?? [ 453.106001][ T5109] Bluetooth: hci1: command 0x1003 tx timeout [ 453.113847][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 453.497850][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.756'. [ 453.989292][ T8754] usbhid 1-1:0.0: can't add hid device: -71 [ 454.057417][ T8754] usbhid: probe of 1-1:0.0 failed with error -71 [ 454.344967][ T8754] usb 1-1: USB disconnect, device number 20 [ 454.534194][ T9026] netlink: 264 bytes leftover after parsing attributes in process `syz.2.758'. [ 456.362854][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.1.764'. [ 456.902982][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'. [ 458.086454][ T5888] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 458.409894][ T9067] netlink: 264 bytes leftover after parsing attributes in process `syz.2.769'. [ 459.916539][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 459.946853][ T5888] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.961453][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 459.970348][ T5888] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 459.980843][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.704499][ T5888] usb 1-1: config 0 descriptor?? [ 461.906871][ T5888] usb 1-1: can't set config #0, error -71 [ 461.920428][ T5888] usb 1-1: USB disconnect, device number 21 [ 462.849197][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.774'. [ 463.030111][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 463.883373][ T3485] Bluetooth: hci1: Frame reassembly failed (-84) [ 464.498999][ T9112] Cannot find del_set index 0 as target [ 464.856509][ T8756] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 465.067233][ T8756] usb 1-1: Using ep0 maxpacket: 16 [ 465.076006][ T8756] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.092609][ T8756] usb 1-1: config 0 interface 0 has no altsetting 0 [ 465.099869][ T8756] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 465.112727][ T8756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.127691][ T8756] usb 1-1: config 0 descriptor?? [ 465.896556][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 469.635900][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.786'. [ 469.644215][ T8756] usbhid 1-1:0.0: can't add hid device: -71 [ 469.650967][ T8756] usbhid: probe of 1-1:0.0 failed with error -71 [ 469.679257][ T8756] usb 1-1: USB disconnect, device number 22 [ 469.841508][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 471.776520][ T8756] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 471.939448][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 472.046469][ T8756] usb 5-1: Using ep0 maxpacket: 16 [ 472.054181][ T8756] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.067076][ T8756] usb 5-1: config 0 interface 0 has no altsetting 0 [ 472.073841][ T8756] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 472.083573][ T8756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.479978][ T8756] usb 5-1: config 0 descriptor?? [ 475.984569][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 476.338330][ T8756] usbhid 5-1:0.0: can't add hid device: -71 [ 476.344821][ T8756] usbhid: probe of 5-1:0.0 failed with error -71 [ 476.380504][ T8756] usb 5-1: USB disconnect, device number 7 [ 476.434507][ T9174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.799'. [ 476.682093][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 481.280563][ T8756] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 481.486561][ T8756] usb 3-1: Using ep0 maxpacket: 16 [ 482.409045][ T8756] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.773715][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 484.318349][ T8756] usb 3-1: config 0 interface 0 has no altsetting 0 [ 484.325177][ T8756] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 484.334451][ T8756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.346905][ T8756] usb 3-1: config 0 descriptor?? [ 484.380690][ T8756] usb 3-1: can't set config #0, error -71 [ 484.393914][ T8756] usb 3-1: USB disconnect, device number 16 [ 484.508149][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 484.730018][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 486.144634][ T9246] Cannot find del_set index 0 as target [ 488.818237][ T1133] Bluetooth: hci1: Frame reassembly failed (-84) [ 489.653732][ T9259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.822'. [ 490.792382][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 491.464062][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 493.649435][ T9290] Cannot find del_set index 0 as target [ 494.034304][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.831'. [ 495.900933][ T11] Bluetooth: hci1: Frame reassembly failed (-84) [ 495.919073][ T8756] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 496.106401][ T8756] usb 1-1: Using ep0 maxpacket: 16 [ 496.341493][ T8756] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.352655][ T8756] usb 1-1: config 0 interface 0 has no altsetting 0 [ 496.359456][ T8756] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 496.368766][ T8756] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.386107][ T8756] usb 1-1: config 0 descriptor?? [ 496.583321][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.838'. [ 496.832474][ T8756] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 496.835861][ T9325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.840'. [ 496.840633][ T8756] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 496.907888][ T9326] Cannot find del_set index 0 as target [ 497.635283][ T8756] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 497.643217][ T8756] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 497.650838][ T8756] nzxt-smart2 0003:1E71:2009.0003: unknown main item tag 0x0 [ 497.810818][ T8756] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 497.886695][ T5109] Bluetooth: hci1: command 0x1003 tx timeout [ 497.894400][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 498.019922][ T8756] usb 1-1: USB disconnect, device number 23 [ 501.751308][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 501.815312][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.003847][ T9363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.850'. [ 502.066187][ T9] IPVS: starting estimator thread 0... [ 502.166533][ T9364] IPVS: using max 17 ests per chain, 40800 per kthread [ 503.314629][ T9374] Cannot find del_set index 0 as target [ 508.350642][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.858'. [ 508.408016][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 512.706518][ T8775] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 512.916650][ T8775] usb 3-1: Using ep0 maxpacket: 16 [ 512.933245][ T8775] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.965107][ T8775] usb 3-1: config 0 interface 0 has no altsetting 0 [ 512.978100][ T8775] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 513.006362][ T8775] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.057299][ T8775] usb 3-1: config 0 descriptor?? [ 513.513773][ T8775] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 513.523141][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.869'. [ 513.544316][ T8775] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 513.586912][ T8775] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 513.627866][ T8775] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 513.664496][ T8775] nzxt-smart2 0003:1E71:2009.0004: unknown main item tag 0x0 [ 513.710955][ T8775] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 513.789014][ C0] usb 3-1: input irq status -75 received [ 514.118320][ T8775] usb 3-1: USB disconnect, device number 17 [ 521.476647][ T1133] Bluetooth: hci1: Frame reassembly failed (-84) [ 523.555655][ T5109] Bluetooth: hci1: command 0x1003 tx timeout [ 523.562809][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 524.509853][ T9487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 524.749137][ T9491] syzkaller0: entered promiscuous mode [ 524.768216][ T9491] syzkaller0: entered allmulticast mode [ 525.824543][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 527.543005][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 527.965848][ T9] usb 3-1: device descriptor read/all, error -71 [ 528.583586][ T49] Bluetooth: hci1: Frame reassembly failed (-84) [ 530.627462][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 531.767303][ T9533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 533.826649][ T5888] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 534.096685][ T5888] usb 1-1: Using ep0 maxpacket: 16 [ 534.213728][ T5888] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.317040][ T5888] usb 1-1: config 0 interface 0 has no altsetting 0 [ 534.346537][ T5888] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 534.379055][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.419981][ T5888] usb 1-1: config 0 descriptor?? [ 534.909473][ T5888] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 534.937956][ T5888] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 534.969588][ T5888] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 535.003112][ T5888] nzxt-smart2 0003:1E71:2009.0005: unknown main item tag 0x0 [ 535.594572][ T5888] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 535.716211][ T5888] usb 1-1: USB disconnect, device number 24 [ 535.783128][ T9556] fido_id[9556]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 536.137806][ T9560] netlink: 264 bytes leftover after parsing attributes in process `syz.2.896'. [ 537.348065][ T9570] Cannot find del_set index 0 as target [ 538.151541][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 538.244713][ T9573] syzkaller0: entered promiscuous mode [ 538.251560][ T9573] syzkaller0: entered allmulticast mode [ 540.129191][ T5109] Bluetooth: hci1: command 0x1003 tx timeout [ 540.138143][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 540.596527][ T8756] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 540.786716][ T8756] usb 5-1: Using ep0 maxpacket: 16 [ 540.818900][ T8756] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.884837][ T8756] usb 5-1: config 0 interface 0 has no altsetting 0 [ 540.942080][ T8756] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 541.021467][ T8756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.139310][ T8756] usb 5-1: config 0 descriptor?? [ 542.040763][ T8756] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 542.075575][ T8756] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 542.136108][ T8756] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 542.182820][ T8756] nzxt-smart2 0003:1E71:2009.0006: unknown main item tag 0x0 [ 542.366890][ T8756] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 542.504894][ C1] usb 5-1: input irq status -75 received [ 544.790987][ T8756] usb 5-1: USB disconnect, device number 8 [ 545.303394][ T9609] netlink: 264 bytes leftover after parsing attributes in process `syz.4.907'. [ 546.101546][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.909'. [ 549.336849][ T8755] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 550.026377][ T8755] usb 3-1: Using ep0 maxpacket: 16 [ 551.306613][ T8755] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.348316][ T9642] netlink: 264 bytes leftover after parsing attributes in process `syz.1.917'. [ 552.105676][ T8755] usb 3-1: config 0 interface 0 has no altsetting 0 [ 553.689014][ T8755] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 554.037086][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.920'. [ 554.422214][ T8755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.521372][ T9659] syzkaller0: entered promiscuous mode [ 554.527091][ T9659] syzkaller0: entered allmulticast mode [ 554.566010][ T8755] usb 3-1: config 0 descriptor?? [ 554.666766][ T8755] usb 3-1: can't set config #0, error -71 [ 554.684566][ T8755] usb 3-1: USB disconnect, device number 20 [ 556.285834][ T9678] Cannot find del_set index 0 as target [ 558.170694][ T9681] netlink: 264 bytes leftover after parsing attributes in process `syz.4.927'. [ 559.073107][ T3524] Bluetooth: hci1: Frame reassembly failed (-84) [ 559.975050][ T8755] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 560.509609][ T8755] usb 5-1: Using ep0 maxpacket: 16 [ 560.550737][ T8755] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.561990][ T8755] usb 5-1: config 0 interface 0 has no altsetting 0 [ 560.568727][ T8755] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 560.577924][ T8755] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.592625][ T8755] usb 5-1: config 0 descriptor?? [ 561.008892][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 561.155066][ T8755] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 561.162690][ T8755] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 561.170901][ T8755] nzxt-smart2 0003:1E71:2009.0007: unknown main item tag 0x0 [ 561.206556][ T8755] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 561.287163][ C1] usb 5-1: input irq status -75 received [ 561.514824][ T5888] usb 5-1: USB disconnect, device number 9 [ 563.251883][ T9728] netlink: 264 bytes leftover after parsing attributes in process `syz.1.937'. [ 563.276613][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.116684][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.939'. [ 564.878475][ T3524] Bluetooth: hci1: Frame reassembly failed (-84) [ 565.945033][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 566.136904][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 566.144591][ T9] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.155756][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 566.162632][ T9] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 566.172398][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.183150][ T9] usb 1-1: config 0 descriptor?? [ 566.775943][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 566.892642][ T9] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 566.900963][ T9] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 566.912446][ T9] nzxt-smart2 0003:1E71:2009.0008: unknown main item tag 0x0 [ 566.928763][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 567.054817][ T9769] netlink: 264 bytes leftover after parsing attributes in process `syz.2.948'. [ 567.069809][ T9] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 567.644450][ T9] usb 1-1: USB disconnect, device number 25 [ 567.776825][ T9766] syzkaller0: entered promiscuous mode [ 567.823611][ T9772] fido_id[9772]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 567.826723][ T9766] syzkaller0: entered allmulticast mode [ 568.310936][ T9784] xt_l2tp: v2 doesn't support IP mode [ 570.890386][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.958'. [ 572.683506][ T9809] netlink: 264 bytes leftover after parsing attributes in process `syz.0.960'. [ 573.792491][ T23] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 573.991382][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 573.999188][ T23] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.023090][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 574.041935][ T23] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 574.052393][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.075872][ T23] usb 1-1: config 0 descriptor?? [ 574.207071][ T5109] Bluetooth: hci1: command 0x1003 tx timeout [ 574.208857][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 574.659870][ T23] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 575.104569][ T8774] usb 1-1: USB disconnect, device number 26 [ 575.633248][ T9823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 576.213427][ T9829] fuse: Bad value for 'fd' [ 579.538230][ T9845] netlink: 264 bytes leftover after parsing attributes in process `syz.0.969'. [ 580.509303][ T9860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.973'. [ 581.055677][ T9866] fuse: Bad value for 'fd' [ 581.196117][ T9865] usb usb8: usbfs: process 9865 (syz.2.972) did not claim interface 0 before use [ 583.693758][ T9883] input: syz0 as /devices/virtual/input/input11 [ 584.713834][ T9891] netlink: 264 bytes leftover after parsing attributes in process `syz.1.979'. [ 585.698445][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 587.251109][ T9920] netlink: 80 bytes leftover after parsing attributes in process `syz.1.986'. [ 591.233156][ T9935] netlink: 264 bytes leftover after parsing attributes in process `syz.4.993'. [ 593.586566][ T9965] fuse: Bad value for 'group_id' [ 593.605433][ T9965] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1003'. [ 595.784969][ T9987] input: syz0 as /devices/virtual/input/input13 [ 599.998745][T10038] overlayfs: missing 'lowerdir' [ 601.185180][T10047] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 602.337673][T10067] overlayfs: failed to clone upperpath [ 604.656835][T10079] overlayfs: missing 'lowerdir' [ 605.089656][T10082] 9pnet_fd: Insufficient options for proto=fd [ 605.858278][T10102] overlayfs: failed to clone upperpath [ 605.951183][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'. [ 608.256772][T10116] overlayfs: missing 'lowerdir' [ 609.318852][T10123] input: syz0 as /devices/virtual/input/input14 [ 609.335233][T10125] overlayfs: failed to clone upperpath [ 611.045556][T10145] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1055'. [ 613.303124][T10159] overlayfs: failed to clone upperpath [ 614.544565][T10165] sctp: failed to load transform for md5: -2 [ 618.022388][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1071'. [ 619.161868][T10206] input: syz0 as /devices/virtual/input/input15 [ 619.267678][T10213] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1066'. [ 622.998703][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1081'. [ 625.418207][T10245] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1083'. [ 625.435635][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.096079][T10270] xt_l2tp: v2 doesn't support IP mode [ 630.140473][T10271] input: syz0 as /devices/virtual/input/input16 [ 631.240965][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 631.289019][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1094'. [ 632.013515][T10288] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1095'. [ 636.597223][T10303] Bluetooth: MGMT ver 1.22 [ 636.786632][T10303] Bluetooth: hci0: unsupported parameter 255 [ 636.911462][T10303] Bluetooth: hci0: unsupported parameter 255 [ 637.139021][T10304] syz.4.1099 (10304) used greatest stack depth: 17960 bytes left [ 639.266144][T10313] sctp: failed to load transform for md5: -2 [ 639.393568][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 641.074682][T10332] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1105'. [ 641.685939][T10334] block device autoloading is deprecated and will be removed. [ 642.480991][T10338] loop4: detected capacity change from 0 to 40427 [ 643.380728][T10338] F2FS-fs (loop4): invalid crc value [ 643.401746][T10338] F2FS-fs (loop4): Found nat_bits in checkpoint [ 643.450787][T10338] F2FS-fs (loop4): Start checkpoint disabled! [ 643.460954][T10338] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 644.409838][ T49] kworker/u4:3: attempt to access beyond end of device [ 644.409838][ T49] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 644.495008][T10360] Cannot find del_set index 0 as target [ 645.091479][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 645.220573][T10356] input: syz0 as /devices/virtual/input/input17 [ 645.246796][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 645.254580][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 645.345144][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 645.699730][T10366] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1115'. [ 648.439597][T10378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1110'. [ 648.930575][T10390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1122'. [ 651.052914][T10393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 651.133386][T10397] fuse: Unknown parameter 'grou00000000000000000000' [ 652.033996][T10401] input: syz0 as /devices/virtual/input/input18 [ 654.511466][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 654.890638][T10427] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 655.918592][T10429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 656.216398][T10439] fuse: Unknown parameter 'grou00000000000000000000' [ 656.230036][T10439] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1135'. [ 659.169641][T10449] input: syz0 as /devices/virtual/input/input19 [ 660.397994][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 660.857761][T10475] fuse: Unknown parameter 'grou00000000000000000000' [ 660.867354][T10475] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1145'. [ 661.659112][T10473] Cannot find del_set index 0 as target [ 664.896120][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1155'. [ 671.082501][T10534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 672.879869][T10542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1161'. [ 673.834753][T10542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1161'. [ 677.004799][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 677.221952][T10577] fuse: Bad value for 'fd' [ 679.099031][T10595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 681.227440][T10610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1185'. [ 683.614242][T10627] Cannot find del_set index 0 as target [ 685.915097][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 685.928120][ T5109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 685.940999][ T5109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 685.952248][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 685.961094][ T5109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 685.969119][ T5109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 686.190205][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.760728][T10641] lo speed is unknown, defaulting to 1000 [ 686.906481][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1194'. [ 687.113318][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1195'. [ 688.086741][ T5109] Bluetooth: hci1: command tx timeout [ 688.969595][T10662] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 689.191628][T10641] chnl_net:caif_netlink_parms(): no params data found [ 690.136955][ T5109] Bluetooth: hci1: command tx timeout [ 691.430196][T10641] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.490770][T10641] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.529457][T10641] bridge_slave_0: entered allmulticast mode [ 691.570714][T10641] bridge_slave_0: entered promiscuous mode [ 691.603348][T10641] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.619785][T10641] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.655471][T10641] bridge_slave_1: entered allmulticast mode [ 691.668605][T10641] bridge_slave_1: entered promiscuous mode [ 691.774831][T10641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.828675][T10641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.037064][T10641] team0: Port device team_slave_0 added [ 692.074741][T10641] team0: Port device team_slave_1 added [ 692.216498][ T5109] Bluetooth: hci1: command tx timeout [ 692.458331][T10641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.518792][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.766377][T10641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.958519][T10641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.970468][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'. [ 692.976623][T10641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 693.017668][T10641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 693.167234][T10641] hsr_slave_0: entered promiscuous mode [ 693.437401][T10641] hsr_slave_1: entered promiscuous mode [ 694.286431][ T5109] Bluetooth: hci1: command tx timeout [ 695.270358][T10718] block device autoloading is deprecated and will be removed. [ 695.719074][T10641] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 695.857190][T10641] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 695.910770][T10641] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 695.936212][T10641] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 696.015871][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1210'. [ 696.515648][T10641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.573139][T10641] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.605317][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.612568][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.662998][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.670268][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.230989][T10641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.584966][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 699.132530][T10641] veth0_vlan: entered promiscuous mode [ 699.183542][T10641] veth1_vlan: entered promiscuous mode [ 699.315302][T10641] veth0_macvtap: entered promiscuous mode [ 699.343774][T10641] veth1_macvtap: entered promiscuous mode [ 699.415583][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.450975][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.488296][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.537784][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.576458][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.616345][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.637772][T10641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 699.844052][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.012941][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.200644][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.236533][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.262125][T10641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.296404][T10641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.331252][T10641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.388037][T10641] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.410376][T10641] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.426328][T10641] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.445769][T10641] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.633528][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.676820][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.833295][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.899860][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.057774][T10777] block device autoloading is deprecated and will be removed. [ 703.362017][T10777] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 703.669207][ T5109] Bluetooth: hci1: unexpected cc 0x2012 length: 3 > 1 [ 703.720593][T10779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'. [ 704.158638][T10787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 704.585219][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1227'. [ 704.962795][T10811] overlayfs: missing 'lowerdir' [ 705.880091][T10820] xt_hashlimit: size too large, truncated to 1048576 [ 707.414085][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1233'. [ 707.713093][T10829] ALSA: mixer_oss: invalid OSS volume '' [ 710.955069][ T126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.098578][ T126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.289313][ T126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.513594][ T126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.928006][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 713.128305][T10865] ALSA: mixer_oss: invalid OSS volume '' [ 716.604849][T10898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1252'. [ 718.915787][T10918] block device autoloading is deprecated and will be removed. [ 721.458342][T10928] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 722.557146][ T126] hsr_slave_0: left promiscuous mode [ 722.635643][ T126] hsr_slave_1: left promiscuous mode [ 722.685225][ T126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.716604][ T126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.742859][ T126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.783449][ T126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.874319][ T126] bridge_slave_1: left allmulticast mode [ 722.883666][ T126] bridge_slave_1: left promiscuous mode [ 722.917874][ T126] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.003966][ T126] bridge_slave_0: left allmulticast mode [ 723.045889][ T126] bridge_slave_0: left promiscuous mode [ 723.073801][ T126] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.167063][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1263'. [ 723.250245][ T126] veth1_macvtap: left promiscuous mode [ 723.292928][ T126] veth0_macvtap: left promiscuous mode [ 723.305858][ T126] veth1_vlan: left promiscuous mode [ 723.400760][ T126] veth0_vlan: left promiscuous mode [ 723.707351][T10970] fuse: Bad value for 'user_id' [ 724.049269][T10973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 725.852219][ T126] team0 (unregistering): Port device team_slave_1 removed [ 726.144238][ T126] team0 (unregistering): Port device team_slave_0 removed [ 726.772137][ T126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.996962][T10997] fuse: Bad value for 'user_id' [ 727.019145][ T126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 727.364419][T11000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1275'. [ 729.902849][T11030] fuse: Bad value for 'user_id' [ 730.079291][ T126] bond0 (unregistering): Released all slaves [ 730.175920][T11033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'. [ 731.115163][ T126] IPVS: stop unused estimator thread 0... [ 733.735825][T11082] fuse: Bad value for 'fd' [ 733.920102][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1294'. [ 734.224346][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1295'. [ 734.766886][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 734.775353][ T51] Bluetooth: hci0: command tx timeout [ 734.782047][ T5109] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 736.707403][T11127] fuse: Bad value for 'fd' [ 736.847546][T11131] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1303'. [ 737.114596][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 737.272998][T11143] ÿÿÿÿ: renamed from lo (while UP) [ 738.052258][ T28] audit: type=1800 audit(1762996868.082:4): pid=11152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1308" name="file1" dev="overlay" ino=1580 res=0 errno=0 [ 740.058973][T11172] fuse: Bad value for 'fd' [ 740.288341][ T3461] Bluetooth: hci2: Frame reassembly failed (-84) [ 742.207628][ T5109] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 742.898074][T11205] loop2: detected capacity change from 0 to 40427 [ 742.964907][T11205] F2FS-fs (loop2): invalid crc value [ 742.989680][T11205] F2FS-fs (loop2): Found nat_bits in checkpoint [ 743.038890][T11205] F2FS-fs (loop2): Start checkpoint disabled! [ 743.066035][T11205] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 744.972920][T11221] fuse: Bad value for 'fd' [ 745.270832][ T126] kworker/u4:5: attempt to access beyond end of device [ 745.270832][ T126] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 745.302453][ T126] kworker/u4:5: attempt to access beyond end of device [ 745.302453][ T126] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 745.345389][ T126] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 745.364026][ T126] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 745.401018][ T126] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 746.464164][ T1133] Bluetooth: hci2: Frame reassembly failed (-84) [ 747.583099][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.537855][ T51] Bluetooth: hci2: command 0x1003 tx timeout [ 748.917310][ T5109] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 749.173986][T11272] fuse: Bad value for 'fd' [ 751.243943][T11284] netlink: 'syz.4.1337': attribute type 10 has an invalid length. [ 751.358647][T11284] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 752.903595][T11309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 755.579359][T11324] xt_l2tp: v2 doesn't support IP mode [ 755.918112][T11337] syzkaller0: entered promiscuous mode [ 755.923686][T11337] syzkaller0: entered allmulticast mode [ 756.997925][T11339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.687300][T11396] syzkaller0: entered promiscuous mode [ 760.702442][T11396] syzkaller0: entered allmulticast mode [ 763.833976][T11434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1369'. [ 764.767419][T11458] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1372'. [ 768.433653][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 772.546445][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 773.427364][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1395'. [ 773.431258][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 773.458339][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.472276][ T9] usb 3-1: Product: syz [ 773.478847][ T9] usb 3-1: Manufacturer: syz [ 773.483947][ T9] usb 3-1: SerialNumber: syz [ 774.360335][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 774.399012][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 774.429179][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 774.456097][ T9] lan78xx: probe of 3-1:1.0 failed with error -71 [ 774.514111][ T9] usb 3-1: USB disconnect, device number 21 [ 778.198863][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1406'. [ 779.075531][T11607] loop2: detected capacity change from 0 to 40427 [ 779.129189][T11607] F2FS-fs (loop2): invalid crc value [ 779.158770][T11607] F2FS-fs (loop2): Found nat_bits in checkpoint [ 779.207578][T11607] F2FS-fs (loop2): Start checkpoint disabled! [ 779.365750][T11607] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 780.604658][T11249] kworker/u4:4: attempt to access beyond end of device [ 780.604658][T11249] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 780.695893][T11249] kworker/u4:4: attempt to access beyond end of device [ 780.695893][T11249] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 780.711262][T11249] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 780.738759][T11249] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 781.546419][T11249] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 782.630060][T11653] fuse: Unknown parameter 'user_i00000000000000000000' [ 782.650835][T11653] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1420'. [ 789.136100][T11699] fuse: Unknown parameter 'user_id00000000000000000000' [ 789.145619][T11699] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1430'. [ 795.015077][T11750] loop2: detected capacity change from 0 to 40427 [ 795.104125][T11756] fuse: Unknown parameter 'user_id00000000000000000000' [ 795.114354][T11756] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1441'. [ 795.282459][T11750] F2FS-fs (loop2): invalid crc value [ 795.316067][T11750] F2FS-fs (loop2): Found nat_bits in checkpoint [ 795.390329][T11750] F2FS-fs (loop2): Start checkpoint disabled! [ 795.466901][T11750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 796.153722][ T126] kworker/u4:5: attempt to access beyond end of device [ 796.153722][ T126] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 796.246910][ T11] kworker/u4:0: attempt to access beyond end of device [ 796.246910][ T11] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 796.343007][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 796.350243][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 796.358924][ T11] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 800.981084][T11810] fuse: Unknown parameter 'user_id00000000000000000000' [ 801.245477][T11808] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1451'. [ 803.518343][T11828] loop2: detected capacity change from 0 to 8 [ 803.617583][T11829] udevd[11829]: incorrect cramfs checksum on /dev/loop2 [ 803.621785][T11828] cramfs: bad data blocksize 3222268820 [ 803.667067][T11828] cramfs: Error -3 while decompressing! [ 803.686459][T11828] cramfs: ffffffff96fdd39c(16)->ffff88804ff78000(4096) [ 803.857304][T11828] cramfs: bad data blocksize 3222268820 [ 803.864986][ T28] audit: type=1800 audit(1762996933.892:5): pid=11828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1455" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 807.753336][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1464'. [ 807.757936][ T8756] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 808.016652][ T8756] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 809.015886][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.429888][T11958] xt_l2tp: v2 doesn't support IP mode [ 815.194631][T11975] fuse: Bad value for 'fd' [ 815.201412][T11975] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1483'. [ 816.359660][T11988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'. [ 817.614896][T11999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1491'. [ 818.809522][T12004] syzkaller0: entered promiscuous mode [ 819.062898][T12004] syzkaller0: entered allmulticast mode [ 819.312340][T11997] lo speed is unknown, defaulting to 1000 [ 819.579791][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1490'. [ 824.770450][T12047] syzkaller0: entered promiscuous mode [ 824.776014][T12047] syzkaller0: entered allmulticast mode [ 825.994890][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1499'. [ 827.542966][T12076] xt_l2tp: v2 doesn't support IP mode [ 828.823489][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1515'. [ 831.461130][T12099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1519'. [ 832.755569][T12108] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1523'. [ 833.763279][T12112] block device autoloading is deprecated and will be removed. [ 834.226350][T12119] fuse: Unknown parameter '0x000000000000000b' [ 834.235514][T12119] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1526'. [ 841.230845][T12156] fuse: Unknown parameter '0x000000000000000b' [ 841.240062][T12156] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1536'. [ 844.000715][T12173] pimreg: entered allmulticast mode [ 844.103856][T12173] pimreg: left allmulticast mode [ 845.550890][T12192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 847.893588][T12228] overlayfs: missing 'lowerdir' [ 851.796939][T12259] fuse: Unknown parameter 'fd0x0000000000000003' [ 852.175158][T12268] overlayfs: missing 'lowerdir' [ 853.218766][T12272] loop4: detected capacity change from 0 to 512 [ 853.307418][T12274] fuse: Bad value for 'user_id' [ 853.412734][T12272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 853.480593][T12272] ext4 filesystem being mounted at /351/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 853.604925][T12272] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.1571: corrupted inode contents [ 853.657379][T12272] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #4: comm syz.4.1571: mark_inode_dirty error [ 853.883515][T12272] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.1571: corrupted inode contents [ 854.218635][T12272] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.1571: mark_inode_dirty error [ 854.275636][T12272] Quota error (device loop4): write_blk: dquota write failed [ 854.302660][T12272] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 854.326077][T12282] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.1571: corrupted inode contents [ 854.339613][T12272] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1571: Failed to acquire dquot type 1 [ 854.544904][T12282] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #4: comm syz.4.1571: mark_inode_dirty error [ 854.558723][T12282] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.1571: corrupted inode contents [ 854.572159][T12282] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.1571: mark_inode_dirty error [ 854.585320][T12282] Quota error (device loop4): write_blk: dquota write failed [ 854.596660][T12282] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 854.607244][T12282] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 854.617564][T12282] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1571: Failed to acquire dquot type 1 [ 857.311120][T12284] Quota error (device loop4): write_blk: dquota write failed [ 857.319233][T12284] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 857.518609][ T6074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 857.985590][T12296] fuse: Unknown parameter 'fd0x0000000000000003' [ 858.327000][T12306] loop4: detected capacity change from 0 to 64 [ 858.426863][T12308] overlayfs: missing 'lowerdir' [ 862.304099][ T5109] Bluetooth: hci1: command 0x0406 tx timeout [ 866.915465][T12348] overlayfs: missing 'lowerdir' [ 867.778610][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1593'. [ 868.803229][T12367] block device autoloading is deprecated and will be removed. [ 870.480569][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.310963][T12431] xt_l2tp: v2 doesn't support IP mode [ 879.335800][T12464] xt_l2tp: v2 doesn't support IP mode [ 881.414955][T12473] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1630'. [ 882.807178][T12485] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1633'. [ 885.245596][T12511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1643'. [ 886.556476][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 886.772970][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 886.785797][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 886.826639][ T9] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 886.836091][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.845498][ T9] usb 5-1: Product: syz [ 886.850942][ T9] usb 5-1: Manufacturer: syz [ 886.860485][ T9] usb 5-1: SerialNumber: syz [ 886.881676][ T9] usb 5-1: config 0 descriptor?? [ 886.887985][T12524] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 886.895500][T12524] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 886.906028][ T9] usb 5-1: ucan: probing device on interface #0 [ 886.912566][ T9] usb 5-1: ucan: invalid EP count (1) [ 886.918628][ T9] usb 5-1: ucan: probe failed; try to update the device firmware [ 889.551564][ T5888] usb 5-1: USB disconnect, device number 10 [ 889.815100][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'. [ 893.134903][T12586] overlayfs: missing 'lowerdir' [ 894.392226][T12601] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1672'. [ 904.341162][ T28] audit: type=1800 audit(1762997034.212:6): pid=12634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1682" name="bus" dev="overlay" ino=2286 res=0 errno=0 [ 905.457226][T12640] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1683'. [ 905.520478][T12644] fuse: Bad value for 'rootmode' [ 911.307916][ T28] audit: type=1326 audit(1762997041.342:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542ab8f6c9 code=0x7ffc0000 [ 911.371146][ T28] audit: type=1326 audit(1762997041.342:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542ab8f6c9 code=0x7ffc0000 [ 911.430105][ T28] audit: type=1326 audit(1762997041.362:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f542ab8f6c9 code=0x7ffc0000 [ 911.598162][T12670] lo speed is unknown, defaulting to 1000 [ 911.895080][ T28] audit: type=1326 audit(1762997041.892:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542ab8f6c9 code=0x7ffc0000 [ 911.941044][T12687] fuse: Unknown parameter 'use00000000000000000000' [ 911.957980][ T28] audit: type=1326 audit(1762997041.962:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12669 comm="syz.2.1693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f542ab8f6c9 code=0x7ffc0000 [ 919.219241][T12724] fuse: Unknown parameter 'use00000000000000000000' [ 925.808584][T12761] block device autoloading is deprecated and will be removed. [ 925.960104][T12761] ALSA: mixer_oss: invalid OSS volume '' [ 930.258024][T12778] fuse: Unknown parameter 'use00000000000000000000' [ 931.922115][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.747402][T12836] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1739'. [ 937.189576][T12844] xt_l2tp: v2 doesn't support IP mode [ 939.255071][T12878] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1750'. [ 942.690471][T12916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1759'. [ 943.432552][T12919] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 945.095689][T12937] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 948.037072][T12962] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 948.800116][T12971] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 948.809161][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'. [ 951.044288][T12992] xt_l2tp: v2 doesn't support IP mode [ 953.963185][T13019] nftables ruleset with unbound set [ 962.676249][T13089] fuse: Bad value for 'fd' [ 970.936645][T13162] block device autoloading is deprecated and will be removed. [ 973.009299][T13194] ieee802154 phy0 wpan0: encryption failed: -22 [ 973.032691][T13196] ieee802154 phy0 wpan0: encryption failed: -22 [ 973.418674][T13207] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1842'. [ 973.457498][T13208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1843'. [ 976.439569][T13245] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1854'. [ 979.623433][T13277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1866'. [ 985.986310][T13316] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 988.982992][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'. [ 993.349872][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 995.762123][ T8775] kernel write not supported for file /sequencer (pid: 8775 comm: kworker/0:8) [ 997.518935][T13431] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 997.545256][ C0] vkms_vblank_simulate: vblank timer overrun [ 997.553793][T13431] CIFS mount error: No usable UNC path provided in device string! [ 997.553793][T13431] [ 997.564554][T13431] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1001.601573][T13448] loop4: detected capacity change from 0 to 40427 [ 1001.654703][T13448] F2FS-fs (loop4): invalid crc value [ 1001.664101][T13448] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1001.700050][T13448] F2FS-fs (loop4): Start checkpoint disabled! [ 1001.708821][T13448] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1004.527519][ T3461] kworker/u4:10: attempt to access beyond end of device [ 1004.527519][ T3461] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1004.590102][ T3461] kworker/u4:10: attempt to access beyond end of device [ 1004.590102][ T3461] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1004.635553][ T3461] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1004.659391][ T3461] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1004.676411][ T3461] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1007.398801][T13481] block device autoloading is deprecated and will be removed. [ 1008.651754][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1010.217425][T13508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1925'. [ 1014.476469][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1014.720055][ T9] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1014.772509][ T9] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.855613][ T9] usb 6-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1014.896501][ T9] usb 6-1: config 220 has no interface number 1 [ 1014.909907][ T9] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1014.919006][ T9] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1014.947372][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1014.976707][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.985708][ T9] usb 6-1: Product: syz [ 1015.006934][ T9] usb 6-1: Manufacturer: syz [ 1015.019170][ T9] usb 6-1: SerialNumber: syz [ 1015.626920][ T9] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1015.636257][ T9] usb 6-1: No valid video chain found. [ 1015.683827][ T9] usb 6-1: USB disconnect, device number 2 [ 1017.305520][T13582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1949'. [ 1020.042254][T13605] loop2: detected capacity change from 0 to 40427 [ 1020.120019][T13605] F2FS-fs (loop2): invalid crc value [ 1020.150600][T13605] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1020.206245][T13605] F2FS-fs (loop2): Start checkpoint disabled! [ 1020.222458][T13605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1021.979371][ T3461] kworker/u4:10: attempt to access beyond end of device [ 1021.979371][ T3461] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1022.005821][ T3461] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1022.015847][ T3461] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1022.023478][ T3461] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1027.637586][T13647] loop4: detected capacity change from 0 to 40427 [ 1027.914322][T13658] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1977'. [ 1027.992900][T13647] F2FS-fs (loop4): invalid crc value [ 1029.490462][T13647] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1029.581754][T13647] F2FS-fs (loop4): Start checkpoint disabled! [ 1029.673137][T13647] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1034.130945][T11235] kworker/u4:2: attempt to access beyond end of device [ 1034.130945][T11235] loop4: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1034.145521][T11235] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1034.400806][T13681] CIFS mount error: No usable UNC path provided in device string! [ 1034.400806][T13681] [ 1034.410953][T13681] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1036.095912][T11235] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1036.103374][T11235] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1036.669613][T13688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1986'. [ 1037.784849][T13695] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1987'. [ 1038.950076][T13704] syz_tun: entered promiscuous mode [ 1039.046893][T13704] macvtap1: entered promiscuous mode [ 1039.149540][T13704] macvtap1: entered allmulticast mode [ 1039.304834][T13704] syz_tun: entered allmulticast mode [ 1039.316058][T13704] syz_tun: left allmulticast mode [ 1039.324792][T13704] syz_tun: left promiscuous mode [ 1040.464062][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1996'. [ 1042.076608][T13722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1996'. [ 1055.072153][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.686369][ T8778] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1062.018748][ T8778] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1062.037182][ T8778] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1062.047986][ T8778] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1062.058370][ T8778] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1062.078206][ T8778] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1062.113869][ T8778] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1062.136182][ T8778] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1062.144272][ T8778] usb 5-1: Product: syz [ 1062.151075][ T8778] usb 5-1: Manufacturer: syz [ 1062.164538][ T8778] cdc_wdm 5-1:1.0: skipping garbage [ 1062.180416][ T8778] cdc_wdm 5-1:1.0: skipping garbage [ 1062.220676][ T8778] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1062.222888][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2048'. [ 1062.239566][ T8778] cdc_wdm 5-1:1.0: Unknown control protocol [ 1064.807057][ T5888] usb 5-1: USB disconnect, device number 11 [ 1068.261502][T13950] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2061'. [ 1076.613906][ T28] audit: type=1326 audit(1762997206.642:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391978f6c9 code=0x7ffc0000 [ 1076.710918][ T28] audit: type=1326 audit(1762997206.672:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391978f6c9 code=0x7ffc0000 [ 1076.733923][ T28] audit: type=1326 audit(1762997206.682:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f391978f6c9 code=0x7ffc0000 [ 1076.756417][ T28] audit: type=1326 audit(1762997206.682:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391978f6c9 code=0x7ffc0000 [ 1076.779134][ T28] audit: type=1326 audit(1762997206.682:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391978f6c9 code=0x7ffc0000 [ 1076.808699][ T28] audit: type=1326 audit(1762997206.682:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f391978f6c9 code=0x7ffc0000 [ 1076.831598][ T28] audit: type=1326 audit(1762997206.682:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391978f6c9 code=0x7ffc0000 [ 1076.855409][ T28] audit: type=1326 audit(1762997206.682:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14036 comm="syz.1.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f391978f6c9 code=0x7ffc0000 [ 1077.013507][ T51] Bluetooth: hci3: unexpected event for opcode 0x2007 [ 1086.023656][T14133] overlayfs: missing 'lowerdir' [ 1089.305208][T14177] overlayfs: missing 'lowerdir' [ 1091.782401][T14186] nbd0: detected capacity change from 0 to 127 [ 1091.854986][ T51] block nbd0: Receive control failed (result -104) [ 1093.496262][ T8778] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1093.720929][ T8778] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.736328][ T8778] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1093.746475][ T8778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.762630][ T8778] usb 6-1: config 0 descriptor?? [ 1093.778768][ T8778] pwc: Askey VC010 type 2 USB webcam detected. [ 1094.299625][ T8778] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1096.418053][ T8778] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1096.436510][ T8778] pwc: recv_control_msg error -71 req 04 val 1000 [ 1096.454884][ T8778] pwc: recv_control_msg error -71 req 04 val 1300 [ 1096.472658][ T8778] pwc: recv_control_msg error -71 req 04 val 1400 [ 1096.495305][ T8778] pwc: recv_control_msg error -71 req 02 val 2000 [ 1096.536229][ T8778] pwc: recv_control_msg error -71 req 02 val 2100 [ 1096.546225][ T8778] pwc: recv_control_msg error -71 req 04 val 1500 [ 1096.580737][ T8778] pwc: recv_control_msg error -71 req 02 val 2500 [ 1096.602223][ T8778] pwc: recv_control_msg error -71 req 02 val 2400 [ 1096.636176][ T8778] pwc: recv_control_msg error -71 req 02 val 2600 [ 1096.654129][ T8778] pwc: recv_control_msg error -71 req 02 val 2900 [ 1096.670551][ T8778] pwc: recv_control_msg error -71 req 02 val 2800 [ 1096.692041][ T8778] pwc: recv_control_msg error -71 req 04 val 1100 [ 1096.706574][ T8778] pwc: recv_control_msg error -71 req 04 val 1200 [ 1096.734330][ T8778] pwc: Registered as video103. [ 1096.750848][ T8778] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 1096.844662][ T8778] usb 6-1: USB disconnect, device number 3 [ 1097.451615][T14235] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2147'. [ 1099.756482][ T8774] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1100.427144][ T8774] usb 5-1: Using ep0 maxpacket: 8 [ 1100.434572][ T8774] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.459089][ T8774] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 1100.474213][ T8774] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.483878][ T8774] usb 5-1: Product: syz [ 1100.494396][ T8774] usb 5-1: Manufacturer: syz [ 1100.500597][ T8774] usb 5-1: SerialNumber: syz [ 1100.521209][ T8774] usb 5-1: config 0 descriptor?? [ 1100.537125][ T8774] usb 5-1: bad CDC descriptors [ 1100.542915][ T8774] usb 5-1: unsupported MDLM descriptors [ 1100.758213][ T8774] usb 5-1: USB disconnect, device number 12 [ 1106.011808][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2178'. [ 1109.635049][T14421] CIFS mount error: No usable UNC path provided in device string! [ 1109.635049][T14421] [ 1109.645450][T14421] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1115.944382][T14511] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1115.961104][T14511] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1115.972820][T14511] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1115.983948][T14511] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1115.992270][T14511] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1116.016854][T14511] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1116.213196][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.853785][ T51] Bluetooth: hci0: command tx timeout [ 1118.900678][T14508] chnl_net:caif_netlink_parms(): no params data found [ 1119.677398][T14508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.720228][T14508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.742031][T14508] bridge_slave_0: entered allmulticast mode [ 1119.763724][T14508] bridge_slave_0: entered promiscuous mode [ 1119.788827][T14508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.796030][T14508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.826687][T14508] bridge_slave_1: entered allmulticast mode [ 1119.846727][T14508] bridge_slave_1: entered promiscuous mode [ 1120.010950][T14508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1120.059225][T14508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1120.258245][T14508] team0: Port device team_slave_0 added [ 1120.275327][T14508] team0: Port device team_slave_1 added [ 1120.354709][T14508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1120.385057][T14508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.436363][T14508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1120.487236][T14508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1120.504520][T14508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.551435][T14508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.639143][T14508] hsr_slave_0: entered promiscuous mode [ 1120.668505][T14508] hsr_slave_1: entered promiscuous mode [ 1120.678314][T14508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1120.696870][T14508] Cannot create hsr debugfs directory [ 1120.936422][ T51] Bluetooth: hci0: command tx timeout [ 1121.734812][T14508] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.947714][T14508] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.978523][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 30 seconds [ 1121.991997][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 30 seconds [ 1122.003603][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 30 seconds [ 1122.014692][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 30 seconds [ 1122.255104][T14508] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.454814][T14508] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.765650][T14508] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1124.381353][ T51] Bluetooth: hci0: command tx timeout [ 1124.429260][T14508] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1124.480057][T14508] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1124.500213][T14508] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1125.045581][T14508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1125.273947][T14508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1125.381630][T14415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.388867][T14415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1125.463027][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.470301][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1126.112424][T14508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.195900][T14508] veth0_vlan: entered promiscuous mode [ 1126.223558][T14508] veth1_vlan: entered promiscuous mode [ 1126.389160][T14508] veth0_macvtap: entered promiscuous mode [ 1126.449766][ T51] Bluetooth: hci0: command tx timeout [ 1126.512449][T14508] veth1_macvtap: entered promiscuous mode [ 1126.565385][T14508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.594044][T14508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.635558][T14508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.654762][T14508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.684804][T14508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1126.714767][T14508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.762851][T14508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1126.825420][T14508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.888044][T14508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.918825][T14508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.941167][T14508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1126.968272][T14508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1126.991259][T14508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1127.047542][T14508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.223805][T14508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.276334][T14508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.285486][T14508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.336318][T14508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.691536][T14636] CIFS mount error: No usable UNC path provided in device string! [ 1127.691536][T14636] [ 1127.701729][T14636] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1129.601830][T14425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.642161][T14425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.712230][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.733268][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.696810][T14669] capability: warning: `syz.5.2260' uses 32-bit capabilities (legacy support in use) [ 1133.352075][T14683] binder: 14682:14683 ioctl c0306201 200000000080 returned -14 [ 1137.117038][T14704] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2270'. [ 1137.126270][T14704] netlink: 'syz.5.2270': attribute type 7 has an invalid length. [ 1137.134049][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2270'. [ 1138.856171][ T8756] IPVS: starting estimator thread 0... [ 1138.956192][T14715] IPVS: using max 16 ests per chain, 38400 per kthread [ 1147.042699][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2277'. [ 1152.266398][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 60 seconds [ 1152.277447][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 60 seconds [ 1152.288736][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 60 seconds [ 1152.300251][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 60 seconds [ 1154.969145][T14829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2298'. [ 1160.903634][ T5164] udevd[5164]: worker [13788] /devices/virtual/block/nbd0 is taking a long time [ 1161.333365][T14876] netlink: 'syz.2.2309': attribute type 10 has an invalid length. [ 1161.375951][T14876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.399718][T14876] team0: Port device bond0 added [ 1164.751202][T14889] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1173.912286][T14983] xt_l2tp: v2 doesn't support IP mode [ 1177.531436][T15016] warning: `syz.5.2345' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1177.669385][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.623303][T15029] xt_l2tp: v2 doesn't support IP mode [ 1182.947690][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 90 seconds [ 1182.958577][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 90 seconds [ 1182.969592][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 90 seconds [ 1182.980598][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 90 seconds [ 1194.812036][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2372'. [ 1199.017275][T15142] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1199.794561][T15142] exFAT-fs (nullb0): invalid boot record signature [ 1199.851751][T15142] exFAT-fs (nullb0): failed to read boot sector [ 1199.889219][T15142] exFAT-fs (nullb0): failed to recognize exfat type [ 1200.753072][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'. [ 1207.537748][T14511] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1207.550533][T14511] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1207.561757][T14511] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1207.596612][T14511] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1207.604586][T14511] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1207.612949][T14511] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1208.809878][T15182] CIFS mount error: No usable UNC path provided in device string! [ 1208.809878][T15182] [ 1208.820153][T15182] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1209.677804][T15169] chnl_net:caif_netlink_parms(): no params data found [ 1209.796356][ T51] Bluetooth: hci2: command tx timeout [ 1210.342499][T15169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.360320][T15169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.376403][T15169] bridge_slave_0: entered allmulticast mode [ 1210.395157][T15169] bridge_slave_0: entered promiscuous mode [ 1210.417029][T15169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.440366][T15169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.467553][T15169] bridge_slave_1: entered allmulticast mode [ 1210.500557][T15169] bridge_slave_1: entered promiscuous mode [ 1210.602823][T15169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.711235][T15169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.846966][ T51] Bluetooth: hci2: command tx timeout [ 1213.542061][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 120 seconds [ 1213.553220][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 120 seconds [ 1213.564730][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 120 seconds [ 1213.575822][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 120 seconds [ 1213.808136][T15169] team0: Port device team_slave_0 added [ 1213.860764][T15169] team0: Port device team_slave_1 added [ 1214.210202][ T51] Bluetooth: hci2: command tx timeout [ 1214.370118][T15169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.386080][T15169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.436318][T15169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1214.478770][T15169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1214.485796][T15169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1214.626370][T15169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1214.877889][T15169] hsr_slave_0: entered promiscuous mode [ 1214.926528][T15169] hsr_slave_1: entered promiscuous mode [ 1214.938493][T15169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1214.966130][T15169] Cannot create hsr debugfs directory [ 1215.632640][T15169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.800673][ T51] Bluetooth: hci2: command tx timeout [ 1217.834687][T15169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.111442][T15169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.358331][T15169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.804140][T15169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1218.833885][T15169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1218.869429][T15169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1218.905868][T15169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1219.123538][T15169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1219.220757][T15169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1219.247630][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.254881][T14418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1219.291868][T14418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.299145][T14418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1219.656989][T15271] 9pnet_fd: Insufficient options for proto=fd [ 1219.920919][T15169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1224.694801][T15289] netlink: 248 bytes leftover after parsing attributes in process `syz.5.2410'. [ 1225.210973][T15169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.261544][T15169] veth0_vlan: entered promiscuous mode [ 1226.352098][T15169] veth1_vlan: entered promiscuous mode [ 1226.535799][T15169] veth0_macvtap: entered promiscuous mode [ 1226.604436][T15169] veth1_macvtap: entered promiscuous mode [ 1226.632779][T15169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.644229][T15169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.655133][T15169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.696126][T15169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.707069][T15169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.736382][T15169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1226.772334][T15169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1226.862439][T15169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.028032][T15169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.096093][T15169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.107054][T15169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.121905][T15169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.133028][T15169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.144867][T15169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.242277][T15169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.329413][T15169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1227.348458][T15169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1227.383567][T15169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.463285][T15169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.499699][T15169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.518716][T15169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.540071][T15169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.199879][T11235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.216059][T11235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.304677][ T3524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.327593][ T3524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1231.357973][T15382] input: syz0 as /devices/virtual/input/input21 [ 1233.847198][T15398] loop4: detected capacity change from 0 to 512 [ 1233.961507][T15398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1234.049947][T15398] ext4 filesystem being mounted at /566/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1234.127862][T15398] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2432: corrupted inode contents [ 1234.147290][T15398] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #4: comm syz.4.2432: mark_inode_dirty error [ 1234.174183][T15398] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2432: corrupted inode contents [ 1234.192291][T15398] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.2432: mark_inode_dirty error [ 1236.299369][T15398] Quota error (device loop4): write_blk: dquota write failed [ 1236.340526][T15398] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1236.356317][T15398] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2432: Failed to acquire dquot type 1 [ 1236.511357][T15413] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2432: corrupted inode contents [ 1236.559598][T15413] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #4: comm syz.4.2432: mark_inode_dirty error [ 1236.573626][T15413] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2432: corrupted inode contents [ 1236.586556][T15413] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.2432: mark_inode_dirty error [ 1236.598113][T15413] Quota error (device loop4): write_blk: dquota write failed [ 1236.605508][T15413] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1236.614733][T15413] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1236.624763][T15413] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2432: Failed to acquire dquot type 1 [ 1236.638221][T15412] Quota error (device loop4): do_insert_tree: Inserting already present quota entry (block 7) [ 1236.649617][T15412] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 1236.682287][T15414] Quota error (device loop4): write_blk: dquota write failed [ 1236.690398][T15414] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1236.822328][ T6074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.130513][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.103704][T15454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2446'. [ 1241.166765][T14511] Bluetooth: hci0: command 0x0406 tx timeout [ 1243.697226][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 150 seconds [ 1243.715525][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 150 seconds [ 1243.727837][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 150 seconds [ 1243.739366][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 150 seconds [ 1245.024335][T15485] xt_l2tp: v2 doesn't support IP mode [ 1247.467191][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2455'. [ 1251.273937][T15542] loop2: detected capacity change from 0 to 512 [ 1251.453177][T15542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1251.546323][T15542] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1251.617225][T15542] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2467: corrupted inode contents [ 1251.678061][T15542] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #4: comm syz.2.2467: mark_inode_dirty error [ 1252.866553][T15542] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2467: corrupted inode contents [ 1253.200114][T15542] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #4: comm syz.2.2467: mark_inode_dirty error [ 1253.281088][T15542] Quota error (device loop2): write_blk: dquota write failed [ 1253.299304][T15542] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1253.311943][T15542] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2467: Failed to acquire dquot type 1 [ 1253.345159][T15553] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2467: corrupted inode contents [ 1253.389830][T15553] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #4: comm syz.2.2467: mark_inode_dirty error [ 1253.401919][T15553] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2467: corrupted inode contents [ 1253.414101][T15553] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #4: comm syz.2.2467: mark_inode_dirty error [ 1253.426224][T15553] Quota error (device loop2): write_blk: dquota write failed [ 1253.434374][T15553] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1253.443713][T15553] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1253.453732][T15553] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2467: Failed to acquire dquot type 1 [ 1253.500720][T15554] Quota error (device loop2): write_blk: dquota write failed [ 1253.508299][T15554] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1253.643181][T14508] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1265.527573][T15634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2489'. [ 1268.568603][T15654] loop4: detected capacity change from 0 to 512 [ 1268.687555][T15654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1268.706461][T15654] ext4 filesystem being mounted at /581/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1268.736751][ T8774] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 1268.842631][T15654] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2488: corrupted inode contents [ 1268.888883][T15654] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #4: comm syz.4.2488: mark_inode_dirty error [ 1268.943879][ T8774] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1268.953503][ T8774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.956588][T15654] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2488: corrupted inode contents [ 1268.984210][ T8774] usb 6-1: Product: syz [ 1268.995726][ T8774] usb 6-1: Manufacturer: syz [ 1269.003354][T15654] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.2488: mark_inode_dirty error [ 1269.014429][ T8774] usb 6-1: SerialNumber: syz [ 1269.222884][T15654] Quota error (device loop4): write_blk: dquota write failed [ 1269.241360][T15654] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1269.255677][T15654] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2488: Failed to acquire dquot type 1 [ 1269.457127][T15660] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2488: corrupted inode contents [ 1269.600561][T15660] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #4: comm syz.4.2488: mark_inode_dirty error [ 1269.618635][T15660] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2488: corrupted inode contents [ 1269.795707][T15660] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.2488: mark_inode_dirty error [ 1269.813023][T15660] Quota error (device loop4): write_blk: dquota write failed [ 1269.821022][T15660] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1269.830410][T15660] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1269.840437][T15660] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2488: Failed to acquire dquot type 1 [ 1269.856405][T15659] Quota error (device loop4): do_insert_tree: Inserting already present quota entry (block 7) [ 1269.866834][T15659] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 1269.911195][T15661] Quota error (device loop4): write_blk: dquota write failed [ 1269.918868][T15661] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1269.944260][ T8774] usb 6-1: config 0 descriptor?? [ 1271.966155][ T8774] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -110 [ 1271.974428][ T8774] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -110 [ 1272.041930][ T8774] usb 6-1: USB disconnect, device number 4 [ 1272.175021][ T6074] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1274.287172][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 180 seconds [ 1274.298274][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 180 seconds [ 1274.312471][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 180 seconds [ 1274.325383][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 180 seconds [ 1292.872832][T15828] loop2: detected capacity change from 0 to 512 [ 1293.528193][T15828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1293.867270][T15828] ext4 filesystem being mounted at /65/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1293.977172][T15828] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2536: corrupted inode contents [ 1294.046497][T15828] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #4: comm syz.2.2536: mark_inode_dirty error [ 1295.128673][T15828] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2536: corrupted inode contents [ 1295.220187][T15828] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #4: comm syz.2.2536: mark_inode_dirty error [ 1295.287855][T15828] Quota error (device loop2): write_blk: dquota write failed [ 1295.426665][T15828] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1295.437913][T15828] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2536: Failed to acquire dquot type 1 [ 1295.656182][T15844] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2536: corrupted inode contents [ 1295.675365][T15844] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #4: comm syz.2.2536: mark_inode_dirty error [ 1295.688020][T15844] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2536: corrupted inode contents [ 1295.701134][T15844] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #4: comm syz.2.2536: mark_inode_dirty error [ 1295.712840][T15844] Quota error (device loop2): write_blk: dquota write failed [ 1295.720490][T15844] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1295.730126][T15844] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1295.740196][T15844] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2536: Failed to acquire dquot type 1 [ 1295.859702][T15845] Quota error (device loop2): write_blk: dquota write failed [ 1295.867421][T15845] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1296.000148][T14508] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1299.206256][ T8775] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1299.460035][ T8775] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 1299.474437][ T8775] usb 5-1: config 1 has no interface number 0 [ 1299.491593][ T8775] usb 5-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 1299.503440][ T8775] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 64 [ 1299.551060][T15890] loop2: detected capacity change from 0 to 512 [ 1299.575399][ T8775] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1299.618825][ T8775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.647703][ T8775] usb 5-1: Product: syz [ 1299.664947][ T8775] usb 5-1: Manufacturer: syz [ 1299.674304][ T8775] usb 5-1: SerialNumber: syz [ 1299.701046][T15879] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1299.717021][T15879] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1299.739250][T15890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1299.781445][ T8775] usb 5-1: Expected 3 endpoints, found: 2 [ 1299.837558][T15895] ALSA: mixer_oss: invalid OSS volume '' [ 1299.854937][T15890] ext4 filesystem being mounted at /69/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1300.532670][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.579314][T15890] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2549: corrupted inode contents [ 1300.623745][T15890] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #4: comm syz.2.2549: mark_inode_dirty error [ 1300.672611][T15890] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2549: corrupted inode contents [ 1300.696069][T15890] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #4: comm syz.2.2549: mark_inode_dirty error [ 1301.346127][T15890] Quota error (device loop2): write_blk: dquota write failed [ 1301.353750][T15890] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1301.396134][T15890] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2549: Failed to acquire dquot type 1 [ 1301.396533][T15900] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2549: corrupted inode contents [ 1301.422021][T15900] EXT4-fs error (device loop2): ext4_dirty_inode:6120: inode #4: comm syz.2.2549: mark_inode_dirty error [ 1301.435212][T15900] EXT4-fs error (device loop2): ext4_do_update_inode:5244: inode #4: comm syz.2.2549: corrupted inode contents [ 1301.448521][T15900] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #4: comm syz.2.2549: mark_inode_dirty error [ 1301.462525][T15900] Quota error (device loop2): write_blk: dquota write failed [ 1301.469975][T15900] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 1301.479217][T15900] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1301.489772][T15900] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2549: Failed to acquire dquot type 1 [ 1301.520478][T15901] Quota error (device loop2): write_blk: dquota write failed [ 1301.528093][T15901] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1301.630712][ T8756] usb 5-1: USB disconnect, device number 13 [ 1301.724813][T14508] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1301.747434][ T3510] Quota error (device loop2): do_check_range: Getting block 18 out of range 1-7 [ 1301.840554][T15906] random: crng reseeded on system resumption [ 1304.445165][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 210 seconds [ 1304.456188][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 210 seconds [ 1304.467268][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 210 seconds [ 1304.478483][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 210 seconds [ 1305.466320][T15933] ALSA: mixer_oss: invalid OSS volume '' [ 1310.652128][T15972] binder: 15968:15972 ioctl c0306201 200000000080 returned -14 [ 1313.061934][T14511] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1313.073606][T14511] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1313.083479][T14511] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1313.206517][T14511] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1313.216497][T14511] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1313.224110][T14511] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1315.326534][ T51] Bluetooth: hci3: command tx timeout [ 1315.959633][T15980] chnl_net:caif_netlink_parms(): no params data found [ 1316.509306][T15980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1316.536724][T15980] bridge0: port 1(bridge_slave_0) entered disabled state [ 1316.556987][T15980] bridge_slave_0: entered allmulticast mode [ 1316.572620][T15980] bridge_slave_0: entered promiscuous mode [ 1316.600080][T15980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.847375][T15980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.859136][T15980] bridge_slave_1: entered allmulticast mode [ 1317.003877][T15980] bridge_slave_1: entered promiscuous mode [ 1317.426213][ T51] Bluetooth: hci3: command tx timeout [ 1318.188645][T15980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1318.251370][T15980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1319.068193][T15980] team0: Port device team_slave_0 added [ 1319.248923][T15980] team0: Port device team_slave_1 added [ 1319.486209][ T51] Bluetooth: hci3: command tx timeout [ 1319.516257][T15980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.523279][T15980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.640991][T15980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.654790][T15980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.666299][T15980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1319.693319][T15980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.618670][T15980] hsr_slave_0: entered promiscuous mode [ 1320.636601][T15980] hsr_slave_1: entered promiscuous mode [ 1320.676604][T15980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1320.684250][T15980] Cannot create hsr debugfs directory [ 1321.566460][ T51] Bluetooth: hci3: command tx timeout [ 1322.910111][T16034] xt_l2tp: v2 doesn't support IP mode [ 1326.838900][T15980] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1326.885660][T15980] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1326.910287][T15980] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1327.065228][T15980] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1328.909962][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2590'. [ 1329.053520][T15980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.086820][T15980] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.102138][T14407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.109384][T14407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.219168][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.226535][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.278711][T16072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2589'. [ 1329.937876][T15980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.463836][T16096] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2596'. [ 1333.416433][T14511] Bluetooth: hci2: command 0x0406 tx timeout [ 1334.680477][T15980] veth0_vlan: entered promiscuous mode [ 1334.715127][T15980] veth1_vlan: entered promiscuous mode [ 1334.812198][T15980] veth0_macvtap: entered promiscuous mode [ 1334.825907][T15980] veth1_macvtap: entered promiscuous mode [ 1335.039464][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.097815][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 240 seconds [ 1335.109262][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 240 seconds [ 1335.124832][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 240 seconds [ 1335.136056][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 240 seconds [ 1335.168259][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.216488][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.264068][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.284179][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.308840][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.339362][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.364358][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.405138][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.427700][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.459426][T15980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.491828][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.518454][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.540465][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.567482][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.590480][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.616768][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.642696][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.671548][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.692887][T15980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.721833][T15980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.746655][T15980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1335.808931][T15980] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.834543][T15980] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.864577][T15980] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.890276][T15980] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1335.946313][T16125] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1336.140713][T14418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.167592][T14418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.228051][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.258914][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.844871][T16138] ALSA: mixer_oss: invalid OSS volume '' [ 1341.586283][ T8755] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1341.825645][ T8755] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1341.891100][ T8755] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1341.906216][ T8755] usb 3-1: config 220 has no interface number 2 [ 1341.917325][ T8755] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1341.930736][ T8755] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1341.938674][ T8755] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1341.953887][ T8755] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1341.964741][ T8755] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1342.008331][ T8755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.401613][ T8755] usb 3-1: Product: syz [ 1343.556123][ T8755] usb 3-1: Manufacturer: syz [ 1343.560773][ T8755] usb 3-1: SerialNumber: syz [ 1343.640980][ T8755] usb 3-1: selecting invalid altsetting 0 [ 1343.664086][ T8755] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1343.697410][ T8755] usb 3-1: No valid video chain found. [ 1343.723409][T16167] trusted_key: encrypted_key: hex blob is missing [ 1343.794830][ T8755] usb 3-1: selecting invalid altsetting 0 [ 1343.806300][ T8755] usbtest: probe of 3-1:220.1 failed with error -22 [ 1343.839084][ T8755] usb 3-1: USB disconnect, device number 22 [ 1344.052514][T16178] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2621'. [ 1353.676233][T16225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2631'. [ 1356.479333][T16245] ALSA: mixer_oss: invalid OSS volume './file0' [ 1360.581291][ T5164] udevd[5164]: worker [13788] /devices/virtual/block/nbd0 timeout; kill it [ 1360.636319][ T5164] udevd[5164]: seq 14438 '/devices/virtual/block/nbd0' killed [ 1361.330962][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2641'. [ 1361.610106][T16261] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2642'. [ 1361.985051][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1364.072602][T16277] ALSA: mixer_oss: invalid OSS volume './file0' [ 1366.426142][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 270 seconds [ 1366.437375][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 270 seconds [ 1366.449027][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 270 seconds [ 1366.460596][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 270 seconds [ 1366.819220][T16289] xt_l2tp: v2 doesn't support IP mode [ 1368.790154][T16298] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2652'. [ 1370.909779][T16308] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1371.358042][T16314] ALSA: mixer_oss: invalid OSS volume './file0' [ 1374.909857][T16331] CIFS mount error: No usable UNC path provided in device string! [ 1374.909857][T16331] [ 1374.920007][T16331] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1377.877668][T16333] xt_l2tp: v2 doesn't support IP mode [ 1381.473126][T16355] ALSA: mixer_oss: invalid OSS volume './file0' [ 1382.510322][ T51] Bluetooth: hci3: link tx timeout [ 1382.517141][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1382.534201][ T51] Bluetooth: hci3: link tx timeout [ 1382.540384][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1382.550421][ T51] Bluetooth: hci3: link tx timeout [ 1382.555632][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1382.565627][ T51] Bluetooth: hci3: link tx timeout [ 1382.572247][ T51] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1383.888970][T16381] xt_l2tp: v2 doesn't support IP mode [ 1385.219707][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1389.236114][T16422] trusted_key: encrypted_key: hex blob is missing [ 1390.009900][T16437] xt_l2tp: v2 doesn't support IP mode [ 1396.807517][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 300 seconds [ 1396.818525][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 300 seconds [ 1396.829687][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 300 seconds [ 1397.446065][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 300 seconds [ 1399.540188][T16473] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2694'. [ 1401.766270][T16482] xt_l2tp: v2 doesn't support IP mode [ 1405.698124][T16513] overlayfs: failed to resolve './file0': -2 [ 1407.059831][T16523] xt_l2tp: v2 doesn't support IP mode [ 1416.413267][T16586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2718'. [ 1423.413845][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.416645][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 330 seconds [ 1427.427525][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 330 seconds [ 1427.460396][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 330 seconds [ 1427.471650][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 330 seconds [ 1457.852644][T16824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2780'. [ 1457.966274][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 360 seconds [ 1457.977139][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 360 seconds [ 1457.988692][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 360 seconds [ 1458.000435][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 360 seconds [ 1476.652661][T16947] loop4: detected capacity change from 0 to 512 [ 1476.871451][T16947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1477.156179][T16947] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1477.466569][T16947] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2809: corrupted inode contents [ 1477.558458][T16957] xt_l2tp: v2 doesn't support IP mode [ 1479.331428][T16947] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #4: comm syz.4.2809: mark_inode_dirty error [ 1479.524707][T16947] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2809: corrupted inode contents [ 1479.550705][T16947] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.2809: mark_inode_dirty error [ 1479.606091][T16947] Quota error (device loop4): write_blk: dquota write failed [ 1479.632499][T16947] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1480.025358][T16958] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2809: corrupted inode contents [ 1480.037866][T16947] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2809: Failed to acquire dquot type 1 [ 1480.049663][T16958] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #4: comm syz.4.2809: mark_inode_dirty error [ 1480.073421][T16958] EXT4-fs error (device loop4): ext4_do_update_inode:5244: inode #4: comm syz.4.2809: corrupted inode contents [ 1480.119574][T16958] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #4: comm syz.4.2809: mark_inode_dirty error [ 1480.132900][T16958] Quota error (device loop4): write_blk: dquota write failed [ 1480.140381][T16958] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 1480.150125][T16958] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1480.160146][T16958] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2809: Failed to acquire dquot type 1 [ 1480.211336][T16959] Quota error (device loop4): write_blk: dquota write failed [ 1480.218975][T16959] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 1480.383619][T15980] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1480.411868][ T3510] Quota error (device loop4): do_check_range: Getting block 18 out of range 1-7 [ 1481.212313][T16976] CIFS mount error: No usable UNC path provided in device string! [ 1481.212313][T16976] [ 1481.222480][T16976] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1484.856755][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 1488.091085][T17026] CIFS mount error: No usable UNC path provided in device string! [ 1488.091085][T17026] [ 1488.101196][T17026] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1488.257820][T13451] block nbd0: Possible stuck request ffff888021cb8000: control (read@0,1024B). Runtime 390 seconds [ 1488.268665][T13451] block nbd0: Possible stuck request ffff888021cb8200: control (read@1024,1024B). Runtime 390 seconds [ 1488.279716][T13451] block nbd0: Possible stuck request ffff888021cb8400: control (read@2048,1024B). Runtime 390 seconds [ 1488.290757][T13451] block nbd0: Possible stuck request ffff888021cb8600: control (read@3072,1024B). Runtime 390 seconds [ 1491.246733][T17058] CIFS mount error: No usable UNC path provided in device string! [ 1491.246733][T17058] [ 1491.256816][T17058] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1498.707588][T17111] trusted_key: encrypted_key: hex blob is missing [ 1498.815028][T17113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2851'. [ 1504.496996][T17146] trusted_key: encrypted_key: hex blob is missing [ 1505.327415][ T29] INFO: task udevd:13788 blocked for more than 144 seconds. [ 1505.341771][ T29] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1505.367726][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1505.387118][ T29] task:udevd state:D stack:25712 pid:13788 ppid:5164 flags:0x00004006 [ 1505.485975][ T29] Call Trace: [ 1505.516086][ T29] [ 1505.519225][ T29] __schedule+0x14d2/0x44d0 [ 1505.550650][ T29] ? asan.module_dtor+0x20/0x20 [ 1505.555655][ T29] ? mark_lock+0x94/0x320 [ 1505.648082][ T29] ? lock_chain_count+0x20/0x20 [ 1505.653023][ T29] ? _raw_spin_lock_irq+0xaf/0xe0 [ 1505.682551][ T29] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1505.706171][ T29] schedule+0xbd/0x170 [ 1505.714663][ T29] io_schedule+0x80/0xd0 [ 1505.742365][ T29] folio_wait_bit_common+0x6eb/0xf70 [ 1505.748294][ T29] ? folio_wait_bit+0x30/0x30 [ 1505.753017][ T29] ? _compound_head+0x120/0x120 [ 1505.786261][ T29] ? filemap_add_folio+0x192/0x3c0 [ 1505.791456][ T29] ? __filemap_get_folio+0x70a/0xbc0 [ 1505.803158][ T29] ? blkdev_writepage+0x30/0x30 [ 1505.823071][ T29] do_read_cache_folio+0x1c0/0x7e0 [ 1505.843859][ T29] ? blkdev_writepage+0x30/0x30 [ 1505.868641][ T29] read_part_sector+0xd2/0x350 [ 1505.905970][ T29] adfspart_check_POWERTEC+0x8d/0xf00 [ 1505.911452][ T29] ? adfspart_check_ADFS+0x660/0x660 [ 1505.946129][ T29] ? put_partition+0x350/0x350 [ 1505.951025][ T29] ? alloc_pages+0x4dc/0x740 [ 1505.996044][ T29] bdev_disk_changed+0x73a/0x1410 [ 1506.026025][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 1506.065978][ T29] ? iput+0x347/0x920 [ 1506.070070][ T29] blkdev_get_whole+0x30d/0x390 [ 1506.074931][ T29] blkdev_get_by_dev+0x279/0x600 [ 1506.096546][ T29] blkdev_open+0x152/0x360 [ 1506.101061][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 1506.105692][ T29] do_dentry_open+0x8c6/0x1500 [ 1506.115999][ T29] path_openat+0x274b/0x3190 [ 1506.120686][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 1506.125717][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1506.176607][ T29] ? verify_lock_unused+0x140/0x140 [ 1506.206459][ T29] ? do_filp_open+0x3d0/0x3d0 [ 1506.211276][ T29] ? __virt_addr_valid+0x18c/0x540 [ 1506.236287][ T29] do_filp_open+0x1c5/0x3d0 [ 1506.265940][ T29] ? vfs_tmpfile+0x490/0x490 [ 1506.306610][ T29] ? _raw_spin_unlock+0x28/0x40 [ 1506.311756][ T29] ? alloc_fd+0x58f/0x630 [ 1506.316469][ T29] do_sys_openat2+0x12c/0x1c0 [ 1506.321196][ T29] ? __bpf_trace_rseq_ip_fixup+0x1f0/0x1f0 [ 1506.336012][ T29] ? do_sys_open+0xe0/0xe0 [ 1506.340517][ T29] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1506.355988][ T29] ? lock_chain_count+0x20/0x20 [ 1506.362821][ T29] __x64_sys_openat+0x139/0x160 [ 1506.396003][ T29] do_syscall_64+0x55/0xb0 [ 1506.400505][ T29] ? clear_bhb_loop+0x40/0x90 [ 1506.405186][ T29] ? clear_bhb_loop+0x40/0x90 [ 1506.444968][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1506.454516][ T29] RIP: 0033:0x7fb0020a7407 [ 1506.481478][ T29] RSP: 002b:00007ffd9b3facf0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1506.505978][ T29] RAX: ffffffffffffffda RBX: 00007fb0027b5880 RCX: 00007fb0020a7407 [ 1506.514054][ T29] RDX: 00000000000a0800 RSI: 000055e0c36993f0 RDI: ffffffffffffff9c [ 1506.546037][ T29] RBP: 000055e0c368f910 R08: 0000000000000000 R09: 0000000000000000 [ 1506.554188][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 000055e0c36a3ba0 [ 1506.591919][ T29] R13: 000055e0c36a7410 R14: 0000000000000000 R15: 000055e0c36a3ba0 [ 1506.623932][ T29] [ 1506.632501][ T29] [ 1506.632501][ T29] Showing all locks held in the system: [ 1506.643382][ T29] 1 lock held by khungtaskd/29: [ 1506.649102][ T29] #0: ffffffff8cd2fee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1506.660493][ T29] 2 locks held by getty/5558: [ 1506.665221][ T29] #0: ffff88802d25d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1506.677425][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x425/0x1380 [ 1506.746260][ T29] 3 locks held by kworker/0:8/8775: [ 1506.751556][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1506.796207][ T29] #1: ffffc900039c7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1506.826027][ T29] #2: ffffffff8cd358b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 1506.895657][ T29] 1 lock held by syz-executor/10641: [ 1506.926034][ T29] 1 lock held by udevd/13788: [ 1506.940717][ T29] #0: ffff888140bc04c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x121/0x600 [ 1506.996142][ T29] 1 lock held by syz-executor/14508: [ 1507.002464][ T29] 3 locks held by kworker/u5:2/14511: [ 1507.047173][ T29] #0: ffff88805de6a138 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1507.095966][ T29] #1: ffffc90003647d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1507.126055][ T29] #2: ffff888079f98e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x390 [ 1507.156341][ T29] 2 locks held by kworker/0:0/14665: [ 1507.161700][ T29] #0: ffff888017872538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1507.205981][ T29] #1: ffffc900045efd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1507.235795][ T29] 3 locks held by kworker/1:1/16390: [ 1507.247445][ T29] #0: ffff888017870938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1507.276051][ T29] #1: ffffc90005107d00 (key_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 1507.300269][ T29] #2: ffffffff8cd358b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x830 [ 1507.324358][ T29] 4 locks held by syz.1.2861/17145: [ 1507.330037][ T29] #0: ffff88805e1f8e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x212/0x510 [ 1507.350562][ T29] #1: ffff88805e1f80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x4c9/0xfb0 [ 1507.360526][ T29] #2: ffffffff8e129808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa1/0x220 [ 1507.370880][ T29] #3: ffff88801c3bbb38 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 1507.383278][ T29] [ 1507.386441][ T29] ============================================= [ 1507.386441][ T29] [ 1507.396362][ T29] NMI backtrace for cpu 1 [ 1507.400754][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1507.406497][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 1507.407959][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1507.424070][ T29] Call Trace: [ 1507.427429][ T29] [ 1507.430411][ T29] dump_stack_lvl+0x16c/0x230 [ 1507.435206][ T29] ? preempt_count_add+0x91/0x1a0 [ 1507.440282][ T29] ? show_regs_print_info+0x20/0x20 [ 1507.445512][ T29] ? load_image+0x3b0/0x3b0 [ 1507.450068][ T29] nmi_cpu_backtrace+0x39b/0x3d0 [ 1507.455130][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1507.461307][ T29] ? _printk+0xd0/0x110 [ 1507.465479][ T29] ? load_image+0x3b0/0x3b0 [ 1507.470000][ T29] ? load_image+0x3b0/0x3b0 [ 1507.474537][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1507.480636][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1507.486641][ T29] watchdog+0xf41/0xf80 [ 1507.490821][ T29] ? watchdog+0x1e1/0xf80 [ 1507.495171][ T29] kthread+0x2fa/0x390 [ 1507.499254][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1507.504297][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1507.508898][ T29] ret_from_fork+0x48/0x80 [ 1507.513330][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1507.517937][ T29] ret_from_fork_asm+0x11/0x20 [ 1507.522738][ T29] [ 1507.527540][ T29] Sending NMI from CPU 1 to CPUs 0: [ 1507.532826][ C0] NMI backtrace for cpu 0 [ 1507.532838][ C0] CPU: 0 PID: 14407 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 1507.532854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1507.532865][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1507.532890][ C0] RIP: 0010:process_scheduled_works+0xa2b/0x15b0 [ 1507.532914][ C0] Code: 17 00 84 c0 48 8b 5c 24 08 4c 8b 64 24 10 0f 84 40 06 00 00 e8 66 c7 2d 00 eb 0f e8 5f c7 2d 00 48 8b 5c 24 08 4c 8b 64 24 10 <48> 8b 44 24 68 42 80 3c 28 00 74 08 4c 89 ff e8 91 22 85 00 48 89 [ 1507.532928][ C0] RSP: 0018:ffffc9000f6ffbc0 EFLAGS: 00000293 [ 1507.532941][ C0] RAX: ffffffff8157c82a RBX: ffff88805e307800 RCX: ffff88802a099e00 [ 1507.532954][ C0] RDX: 0000000000000000 RSI: ffffffff8afc6ae0 RDI: ffffffff8afc6aa0 [ 1507.532965][ C0] RBP: ffffc9000f6ffda8 R08: ffffffff8e4a8d6f R09: 1ffffffff1c951ad [ 1507.532978][ C0] R10: dffffc0000000000 R11: fffffbfff1c951ae R12: ffff88802a099e00 [ 1507.532990][ C0] R13: dffffc0000000000 R14: ffffffff8157c767 R15: ffff88802ec04418 [ 1507.533002][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1507.533015][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1507.533026][ C0] CR2: 0000200000028000 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 1507.533040][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1507.533051][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1507.533061][ C0] Call Trace: [ 1507.533066][ C0] [ 1507.533089][ C0] ? assign_work+0x400/0x400 [ 1507.533112][ C0] ? assign_work+0x39e/0x400 [ 1507.533133][ C0] worker_thread+0xa55/0xfc0 [ 1507.533166][ C0] kthread+0x2fa/0x390 [ 1507.533181][ C0] ? pr_cont_work+0x560/0x560 [ 1507.533199][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1507.533214][ C0] ret_from_fork+0x48/0x80 [ 1507.533232][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1507.533248][ C0] ret_from_fork_asm+0x11/0x20 [ 1507.533278][ C0] [ 1507.902013][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1507.908941][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1507.916168][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1507.926252][ T29] Call Trace: [ 1507.929542][ T29] [ 1507.932492][ T29] dump_stack_lvl+0x16c/0x230 [ 1507.937193][ T29] ? show_regs_print_info+0x20/0x20 [ 1507.942444][ T29] ? load_image+0x3b0/0x3b0 [ 1507.946969][ T29] panic+0x2c0/0x710 [ 1507.950878][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 1507.956533][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1507.961044][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1507.966606][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1507.972779][ T29] watchdog+0xf80/0xf80 [ 1507.976955][ T29] ? watchdog+0x1e1/0xf80 [ 1507.981301][ T29] kthread+0x2fa/0x390 [ 1507.985381][ T29] ? hungtask_pm_notify+0x90/0x90 [ 1507.990428][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1507.995034][ T29] ret_from_fork+0x48/0x80 [ 1507.999464][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1508.004074][ T29] ret_from_fork_asm+0x11/0x20 [ 1508.008871][ T29] [ 1508.012223][ T29] Kernel Offset: disabled [ 1508.016563][ T29] Rebooting in 86400 seconds..