last executing test programs: 1m23.292201891s ago: executing program 0 (id=1483): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x404040, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x51) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x207a98, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f0000000180)={0x980000, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0, 0x0}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r6, 0x4ee7000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) timer_create(0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00'}) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f00000000c0)) unshare(0x24020400) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000100000027bf000000050000202165e06031bb8f52721365ca4fa1afed", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/11], 0x48) 1m22.337240287s ago: executing program 0 (id=1485): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000001d000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa3}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m20.957882759s ago: executing program 0 (id=1488): syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') keyctl$get_keyring_id(0x0, 0x0, 0xefca115) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r2, 0x0, 0x6}, 0x18) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_INFO={0x5, 0x3, "d6"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='cachefiles_link\x00', r5, 0x0, 0x7}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000010000000000000000000000000002000000000000000000000009020000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r7, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m20.170201096s ago: executing program 0 (id=1490): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}]}]}, 0x28}}, 0x0) 1m19.938524802s ago: executing program 0 (id=1494): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000"], 0x48) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0xffffffff, 0xd) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff2cbf92ffffff86dd600000ff00140600fe8000000000000000000000000000bbfe8800000000000000000000000000aa00", @ANYRES32=0x41424344, @ANYRES32=r3, @ANYBLOB="50d900009078ffff"], 0x0) syz_emit_ethernet(0x1162, &(0x7f0000001b00)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @tcp={{0x33, 0x4, 0x2, 0x38, 0x1154, 0x66, 0x0, 0xce, 0x6, 0x0, @loopback, @remote, {[@cipso={0x86, 0x75, 0x3, [{0x0, 0xd, "033360ad980ec7869fcabb"}, {0x5, 0x3, ';'}, {0x0, 0x12, "8bc6c278b0486940355164dcfa96d1b4"}, {0x1, 0xa, "2ee76b168319ed86"}, {0x6, 0xd, "02801e6abe142d8410e0ba"}, {0x6, 0x5, "cdea89"}, {0x1, 0x12, "d1a06f2ffad7aa01f0af7897de3de0f9"}, {0x6, 0xc, "5a6b4f1e278098d4464b"}, {0x5, 0xf, "c1ace8089c0e5abc90fa7a970a"}, {0x5, 0x4, "b682"}]}, @cipso={0x86, 0x43, 0x0, [{0x0, 0xb, "46d090a3660cfa9b4e"}, {0x0, 0x10, "281f1e7f7c226465a9cd5ebcae2e"}, {0x2, 0x12, "25a5591ca5dcc6fb3689e376b2a8f37f"}, {0x5, 0x9, "f10789cd995c8f"}, {0x2, 0x7, "6fb7464664"}]}]}}, {{0x4e24, 0x4e21, r3, 0x41424344, 0x1, 0x0, 0x22, 0xc2, 0x6, 0x0, 0x80, {[@sack={0x5, 0x1e, [0x80000001, 0x8, 0x3, 0x400, 0x7fff, 0x8, 0x7]}, @fastopen={0x22, 0x7, "04b3d3d0fb"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "bf47df5e9d6a85fca076ec7a13151611"}, @sack={0x5, 0x2a, [0x10000, 0x1, 0x1ff, 0x3, 0x5, 0x1, 0x8, 0x6, 0x3, 0x1]}, @eol, @timestamp={0x8, 0xa, 0x8, 0x9}]}}, {"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"}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x600, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) 1m17.430430223s ago: executing program 0 (id=1497): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m7.052641201s ago: executing program 1 (id=1522): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d52b40c578d3deb33677cf2ec5fadf9a784f2b2bdc8d978e9e1a788494631d094fd3a92b480", 0xe8}, {&(0x7f0000002880)="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", 0x11c}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f20", 0xb4}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374", 0x3a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb306c7f77c8a00000000000000d037280699ca67e7143e46e0267c791d9ebf43d49dc561ceb279ff", 0x52}, {&(0x7f0000002700)="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", 0x143}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c910000000000000000", 0x7b}, {&(0x7f0000000000)="bd2f6aa36cea0e62ac00a4539dd8028116", 0x11}], 0x4}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f44b", 0xac}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004adc6b16981ea546cd24ff6d5739a", 0x6a}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b35b9b3aa61985", 0x7f}, {&(0x7f0000000b80)="8d75938ba9bc695806fede7eee392592a6014e55025d4c6612fbb793e3ed011000000000000007aab6dc2d3668aa974f67dad537a2d75fcac54500000000000000000000000000000000d70f7cae577664b818df8e9b4e81ef2a362d8b04feea468d03000000ab8deb693659820db4e2512d5878387d", 0x76}], 0x4}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m6.13652613s ago: executing program 1 (id=1524): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f00000002c0), &(0x7f0000000380), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1m5.825540184s ago: executing program 1 (id=1526): syz_io_uring_setup(0x10e, &(0x7f00000001c0)={0x0, 0x0, 0x1000, 0x0, 0x222}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r4 = io_uring_setup(0x5201, &(0x7f0000000000)={0x0, 0xe0c8, 0x2, 0x1, 0xae}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000000100)="d2", 0x1) 1m5.575153165s ago: executing program 1 (id=1527): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1m4.429840627s ago: executing program 1 (id=1530): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe2}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d52b40c578d3deb33677cf2ec5fadf9a784f2b2bdc8d978e9e1a788494631d094fd3a92b480", 0xe8}, {&(0x7f0000002880)="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", 0x11c}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f805ec0a1d0257e0e6f900e6cfb68e827b515d05bf2cc14e53e04b713a851bd656f20", 0xb4}, {&(0x7f0000000480)="4068745fc217775e9fca3477d3c929c1231d710ed7bb68bf2f127cb83703392703f53051ec7ebd4d519a9db1973eaeda928822aaa8d3a9677374", 0x3a}], 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb306c7f77c8a00000000000000d037280699ca67e7143e46e0267c791d9ebf43d49dc561ceb279ff", 0x52}, {&(0x7f0000002700)="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", 0x143}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c910000000000000000", 0x7b}, {&(0x7f0000000000)="bd2f6aa36cea0e62ac00a4539dd8028116", 0x11}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 1m4.173263922s ago: executing program 1 (id=1531): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m2.26174418s ago: executing program 32 (id=1497): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 49.01227317s ago: executing program 33 (id=1531): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="ed"], 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 41.749497586s ago: executing program 4 (id=1579): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xf, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffc, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0xffffffffffffff2f, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0x21}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000001c0004800500030001000000050003590271926018396300010000000800020002"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x48844) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c044}, 0x8040) 39.429220451s ago: executing program 2 (id=1582): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3, 0x0, 0x7}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x14, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000190a0102"], 0x2c}}, 0x0) 39.279020537s ago: executing program 4 (id=1583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) timerfd_create(0x7, 0x80000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000001c0)=""/153, &(0x7f0000000080)=0x99) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x400, 0x1, @empty}, 0x1c) getpeername$inet6(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x2, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000300)={{{@in, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) 37.230605914s ago: executing program 2 (id=1586): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c010000190001000000000000000000fc0200000000000000000000000000000000f2ffffffffffffff00000000000000000003000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000008000000000000000000000000000007000000000000000000000000000000000000000000000003000000000000000700000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000c4000500ac1414bb000000000000000000000000000000006c00000000000000ac141408000000000000000000500000000000000000ff00000000000000000001000000000000003200000000000000fe8000000000000000000000000000bb023500000000000000000000000000000000000020"], 0x17c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 37.194696999s ago: executing program 4 (id=1587): sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000842}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000008020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 36.841849925s ago: executing program 2 (id=1588): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20b00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8a38f0ff00000000bfa100000000000007010000f8fffff9bfa400000000000007040000f0ffc9ffbf1f0000084000001823000003ceab878af86f57fc7dcddb58a8c0c49327bb56d75775f21ea74ea79d45376054e9c4fa9f872efe72ef66", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x10000}, 0x1c) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r8, 0x545c, 0x0) 36.419386539s ago: executing program 4 (id=1589): syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b52, &(0x7f0000000180)="b52be39221") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0xf, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x20000000, 0x4, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x5}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3}]}, 0x78}}, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xd}, {0x480bd72125a0c189, 0xfff2}, {0xffe0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0xc0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 33.840461929s ago: executing program 2 (id=1592): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2, 0x0, &(0x7f0000000240)={0x0, 0xb, 0xe78a, 0x360}, 0x8, 0x80000000, 0x80, 0x0, 0x7, 0xfffffffd, 0x0}) 33.69102456s ago: executing program 2 (id=1593): r0 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) dup(r1) fsopen(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='cachefiles_link\x00', r5, 0x0, 0x7}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000010000000000000000000000000002000000000000000000000009020000000000"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r7, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) pread64(r0, &(0x7f0000000000)=""/220, 0xdc, 0x3) 33.68958991s ago: executing program 4 (id=1594): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003500)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffc}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x801, 0x7}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8050}, 0x20040054) 32.013054095s ago: executing program 2 (id=1596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20b00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8a38f0ff00000000bfa100000000000007010000f8fffff9bfa400000000000007040000f0ffc9ffbf1f0000084000001823000003ceab878af86f57fc7dcddb58a8c0c49327bb56d75775f21ea74ea79d45376054e9c4fa9f872efe72ef66", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x10000}, 0x1c) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 31.277389898s ago: executing program 4 (id=1598): r0 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) finit_module(r0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$kcm(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a01"], 0x14}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000003ebe000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000140028000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010004000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$uid(0x3, 0x0) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$can_j1939(r9, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000200)) io_uring_setup(0xf57, &(0x7f0000000100)={0x0, 0x8006cf6, 0x100, 0x0, 0x2ab, 0x0, r3}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req={0xffffffc0, 0xfd7b, 0x6, 0x8}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x18, 0x1}, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_genetlink_get_family_id$devlink(0x0, r9) 22.769161434s ago: executing program 5 (id=1611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/236], 0x154}}, 0x0) 22.471295825s ago: executing program 5 (id=1612): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 22.216079202s ago: executing program 3 (id=1613): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000"], 0x48) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffff2cbf92ffffff86dd600000ff00140600fe8000000000000000000000000000bbfe8800000000000000000000000000aa00", @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="50d900009078ffff"], 0x0) syz_emit_ethernet(0x1162, &(0x7f0000001b00)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @tcp={{0x33, 0x4, 0x2, 0x38, 0x1154, 0x66, 0x0, 0xce, 0x6, 0x0, @loopback, @remote, {[@cipso={0x86, 0x75, 0x3, [{0x0, 0xd, "033360ad980ec7869fcabb"}, {0x5, 0x3, ';'}, {0x0, 0x12, "8bc6c278b0486940355164dcfa96d1b4"}, {0x1, 0xa, "2ee76b168319ed86"}, {0x6, 0xd, "02801e6abe142d8410e0ba"}, {0x6, 0x5, "cdea89"}, {0x1, 0x12, "d1a06f2ffad7aa01f0af7897de3de0f9"}, {0x6, 0xc, "5a6b4f1e278098d4464b"}, {0x5, 0xf, "c1ace8089c0e5abc90fa7a970a"}, {0x5, 0x4, "b682"}]}, @cipso={0x86, 0x43, 0x0, [{0x0, 0xb, "46d090a3660cfa9b4e"}, {0x0, 0x10, "281f1e7f7c226465a9cd5ebcae2e"}, {0x2, 0x12, "25a5591ca5dcc6fb3689e376b2a8f37f"}, {0x5, 0x9, "f10789cd995c8f"}, {0x2, 0x7, "6fb7464664"}]}]}}, {{0x4e24, 0x4e21, 0x41424344, 0x41424344, 0x1, 0x0, 0x22, 0xc2, 0x6, 0x0, 0x80, {[@sack={0x5, 0x1e, [0x80000001, 0x8, 0x3, 0x400, 0x7fff, 0x8, 0x7]}, @fastopen={0x22, 0x7, "04b3d3d0fb"}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "bf47df5e9d6a85fca076ec7a13151611"}, @sack={0x5, 0x2a, [0x10000, 0x1, 0x1ff, 0x3, 0x5, 0x1, 0x8, 0x6, 0x3, 0x1]}, @eol, @timestamp={0x8, 0xa, 0x8, 0x9}]}}, {"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"}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x600, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) 22.088161734s ago: executing program 5 (id=1614): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa3e08004500fc7400000000000190780a010101ac1414aa05009078e00000e0460000000000000000110000ac1414aa02070300"], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) madvise(&(0x7f0000907000/0x1000)=nil, 0x1000, 0xb) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x200008, @loopback, 0x39}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x80fe, @empty}, 0x1c) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800e500fcffffff00000000ea75f01f7bd5ca2d2f086d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='iocost_ioc_vrate_adj\x00', r5}, 0x18) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000), 0x0) setfsuid(0xee01) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) 19.902331885s ago: executing program 5 (id=1615): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x100020000000}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x20000040) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) 19.231044685s ago: executing program 3 (id=1616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYRESHEX=r1, @ANYRES32], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) timerfd_create(0x7, 0x80000) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x22, &(0x7f00000001c0)=""/153, &(0x7f0000000080)=0x99) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000680)={0xa, 0x400, 0x1, @empty}, 0x1c) getpeername$inet6(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x0, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, &(0x7f0000000040)) 17.945473007s ago: executing program 3 (id=1617): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB], 0x34}}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x80) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r7, 0x1, 0x300, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc0c4) 17.796760403s ago: executing program 3 (id=1618): syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b52, &(0x7f0000000180)="b52be39221") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x20000000, 0x4, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x5}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x90}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x20, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0xd}, {0x480bd72125a0c189, 0xfff2}, {0xffe0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0xc0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 16.959733339s ago: executing program 34 (id=1596): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000f20b00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x5}, {@val={0x8, 0x3, 0xa}, @void, @void}}}, 0x1c}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8a38f0ff00000000bfa100000000000007010000f8fffff9bfa400000000000007040000f0ffc9ffbf1f0000084000001823000003ceab878af86f57fc7dcddb58a8c0c49327bb56d75775f21ea74ea79d45376054e9c4fa9f872efe72ef66", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x10000}, 0x1c) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) 16.871816867s ago: executing program 3 (id=1620): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 16.269038594s ago: executing program 3 (id=1621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0xc415, 0x40, 0x1, 0xe3, 0x3, [0xb4c, 0x7, 0x795fd568, 0x12]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @private0}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, 0x12, 0x6}, @sadb_address={0x3, 0x7, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x78}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000007c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcd\xbd\xb4\xb8G:Y\x05\f\x8f0k\xd0\x15\f\xa4\xe1Xb&\x95\xf1\xa6\xf9\xbef\xa8n\xceI\x04\x11\x19\xe2\xaa-yW\x8f3\xcaq\xdb\x9b\xff\\\x95\x9a\x94\xf2A(-\xd6\xa2\x0e\x7f\x8f\xf2#\x12\xc6\x1fL\xbd\x16p\bL(\xbc7xKIb)F\xa0J\xd6\xce\x05\xbe^\xd4>\xdb\x80G|\x00\x18Y\xc7\xf9\x81\xa5\xe7\x1f\xee\xc3\xfd\x88\x17\xcab\x1b\xc0O\x10\r\xa2\x06[\xbb\x02\xacW\xba\xed\x8e\xa6\xfa\x13\x8a\xf2\ad\xa7\xe1`m\xc4\xe1\xaa\x99\t\xb4\xf1OX\xf7\xc0\x9f\x7f\x9a\x15-M\xd5\x8e\x06z\xb5\x97\xa2xu!\x87\fXr&(\x9b\x17\t\x17\x94\'\xb3\xfe\x9b\xdf\x82\xbf2\r_x\x03\b\xc1\xd0~\f4\xae\xce@\xc1\xd2\xab(\x85\xdea\xf1cS\xc4\xe7\x986\xa6w\x1c\x92\xf4\x8c(\xb5\f\n#\x0fb\xa4t\xee3@\x81\xdf\x1d6z+|\xce \x81{\x15\"p#\xdb\xb7', 0x0, 0x0) request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) writev(r8, &(0x7f00000005c0)=[{0x0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 16.211166199s ago: executing program 35 (id=1598): r0 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) finit_module(r0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$kcm(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a01"], 0x14}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000003ebe000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000140028000000060a010400000000000000000100000008000b40000000000900010073797a3000000000140000001100010004000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioprio_get$uid(0x3, 0x0) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) bind$can_j1939(r9, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000200)) io_uring_setup(0xf57, &(0x7f0000000100)={0x0, 0x8006cf6, 0x100, 0x0, 0x2ab, 0x0, r3}) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000280)=@req={0xffffffc0, 0xfd7b, 0x6, 0x8}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x18, 0x1}, 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) syz_genetlink_get_family_id$devlink(0x0, r9) 15.630440892s ago: executing program 5 (id=1623): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 15.28539434s ago: executing program 5 (id=1624): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300080e00000000000000fedbdf2505001a00ff020000000000000000000000000001fc0100000000000000000000000000000a0010100200010000000000000000010005000500000000000a000000000000"], 0x70}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000280)={'vxcan1\x00', @ifru_addrs=@sco}) ioperm(0x0, 0x6, 0x2da3b9f3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES64], 0x44}}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r5}) close(r6) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000280)=0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 492.803022ms ago: executing program 36 (id=1621): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000100)={0xc415, 0x40, 0x1, 0xe3, 0x3, [0xb4c, 0x7, 0x795fd568, 0x12]}) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x2, 0x400000000000003, 0x0, 0x9, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffff, @private0}}, @sadb_x_filter={0x5, 0x1a, @in6=@rand_addr=' \x01\x00', @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x13, 0x12, 0x6}, @sadb_address={0x3, 0x7, 0x33, 0x80, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x78}}, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000007c0)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1\xcd\xbd\xb4\xb8G:Y\x05\f\x8f0k\xd0\x15\f\xa4\xe1Xb&\x95\xf1\xa6\xf9\xbef\xa8n\xceI\x04\x11\x19\xe2\xaa-yW\x8f3\xcaq\xdb\x9b\xff\\\x95\x9a\x94\xf2A(-\xd6\xa2\x0e\x7f\x8f\xf2#\x12\xc6\x1fL\xbd\x16p\bL(\xbc7xKIb)F\xa0J\xd6\xce\x05\xbe^\xd4>\xdb\x80G|\x00\x18Y\xc7\xf9\x81\xa5\xe7\x1f\xee\xc3\xfd\x88\x17\xcab\x1b\xc0O\x10\r\xa2\x06[\xbb\x02\xacW\xba\xed\x8e\xa6\xfa\x13\x8a\xf2\ad\xa7\xe1`m\xc4\xe1\xaa\x99\t\xb4\xf1OX\xf7\xc0\x9f\x7f\x9a\x15-M\xd5\x8e\x06z\xb5\x97\xa2xu!\x87\fXr&(\x9b\x17\t\x17\x94\'\xb3\xfe\x9b\xdf\x82\xbf2\r_x\x03\b\xc1\xd0~\f4\xae\xce@\xc1\xd2\xab(\x85\xdea\xf1cS\xc4\xe7\x986\xa6w\x1c\x92\xf4\x8c(\xb5\f\n#\x0fb\xa4t\xee3@\x81\xdf\x1d6z+|\xce \x81{\x15\"p#\xdb\xb7', 0x0, 0x0) request_key(&(0x7f0000000540)='user\x00', 0x0, &(0x7f0000000200)=',$:@^@,\x00', 0x0) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x98}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) writev(r8, &(0x7f00000005c0)=[{0x0}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 37 (id=1624): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$packet(0x11, 0x3, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300080e00000000000000fedbdf2505001a00ff020000000000000000000000000001fc0100000000000000000000000000000a0010100200010000000000000000010005000500000000000a000000000000"], 0x70}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8911, &(0x7f0000000280)={'vxcan1\x00', @ifru_addrs=@sco}) ioperm(0x0, 0x6, 0x2da3b9f3) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) r3 = socket$nl_route(0x10, 0x3, 0x0) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x2000, 0x103) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES64], 0x44}}, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c8098000", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r5}) close(r6) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000280)=0x8000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): gepages_surp=0 hugepages_size=2048kB [ 243.235611][ T7136] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 243.267849][ T7136] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 243.292585][ T7136] 41263 total pagecache pages [ 243.297445][ T7136] 0 pages in swap cache [ 243.301732][ T7136] Free swap = 124996kB [ 243.340943][ T7136] Total swap = 124996kB [ 243.440671][ T7136] 2097051 pages RAM [ 243.566039][ T7136] 0 pages HighMem/MovableOnly [ 243.608780][ T7136] 424338 pages reserved [ 243.702590][ T7136] 0 pages cma reserved [ 245.067993][ T7184] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 245.074665][ T7184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 245.141967][ T7184] vhci_hcd vhci_hcd.0: Device attached [ 245.631927][ T5907] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 245.701886][ T96] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 245.855414][ T5907] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 246.302186][ T5907] usb 3-1: can't read configurations, error -61 [ 246.359369][ T7193] vhci_hcd: connection reset by peer [ 246.383384][ T6043] vhci_hcd: stop threads [ 246.393845][ T6043] vhci_hcd: release socket [ 246.401387][ T6043] vhci_hcd: disconnect device [ 247.752125][ T5875] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 247.934266][ T5875] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 247.961265][ T5875] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 248.010872][ T5875] usb 4-1: config 0 has no interface number 0 [ 248.019146][ T5875] usb 4-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 248.064317][ T5875] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 248.139510][ T5875] usb 4-1: config 0 interface 52 has no altsetting 0 [ 248.188371][ T5875] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 248.197617][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 248.226800][ T5875] usb 4-1: Product: syz [ 248.231198][ T5875] usb 4-1: SerialNumber: syz [ 248.273071][ T5875] usb 4-1: config 0 descriptor?? [ 248.513757][ T7217] 9pnet_fd: Insufficient options for proto=fd [ 249.729330][ T7228] program syz.0.357 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 249.838563][ T5907] usb 4-1: USB disconnect, device number 4 [ 251.171986][ T96] vhci_hcd: vhci_device speed not set [ 251.360406][ T7228] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.425391][ T7228] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.431587][ T7228] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.439474][ T7228] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.446236][ T7228] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 252.186901][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 252.456419][ T7259] 9pnet_fd: Insufficient options for proto=fd [ 253.452214][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.452240][ T5140] Bluetooth: hci4: command 0x0c1a tx timeout [ 253.458625][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 253.464366][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.592564][ T7255] netlink: 104 bytes leftover after parsing attributes in process `syz.4.363'. [ 255.918999][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.919926][ T7294] lo speed is unknown, defaulting to 1000 [ 257.404796][ T7297] xt_socket: unknown flags 0xd0 [ 259.091580][ T7316] program syz.3.379 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.111707][ T7316] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.156703][ T7316] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.206504][ T7316] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 260.254114][ T7316] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 260.295647][ T7316] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 261.215093][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 262.166568][ T7347] loop2: detected capacity change from 0 to 7 [ 262.172957][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 262.196293][ T7347] Dev loop2: unable to read RDB block 7 [ 262.252555][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout [ 262.277562][ T7347] loop2: unable to read partition table [ 262.332147][ T5140] Bluetooth: hci4: command 0x0c1a tx timeout [ 262.338271][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.346110][ T7347] loop2: partition table beyond EOD, truncated [ 262.404783][ T7347] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 263.382432][ T7354] lo speed is unknown, defaulting to 1000 [ 264.798945][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 264.886431][ T7373] siw: device registration error -23 [ 265.672346][ T7384] program syz.0.399 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.744289][ T7397] lo speed is unknown, defaulting to 1000 [ 267.277241][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 267.583495][ T7384] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.589892][ T7384] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.889209][ T7384] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.938282][ T7384] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.978741][ T7384] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 268.016221][ T7384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 268.092034][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.164713][ T7414] loop2: detected capacity change from 0 to 7 [ 269.324419][ T7414] Dev loop2: unable to read RDB block 7 [ 269.343182][ T7414] loop2: unable to read partition table [ 269.355987][ T7414] loop2: partition table beyond EOD, truncated [ 269.394159][ T7414] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 269.746789][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 269.992039][ T48] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 270.014933][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout [ 270.021420][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 270.097823][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 270.247414][ T48] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 270.266625][ T48] usb 3-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 270.278282][ T48] usb 3-1: config 0 has no interface number 0 [ 270.289531][ T48] usb 3-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 270.304230][ T48] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.319610][ T48] usb 3-1: config 0 interface 52 has no altsetting 0 [ 270.336254][ T48] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 270.356809][ T48] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 270.375899][ T48] usb 3-1: Product: syz [ 270.382912][ T48] usb 3-1: SerialNumber: syz [ 270.402032][ T48] usb 3-1: config 0 descriptor?? [ 270.441945][ T5875] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 270.614281][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.642446][ T5875] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 270.674806][ T5875] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 270.685642][ T7431] loop6: detected capacity change from 0 to 524287999 [ 270.693644][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.708963][ T5875] usb 5-1: config 0 descriptor?? [ 270.720308][ T5875] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 270.923127][ T5875] dvb-usb: bulk message failed: -22 (3/0) [ 270.942800][ T5875] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 270.952430][ T5875] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 270.959696][ T5875] usb 5-1: media controller created [ 270.966973][ T5875] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.983387][ T5875] dvb-usb: bulk message failed: -22 (6/0) [ 270.990335][ T5875] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 271.020582][ T5875] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 271.771898][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.794102][ T5875] dvb-usb: schedule remote query interval to 150 msecs. [ 271.801209][ T5875] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 271.852552][ T5875] usb 5-1: USB disconnect, device number 8 [ 271.961268][ T5875] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 272.262256][ T48] usb 3-1: USB disconnect, device number 10 [ 272.274510][ T7439] xt_socket: unknown flags 0xd0 [ 272.930371][ T7443] xt_socket: unknown flags 0xd0 [ 274.661148][ T7469] loop6: detected capacity change from 0 to 524287999 [ 274.669991][ T7469] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.679729][ T7469] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 274.689280][ T7469] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 274.699887][ T7469] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 275.472972][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 275.801376][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 275.826278][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 275.850341][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 275.861490][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.891317][ T7474] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 275.950711][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 276.060081][ T7462] netlink: 104 bytes leftover after parsing attributes in process `syz.0.422'. [ 276.784809][ T96] usb 3-1: USB disconnect, device number 11 [ 277.271133][ T7490] rdma_rxe: rxe_newlink: failed to add lo [ 277.696791][ T7488] netlink: 'syz.3.429': attribute type 1 has an invalid length. [ 277.704708][ T7488] netlink: 224 bytes leftover after parsing attributes in process `syz.3.429'. [ 278.264377][ T7497] xt_socket: unknown flags 0xd0 [ 278.554654][ T7504] xt_socket: unknown flags 0xd0 [ 280.293992][ T7515] program syz.3.438 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.611053][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 280.686355][ T7522] siw: device registration error -23 [ 281.473710][ T7531] loop6: detected capacity change from 0 to 524287999 [ 281.483144][ T7531] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.492553][ T7531] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 281.502119][ T7531] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 281.511554][ T7531] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 281.600799][ T7515] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 281.613489][ T7515] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 281.630450][ T7515] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 281.696908][ T7515] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 281.733928][ T7515] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.722025][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout [ 283.539218][ T7553] xt_socket: unknown flags 0xd0 [ 283.692032][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout [ 283.698694][ T5140] Bluetooth: hci2: command 0x0c1a tx timeout [ 283.772514][ T5140] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.779129][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 284.407201][ T7568] netlink: 104 bytes leftover after parsing attributes in process `syz.3.452'. [ 284.512486][ T7567] siw: device registration error -23 [ 288.700307][ T7599] program syz.2.462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.892461][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 290.896246][ T7599] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 291.707806][ T7599] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.767715][ T7599] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.798480][ T7599] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 291.866885][ T7599] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.832353][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.471'. [ 292.991382][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 294.238494][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 294.245178][ T5140] Bluetooth: hci4: command 0x0c1a tx timeout [ 294.251595][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 295.333769][ T7648] loop6: detected capacity change from 0 to 524287999 [ 295.342059][ T7648] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.351360][ T7648] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 295.360967][ T7648] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 295.370730][ T7648] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 296.378911][ T7651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.476'. [ 296.437002][ T7651] vlan1: entered promiscuous mode [ 296.516764][ T7651] team0: entered promiscuous mode [ 296.555825][ T7651] team_slave_0: entered promiscuous mode [ 296.581949][ T7651] team_slave_1: entered promiscuous mode [ 296.647586][ T7655] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 296.682116][ T7655] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 296.690751][ T7655] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 297.914099][ T7666] program syz.2.481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 298.079867][ T7674] netlink: 16 bytes leftover after parsing attributes in process `syz.3.480'. [ 300.307604][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 300.324016][ T7666] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 300.522593][ T7691] rdma_rxe: rxe_newlink: failed to add lo [ 301.002085][ T7691] netlink: 'syz.0.485': attribute type 1 has an invalid length. [ 301.009956][ T7691] netlink: 224 bytes leftover after parsing attributes in process `syz.0.485'. [ 301.317834][ T7666] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 301.340691][ T7666] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.376430][ T7666] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 301.392269][ T7666] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.663639][ T7700] xt_socket: unknown flags 0xd0 [ 302.331921][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 302.724849][ T7710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.489'. [ 302.736970][ T7711] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 302.784218][ T7711] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 302.800284][ T7710] vlan1: entered promiscuous mode [ 302.817144][ T7711] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 302.828325][ T7710] team0: entered promiscuous mode [ 302.866414][ T7710] team_slave_0: entered promiscuous mode [ 302.879242][ T7710] team_slave_1: entered promiscuous mode [ 303.382358][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 303.492105][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 303.498322][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 304.917664][ T7735] program syz.3.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.080036][ T7738] rdma_rxe: rxe_newlink: failed to add lo [ 305.098147][ T7738] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 305.106092][ T7738] netlink: 224 bytes leftover after parsing attributes in process `syz.2.496'. [ 305.809702][ T7735] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 305.857957][ T7735] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 305.885447][ T7735] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 305.915890][ T7735] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 306.912377][ T7735] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 307.532255][ T5140] Bluetooth: hci0: command 0x0c1a tx timeout [ 307.544760][ T7759] program syz.4.503 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 307.933164][ T5140] Bluetooth: hci4: command 0x0c1a tx timeout [ 307.938068][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 307.939403][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 308.971998][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 309.303128][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 309.313289][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 309.378620][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 309.388612][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 309.401870][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 309.443124][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 309.462060][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 309.504308][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 309.551155][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.507'. [ 309.699873][ T7786] sctp: [Deprecated]: syz.0.509 (pid 7786) Use of int in maxseg socket option. [ 309.699873][ T7786] Use struct sctp_assoc_value instead [ 310.665159][ T7797] rdma_rxe: rxe_newlink: failed to add lo [ 310.682401][ T7797] netlink: 'syz.1.511': attribute type 1 has an invalid length. [ 310.690508][ T7797] __nla_validate_parse: 36 callbacks suppressed [ 310.690545][ T7797] netlink: 224 bytes leftover after parsing attributes in process `syz.1.511'. [ 311.337499][ T7800] xt_socket: unknown flags 0xd0 [ 312.803932][ T7816] sctp: [Deprecated]: syz.0.518 (pid 7816) Use of int in maxseg socket option. [ 312.803932][ T7816] Use struct sctp_assoc_value instead [ 313.190869][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.518'. [ 314.055001][ T7841] program syz.0.525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.156372][ T7844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.524'. [ 314.920382][ T7841] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 314.937357][ T7841] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 314.977864][ T7841] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.050240][ T7841] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 315.096315][ T7841] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 316.012082][ T96] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 316.177355][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 316.251881][ T96] usb 4-1: Using ep0 maxpacket: 8 [ 316.260588][ T96] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.271867][ T96] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 316.289968][ T96] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 316.306170][ T96] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.336138][ T96] usb 4-1: Product: syz [ 316.340382][ T96] usb 4-1: Manufacturer: syz [ 316.360224][ T96] usb 4-1: SerialNumber: syz [ 316.473075][ T96] usb 4-1: config 0 descriptor?? [ 317.024672][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 317.315897][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 317.327320][ T5140] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.333557][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.479395][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.371891][ T7880] lo speed is unknown, defaulting to 1000 [ 318.934993][ T96] usb 4-1: USB disconnect, device number 5 [ 318.937489][ T7883] xt_socket: unknown flags 0xd0 [ 319.393405][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.0.535'. [ 319.659469][ T7879] vlan2: entered promiscuous mode [ 319.776129][ T7899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.538'. [ 320.537454][ T7879] bond0: entered promiscuous mode [ 320.543184][ T7879] bond_slave_0: entered promiscuous mode [ 320.549083][ T7879] bond_slave_1: entered promiscuous mode [ 321.231548][ T7917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 321.304154][ T7917] siw: device registration error -23 [ 323.176129][ T7933] lo speed is unknown, defaulting to 1000 [ 324.012632][ T7940] xt_socket: unknown flags 0xd0 [ 324.031905][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 324.271950][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 324.356276][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.358301][ T7943] netlink: zone id is out of range [ 324.400149][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 324.427006][ T7943] netlink: zone id is out of range [ 324.451975][ T7943] netlink: zone id is out of range [ 324.456136][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 324.457175][ T7943] netlink: zone id is out of range [ 324.457187][ T7943] netlink: zone id is out of range [ 324.457196][ T7943] netlink: zone id is out of range [ 324.457205][ T7943] netlink: zone id is out of range [ 324.474079][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.528761][ T24] usb 3-1: Product: syz [ 324.533559][ T7943] netlink: zone id is out of range [ 324.565856][ T7943] netlink: zone id is out of range [ 324.571731][ T7943] netlink: zone id is out of range [ 324.601983][ T24] usb 3-1: Manufacturer: syz [ 324.606650][ T24] usb 3-1: SerialNumber: syz [ 324.645428][ T24] usb 3-1: config 0 descriptor?? [ 324.757675][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.552'. [ 325.040807][ T24] usb 3-1: USB disconnect, device number 12 [ 325.635579][ T7957] loop6: detected capacity change from 0 to 524287999 [ 325.644186][ T7957] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.653732][ T7957] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.663147][ T7957] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 325.672602][ T7957] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 326.408234][ T7963] netlink: 60 bytes leftover after parsing attributes in process `syz.1.555'. [ 326.784510][ T7963] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 328.102616][ T7976] sctp: [Deprecated]: syz.3.558 (pid 7976) Use of int in maxseg socket option. [ 328.102616][ T7976] Use struct sctp_assoc_value instead [ 328.136071][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.558'. [ 329.902636][ T7990] lo speed is unknown, defaulting to 1000 [ 331.841880][ T5876] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 331.878664][ T8014] loop6: detected capacity change from 0 to 524287999 [ 331.952709][ T8013] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.962546][ T8013] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 331.972003][ T8013] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 331.981708][ T8013] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 332.412007][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 332.594305][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.603613][ T8020] rdma_rxe: rxe_newlink: failed to add lo [ 332.827445][ T5876] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 332.839380][ T5876] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 332.861854][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.871425][ T5876] usb 4-1: Product: syz [ 332.880137][ T5876] usb 4-1: Manufacturer: syz [ 332.885289][ T5876] usb 4-1: SerialNumber: syz [ 332.910028][ T5876] usb 4-1: config 0 descriptor?? [ 333.283379][ T8022] lo speed is unknown, defaulting to 1000 [ 334.210040][ T8030] xt_socket: unknown flags 0xd0 [ 334.322582][ T96] usb 4-1: USB disconnect, device number 6 [ 334.955067][ T8037] sctp: [Deprecated]: syz.0.575 (pid 8037) Use of int in maxseg socket option. [ 334.955067][ T8037] Use struct sctp_assoc_value instead [ 335.129832][ T8041] xt_socket: unknown flags 0xd0 [ 335.219732][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 336.099773][ T8050] lo speed is unknown, defaulting to 1000 [ 337.346903][ T8067] netlink: 60 bytes leftover after parsing attributes in process `syz.3.581'. [ 338.001354][ T8067] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 339.974810][ T8086] netlink: 'syz.2.589': attribute type 72 has an invalid length. [ 339.996226][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'. [ 340.853214][ T5907] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 341.129243][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 341.230201][ T5907] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.260019][ T5907] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 341.324870][ T5907] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 341.523072][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.234179][ T5907] usb 1-1: Product: syz [ 342.239523][ T5907] usb 1-1: Manufacturer: syz [ 342.245106][ T5907] usb 1-1: SerialNumber: syz [ 342.248473][ T8100] xt_socket: unknown flags 0xd0 [ 342.254161][ T5907] usb 1-1: config 0 descriptor?? [ 343.785954][ T96] usb 1-1: USB disconnect, device number 9 [ 344.521666][ T8121] netlink: 60 bytes leftover after parsing attributes in process `syz.3.596'. [ 344.985727][ T8121] 8021q: adding VLAN 0 to HW filter on device bond3 [ 345.510034][ T8126] block device autoloading is deprecated and will be removed. [ 345.721374][ T8127] lo speed is unknown, defaulting to 1000 [ 347.543723][ T8147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'. [ 349.115205][ T8157] xt_socket: unknown flags 0xd0 [ 350.667272][ T8168] rdma_rxe: rxe_newlink: failed to add bond0 [ 351.412091][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.610'. [ 351.578947][ T8176] sctp: [Deprecated]: syz.0.609 (pid 8176) Use of int in maxseg socket option. [ 351.578947][ T8176] Use struct sctp_assoc_value instead [ 351.596030][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 351.778417][ T8178] netlink: 60 bytes leftover after parsing attributes in process `syz.2.611'. [ 352.352470][ T8178] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 352.580833][ T8183] net_ratelimit: 161 callbacks suppressed [ 352.580849][ T8183] netlink: del zone limit has 8 unknown bytes [ 353.775793][ T8191] rdma_rxe: rxe_newlink: failed to add lo [ 353.940967][ T8191] netlink: 'syz.3.608': attribute type 1 has an invalid length. [ 353.948860][ T8191] netlink: 224 bytes leftover after parsing attributes in process `syz.3.608'. [ 354.144728][ T8198] program syz.4.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 355.400024][ T8211] rdma_rxe: rxe_newlink: failed to add lo [ 355.451657][ T8211] netlink: 'syz.2.620': attribute type 1 has an invalid length. [ 355.459493][ T8211] netlink: 224 bytes leftover after parsing attributes in process `syz.2.620'. [ 356.043935][ T8198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 356.072315][ T8198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.078940][ T8198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.093178][ T8198] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 356.100769][ T8198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.356349][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.384399][ T8218] xt_socket: unknown flags 0xd0 [ 357.463755][ T8224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.623'. [ 357.526038][ T8221] 8021q: adding VLAN 0 to HW filter on device bond4 [ 357.790670][ T8228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.625'. [ 358.158920][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 358.165712][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.172681][ T5140] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.179131][ T5833] Bluetooth: hci4: command 0x0c1a tx timeout [ 361.702640][ T8255] loop2: detected capacity change from 0 to 7 [ 361.730393][ T8255] Dev loop2: unable to read RDB block 7 [ 361.741487][ T8255] loop2: AHDI p1 p2 p3 [ 361.751583][ T8255] loop2: partition table partially beyond EOD, truncated [ 362.372304][ T8255] loop2: p1 start 1601398130 is beyond EOD, truncated [ 362.412016][ T8255] loop2: p2 start 1702059890 is beyond EOD, truncated [ 362.833612][ T8277] xt_socket: unknown flags 0xd0 [ 364.604887][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 364.610253][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 365.048558][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.644'. [ 365.172738][ T8301] program syz.3.646 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.342168][ T8308] netlink: 104 bytes leftover after parsing attributes in process `syz.2.649'. [ 366.700203][ T8301] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 366.752909][ T8301] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 366.792195][ T8301] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 366.875934][ T8301] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 367.007323][ T8324] xt_socket: unknown flags 0xd0 [ 367.058186][ T8301] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 367.291941][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.644901][ T8328] xt_socket: unknown flags 0xd0 [ 368.142738][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 368.200176][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 368.282857][ T8335] siw: device registration error -23 [ 368.409517][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.660'. [ 368.822676][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 368.829042][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 368.892425][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 369.191956][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 369.462839][ T8350] loop2: detected capacity change from 0 to 7 [ 369.822445][ T5839] Dev loop2: unable to read RDB block 7 [ 369.829729][ T5839] loop2: AHDI p1 p2 p3 [ 369.835124][ T5839] loop2: partition table partially beyond EOD, truncated [ 369.842785][ T5839] loop2: p1 start 1601398130 is beyond EOD, truncated [ 369.855087][ T5839] loop2: p2 start 1702059890 is beyond EOD, truncated [ 370.333665][ T8350] Dev loop2: unable to read RDB block 7 [ 370.350241][ T8350] loop2: AHDI p1 p2 p3 [ 370.381183][ T8350] loop2: partition table partially beyond EOD, truncated [ 370.432602][ T8350] loop2: p1 start 1601398130 is beyond EOD, truncated [ 370.439446][ T8350] loop2: p2 start 1702059890 is beyond EOD, truncated [ 371.088379][ T8369] netlink: 60 bytes leftover after parsing attributes in process `syz.0.666'. [ 371.479134][ T8369] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 371.702609][ T8371] xt_socket: unknown flags 0xd0 [ 372.416101][ T8379] program syz.3.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.947855][ T8388] rdma_rxe: rxe_newlink: failed to add lo [ 373.487125][ T8385] netlink: 'syz.0.671': attribute type 1 has an invalid length. [ 373.494970][ T8385] netlink: 224 bytes leftover after parsing attributes in process `syz.0.671'. [ 374.744169][ T8379] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 374.809329][ T8379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.855896][ T8379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.581885][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 375.698678][ T8379] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 375.734339][ T8379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 376.834352][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 376.892082][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 377.467906][ T8415] rdma_rxe: rxe_newlink: failed to add bond0 [ 378.009892][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 378.097171][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.285065][ T8419] loop2: detected capacity change from 0 to 7 [ 378.328900][ T5839] Dev loop2: unable to read RDB block 7 [ 378.368907][ T5839] loop2: AHDI p1 p2 p3 [ 378.383861][ T5839] loop2: partition table partially beyond EOD, truncated [ 378.762923][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.242591][ T5839] loop2: p1 start 1601398130 is beyond EOD, truncated [ 379.250141][ T5839] loop2: p2 start 1702059890 is beyond EOD, truncated [ 380.362819][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.683'. [ 382.150358][ T8453] lo speed is unknown, defaulting to 1000 [ 383.395173][ T8469] netlink: 'syz.4.690': attribute type 1 has an invalid length. [ 384.762469][ T8459] sctp: [Deprecated]: syz.0.689 (pid 8459) Use of int in maxseg socket option. [ 384.762469][ T8459] Use struct sctp_assoc_value instead [ 384.887155][ T8477] loop2: detected capacity change from 0 to 7 [ 384.909635][ T5839] Dev loop2: unable to read RDB block 7 [ 384.929283][ T5839] loop2: AHDI p1 p2 p3 [ 384.981892][ T5839] loop2: partition table partially beyond EOD, truncated [ 385.003355][ T5839] loop2: p1 start 1601398130 is beyond EOD, truncated [ 385.010663][ T5839] loop2: p2 start 1702059890 is beyond EOD, truncated [ 385.028440][ T8477] Dev loop2: unable to read RDB block 7 [ 385.120142][ T8477] loop2: AHDI p1 p2 p3 [ 385.141930][ T8477] loop2: partition table partially beyond EOD, truncated [ 385.322170][ T8477] loop2: p1 start 1601398130 is beyond EOD, truncated [ 385.346617][ T8477] loop2: p2 start 1702059890 is beyond EOD, truncated [ 386.138191][ T8489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 386.251693][ T8489] siw: device registration error -23 [ 386.375821][ T8502] xt_socket: unknown flags 0xd0 [ 388.625218][ T8514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 388.839471][ T8514] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 389.157884][ T8538] lo speed is unknown, defaulting to 1000 [ 389.678049][ T8514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 389.730969][ T8514] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 389.769524][ T8514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 389.785369][ T8514] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 389.902963][ T8514] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 389.944233][ T8514] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 390.152904][ T8514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 390.166339][ T8514] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 390.266490][ T8548] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 392.591494][ T5876] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 393.398423][ T5876] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 393.586839][ T5876] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 393.639947][ T5876] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 393.700617][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.835198][ T8564] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 393.846512][ T5876] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.102585][ T5876] usb 4-1: USB disconnect, device number 7 [ 394.513349][ T6519] udevd[6519]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.851234][ T8601] rdma_rxe: rxe_newlink: failed to add lo [ 394.867983][ T8601] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 394.875899][ T8601] netlink: 224 bytes leftover after parsing attributes in process `syz.0.721'. [ 395.646172][ T8605] loop2: detected capacity change from 0 to 7 [ 395.693237][ T8605] Dev loop2: unable to read RDB block 7 [ 395.721921][ T8605] loop2: unable to read partition table [ 395.756681][ T8605] loop2: partition table beyond EOD, truncated [ 395.809921][ T8605] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 395.830262][ T8609] sctp: [Deprecated]: syz.3.723 (pid 8609) Use of int in maxseg socket option. [ 395.830262][ T8609] Use struct sctp_assoc_value instead [ 397.806481][ T8653] netlink: 80 bytes leftover after parsing attributes in process `syz.4.729'. [ 399.204122][ T8660] xt_socket: unknown flags 0xd0 [ 402.398565][ T8705] lo speed is unknown, defaulting to 1000 [ 402.895900][ T8703] sctp: [Deprecated]: syz.2.739 (pid 8703) Use of int in maxseg socket option. [ 402.895900][ T8703] Use struct sctp_assoc_value instead [ 403.318247][ T8719] netlink: 60 bytes leftover after parsing attributes in process `syz.4.743'. [ 404.481292][ T8732] xt_socket: unknown flags 0xd0 [ 404.994065][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.4.751'. [ 406.532226][ T8777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.750'. [ 407.451889][ T8790] netlink: 60 bytes leftover after parsing attributes in process `syz.2.757'. [ 408.448721][ T8803] xt_socket: unknown flags 0xd0 [ 409.571284][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.763'. [ 410.236750][ T8817] tipc: Started in network mode [ 410.266286][ T8817] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 410.287285][ T8817] tipc: Enabled bearer , priority 27 [ 411.239160][ T8833] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 411.754508][ T96] tipc: Node number set to 8432298 [ 412.712365][ T8846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'. [ 413.774273][ T8841] netlink: 20 bytes leftover after parsing attributes in process `syz.2.774'. [ 414.439082][ T8841] vlan2: entered promiscuous mode [ 414.522489][ T8841] bond0: entered promiscuous mode [ 414.527602][ T8841] bond_slave_0: entered promiscuous mode [ 414.542121][ T8841] bond_slave_1: entered promiscuous mode [ 415.688136][ T8854] lo speed is unknown, defaulting to 1000 [ 417.124118][ T8869] sctp: [Deprecated]: syz.2.780 (pid 8869) Use of int in maxseg socket option. [ 417.124118][ T8869] Use struct sctp_assoc_value instead [ 418.491685][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.786'. [ 419.711803][ T96] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 419.833404][ T8909] netlink: 32 bytes leftover after parsing attributes in process `syz.4.792'. [ 419.869397][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.0.789'. [ 419.944032][ T96] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 420.590142][ T96] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 420.600171][ T96] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 420.609377][ T96] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.652443][ T8899] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 420.724480][ T8906] vlan3: entered promiscuous mode [ 420.729625][ T8906] team0: entered promiscuous mode [ 420.735010][ T8906] team_slave_0: entered promiscuous mode [ 420.740939][ T8906] team_slave_1: entered promiscuous mode [ 420.756503][ T96] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.017131][ T5887] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 422.070788][ T5907] usb 3-1: USB disconnect, device number 13 [ 422.217959][ T5887] usb 5-1: Using ep0 maxpacket: 16 [ 422.293604][ T5887] usb 5-1: unable to get BOS descriptor or descriptor too short [ 422.322384][ T5887] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 422.341874][ T5887] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 422.380074][ T5887] usb 5-1: config 1 interface 0 has no altsetting 0 [ 422.408589][ T5887] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 422.417906][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.426584][ T5887] usb 5-1: Product: syz [ 422.430790][ T5887] usb 5-1: Manufacturer: syz [ 422.436704][ T5887] usb 5-1: SerialNumber: syz [ 423.933117][ T8945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.800'. [ 424.620677][ T8949] rdma_rxe: rxe_newlink: failed to add lo [ 424.986202][ T8949] netlink: 'syz.3.801': attribute type 1 has an invalid length. [ 424.994083][ T8949] netlink: 224 bytes leftover after parsing attributes in process `syz.3.801'. [ 426.907233][ T8965] 9pnet_fd: Insufficient options for proto=fd [ 427.282752][ T8971] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 427.306315][ T8971] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 427.338390][ T8971] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 427.349786][ T5887] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 427.376556][ T5887] usb 5-1: USB disconnect, device number 9 [ 431.100559][ T9009] loop2: detected capacity change from 0 to 7 [ 431.176950][ T5831] Dev loop2: unable to read RDB block 7 [ 431.195834][ T5831] loop2: unable to read partition table [ 431.221636][ T5831] loop2: partition table beyond EOD, truncated [ 431.247164][ T9009] Dev loop2: unable to read RDB block 7 [ 431.292042][ T9009] loop2: unable to read partition table [ 431.308697][ T9009] loop2: partition table beyond EOD, truncated [ 431.335178][ T9009] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 431.504414][ T5200] Dev loop2: unable to read RDB block 7 [ 431.532314][ T5200] loop2: unable to read partition table [ 431.539382][ T5200] loop2: partition table beyond EOD, truncated [ 431.853053][ T9019] lo speed is unknown, defaulting to 1000 [ 432.379940][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.824'. [ 433.767702][ T9042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.828'. [ 435.762890][ T9055] xt_socket: unknown flags 0xd0 [ 436.394377][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.835'. [ 437.533333][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.840'. [ 439.390105][ T9082] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 439.414155][ T9089] program syz.1.845 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.481051][ T9091] 9pnet_fd: Insufficient options for proto=fd [ 440.261628][ T9107] rdma_rxe: rxe_newlink: failed to add lo [ 440.452598][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.490047][ T9105] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 440.675884][ T9107] netlink: 'syz.2.846': attribute type 1 has an invalid length. [ 440.683744][ T9107] netlink: 224 bytes leftover after parsing attributes in process `syz.2.846'. [ 440.742307][ T9105] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 440.961889][ T9105] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 441.478415][ T9116] xt_socket: unknown flags 0xd0 [ 441.621136][ T9118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.853'. [ 442.023187][ T9122] netlink: 'syz.0.849': attribute type 1 has an invalid length. [ 444.193746][ T9133] rdma_rxe: rxe_newlink: failed to add lo [ 444.356507][ T9135] 9pnet_fd: Insufficient options for proto=fd [ 444.564737][ T9133] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 444.572715][ T9133] netlink: 224 bytes leftover after parsing attributes in process `syz.2.855'. [ 445.856783][ T9147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 446.302710][ T9155] rdma_rxe: rxe_newlink: failed to add bond0 [ 446.995633][ T9117] syz.3.853: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 447.018301][ T9117] CPU: 0 UID: 0 PID: 9117 Comm: syz.3.853 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 447.018323][ T9117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 447.018336][ T9117] Call Trace: [ 447.018345][ T9117] [ 447.018351][ T9117] dump_stack_lvl+0x189/0x250 [ 447.018381][ T9117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.018404][ T9117] ? __pfx__printk+0x10/0x10 [ 447.018420][ T9117] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 447.018446][ T9117] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 447.018472][ T9117] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 447.018498][ T9117] warn_alloc+0x214/0x310 [ 447.018520][ T9117] ? __pfx_warn_alloc+0x10/0x10 [ 447.018542][ T9117] ? __get_vm_area_node+0x1c5/0x2d0 [ 447.018556][ T9117] ? __get_vm_area_node+0x25a/0x2d0 [ 447.018575][ T9117] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 447.018612][ T9117] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.018628][ T9117] ? __kasan_kmalloc_large+0x1a/0xa0 [ 447.018653][ T9117] ? rcu_is_watching+0x15/0xb0 [ 447.018683][ T9117] ? nf_tables_newset+0x132b/0x2530 [ 447.018703][ T9117] ? nf_tables_newset+0x132b/0x2530 [ 447.018721][ T9117] __kvmalloc_node_noprof+0x3a0/0x5e0 [ 447.018736][ T9117] ? nf_tables_newset+0x132b/0x2530 [ 447.018756][ T9117] ? nft_table_lookup+0x211/0x230 [ 447.018775][ T9117] ? nft_set_lookup+0x128/0x150 [ 447.018796][ T9117] ? nft_hash_privsize+0x7f/0xf0 [ 447.018815][ T9117] nf_tables_newset+0x132b/0x2530 [ 447.018844][ T9117] ? __pfx_nf_tables_newset+0x10/0x10 [ 447.018880][ T9117] ? __nla_parse+0x40/0x60 [ 447.018906][ T9117] nfnetlink_rcv+0x113f/0x2530 [ 447.018953][ T9117] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 447.019011][ T9117] ? skb_clone+0x246/0x3a0 [ 447.019035][ T9117] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.019053][ T9117] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.019076][ T9117] netlink_unicast+0x758/0x8d0 [ 447.019100][ T9117] netlink_sendmsg+0x805/0xb30 [ 447.019126][ T9117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.019151][ T9117] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.019167][ T9117] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.019193][ T9117] __sock_sendmsg+0x219/0x270 [ 447.019211][ T9117] ____sys_sendmsg+0x505/0x830 [ 447.019237][ T9117] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.019266][ T9117] ? import_iovec+0x74/0xa0 [ 447.019285][ T9117] ___sys_sendmsg+0x21f/0x2a0 [ 447.019308][ T9117] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.019356][ T9117] ? __fget_files+0x2a/0x420 [ 447.019369][ T9117] ? __fget_files+0x3a0/0x420 [ 447.019391][ T9117] __x64_sys_sendmsg+0x19b/0x260 [ 447.019414][ T9117] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.019449][ T9117] ? do_syscall_64+0xba/0x210 [ 447.019472][ T9117] do_syscall_64+0xf6/0x210 [ 447.019491][ T9117] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 447.019506][ T9117] ? clear_bhb_loop+0x45/0xa0 [ 447.019524][ T9117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.019538][ T9117] RIP: 0033:0x7fa282d8e969 [ 447.019551][ T9117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.019564][ T9117] RSP: 002b:00007fa283ce0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.019579][ T9117] RAX: ffffffffffffffda RBX: 00007fa282fb5fa0 RCX: 00007fa282d8e969 [ 447.019590][ T9117] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 447.019599][ T9117] RBP: 00007fa282e10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 447.019608][ T9117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.019616][ T9117] R13: 0000000000000000 R14: 00007fa282fb5fa0 R15: 00007ffe047b3b88 [ 447.019638][ T9117] [ 447.019648][ T9117] Mem-Info: [ 447.222137][ T5907] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 447.774175][ T9117] active_anon:318 inactive_anon:8199 isolated_anon:0 [ 447.774175][ T9117] active_file:14547 inactive_file:40802 isolated_file:0 [ 447.774175][ T9117] unevictable:768 dirty:235 writeback:0 [ 447.774175][ T9117] slab_reclaimable:10042 slab_unreclaimable:99004 [ 447.774175][ T9117] mapped:32114 shmem:4259 pagetables:932 [ 447.774175][ T9117] sec_pagetables:0 bounce:0 [ 447.774175][ T9117] kernel_misc_reclaimable:0 [ 447.774175][ T9117] free:1320591 free_pcp:2032 free_cma:0 [ 447.823245][ T9164] rdma_rxe: rxe_newlink: failed to add lo [ 447.831019][ T9164] netlink: 'syz.2.862': attribute type 1 has an invalid length. [ 447.838706][ T9164] netlink: 224 bytes leftover after parsing attributes in process `syz.2.862'. [ 447.902325][ T9117] Node 0 active_anon:1272kB inactive_anon:32896kB active_file:58116kB inactive_file:163208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128556kB dirty:936kB writeback:0kB shmem:15500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11504kB pagetables:3832kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 447.946544][ T9167] xt_socket: unknown flags 0xd0 [ 447.959625][ T9117] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 448.428342][ T9117] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 448.456126][ T9117] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 448.462304][ T9117] Node 0 DMA32 free:1364520kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:12672kB inactive_anon:21556kB active_file:58024kB inactive_file:163196kB unevictable:1536kB writepending:936kB present:3129332kB managed:2564216kB mlocked:0kB bounce:0kB free_pcp:3140kB local_pcp:2828kB free_cma:0kB [ 448.493544][ T9117] lowmem_reserve[]: 0 0 0 0 0 [ 448.498455][ T9117] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 448.627585][ T5907] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 448.636025][ T5907] usb 5-1: can't read configurations, error -71 [ 448.648715][ T9117] lowmem_reserve[]: 0 0 0 0 0 [ 448.852536][ T9117] Node 1 Normal free:3907420kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 448.882977][ T9117] lowmem_reserve[]: 0 0 0 0 0 [ 449.022605][ T9175] xt_socket: unknown flags 0xd0 [ 449.092034][ T9117] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 449.146355][ T9117] Node 0 DMA32: 1*4kB (E) 4*8kB (UME) 738*16kB (UME) 894*32kB (UME) 587*64kB (UM) 265*128kB (UME) 166*256kB (UM) 110*512kB (UM) 78*1024kB (UME) 14*2048kB (UME) 254*4096kB (UM) = 1359684kB [ 449.192494][ T9117] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 449.445613][ T9117] Node 1 Normal: 239*4kB (UM) 54*8kB (UME) 41*16kB (UME) 227*32kB (UME) 112*64kB (UME) 34*128kB (UME) 10*256kB (UM) 10*512kB (UME) 2*1024kB (UM) 3*2048kB (U) 945*4096kB (M) = 3907420kB [ 449.513797][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.523804][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.533741][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.543586][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.553376][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.563923][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.573666][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.583196][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.596412][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.606218][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.616232][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.626013][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.635751][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.645506][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.675129][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.685837][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.695697][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 449.820388][ T9117] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 449.865528][ T9117] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 449.902311][ T9117] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 449.916573][ T9117] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 449.930119][ T9117] 62485 total pagecache pages [ 449.938036][ T9117] 0 pages in swap cache [ 449.943232][ T9117] Free swap = 124996kB [ 449.947429][ T9117] Total swap = 124996kB [ 449.955121][ T9117] 2097051 pages RAM [ 449.958974][ T9117] 0 pages HighMem/MovableOnly [ 449.964712][ T9117] 424338 pages reserved [ 449.968998][ T9117] 0 pages cma reserved [ 451.049223][ T9203] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 451.137265][ T9203] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 451.340990][ T9203] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 452.496285][ T9221] lo speed is unknown, defaulting to 1000 [ 454.353244][ T9255] loop6: detected capacity change from 0 to 524287999 [ 454.999889][ T9264] rdma_rxe: rxe_newlink: failed to add lo [ 455.115819][ T9264] netlink: 'syz.0.886': attribute type 1 has an invalid length. [ 455.123721][ T9264] __nla_validate_parse: 28 callbacks suppressed [ 455.123739][ T9264] netlink: 224 bytes leftover after parsing attributes in process `syz.0.886'. [ 455.911428][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 458.450986][ T9288] lo speed is unknown, defaulting to 1000 [ 460.922108][ T9315] sctp: [Deprecated]: syz.3.906 (pid 9315) Use of int in maxseg socket option. [ 460.922108][ T9315] Use struct sctp_assoc_value instead [ 461.065279][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 461.879313][ T9326] lo speed is unknown, defaulting to 1000 [ 463.108678][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 465.807503][ T9354] netlink: 60 bytes leftover after parsing attributes in process `syz.0.915'. [ 466.147686][ T9346] lo speed is unknown, defaulting to 1000 [ 467.938532][ T9377] sctp: [Deprecated]: syz.2.920 (pid 9377) Use of int in maxseg socket option. [ 467.938532][ T9377] Use struct sctp_assoc_value instead [ 467.960099][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.920'. [ 467.985351][ T9379] lo speed is unknown, defaulting to 1000 [ 468.616689][ T9389] rdma_rxe: rxe_newlink: failed to add bond0 [ 469.318108][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.928'. [ 469.511571][ T9396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.926'. [ 469.545449][ T9399] siw: device registration error -23 [ 470.769939][ T9407] program syz.2.931 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.418588][ T9410] lo speed is unknown, defaulting to 1000 [ 472.494608][ T9418] lo speed is unknown, defaulting to 1000 [ 475.704451][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 475.772158][ T5907] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 476.271875][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 476.330503][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 476.401036][ T5907] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 476.418470][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.943'. [ 476.498784][ T5907] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.650130][ T5907] usb 3-1: config 1 interface 0 has no altsetting 0 [ 476.692293][ T9461] program syz.1.945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 477.025882][ T5907] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 477.047184][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.944'. [ 477.080609][ T9464] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(15) [ 477.087290][ T9464] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 477.124410][ T9464] vhci_hcd vhci_hcd.0: Device attached [ 477.338385][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.421414][ T5907] usb 3-1: Product: syz [ 477.427638][ T5907] usb 3-1: Manufacturer: syz [ 477.432524][ T5907] usb 3-1: SerialNumber: syz [ 477.612145][ T96] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 477.642248][ T5887] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 477.831497][ T96] usb 5-1: config 0 has no interfaces? [ 477.837213][ T96] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 477.846969][ T96] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.864201][ T96] usb 5-1: config 0 descriptor?? [ 478.151566][ T9470] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 478.157893][ T36] vhci_hcd: stop threads [ 478.157944][ T36] vhci_hcd: release socket [ 478.157993][ T36] vhci_hcd: disconnect device [ 478.182393][ T9477] loop2: detected capacity change from 0 to 7 [ 478.202377][ T9477] Dev loop2: unable to read RDB block 7 [ 478.202464][ T9477] loop2: unable to read partition table [ 478.202681][ T9477] loop2: partition table beyond EOD, truncated [ 478.202738][ T9477] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 478.847009][ T96] usb 5-1: string descriptor 0 read error: -71 [ 478.936092][ T96] usb 5-1: USB disconnect, device number 12 [ 479.064494][ T9483] lo speed is unknown, defaulting to 1000 [ 479.770174][ T5907] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 479.876998][ T5907] usb 3-1: USB disconnect, device number 14 [ 480.534110][ T9503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.955'. [ 481.177771][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.957'. [ 482.296569][ T9522] program syz.2.962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 482.472974][ T9529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.964'. [ 482.486627][ T9529] siw: device registration error -23 [ 482.646074][ T9537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.956'. [ 482.825447][ T5887] vhci_hcd: vhci_device speed not set [ 482.957639][ T9543] loop2: detected capacity change from 0 to 7 [ 482.978204][ T9543] Dev loop2: unable to read RDB block 7 [ 482.991097][ T9543] loop2: unable to read partition table [ 483.000690][ T9543] loop2: partition table beyond EOD, truncated [ 483.009824][ T9543] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 483.174452][ T9542] lo speed is unknown, defaulting to 1000 [ 485.073778][ T9565] netlink: 104 bytes leftover after parsing attributes in process `syz.0.971'. [ 486.646541][ T9578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.975'. [ 486.816841][ T9583] xt_socket: unknown flags 0xd0 [ 487.203995][ T9578] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 487.210672][ T9578] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 487.315369][ T9578] vhci_hcd vhci_hcd.0: Device attached [ 487.462282][ T5876] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 487.525540][ T9596] netlink: 8 bytes leftover after parsing attributes in process `syz.0.980'. [ 487.548238][ T9591] lo speed is unknown, defaulting to 1000 [ 487.566980][ T5887] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 487.700494][ T5876] usb 5-1: config 0 has no interfaces? [ 487.767991][ T5876] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 487.797468][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.836493][ T5876] usb 5-1: config 0 descriptor?? [ 488.792330][ T9586] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 488.829629][ T9604] netlink: 104 bytes leftover after parsing attributes in process `syz.1.982'. [ 488.839062][ T5936] vhci_hcd: stop threads [ 488.885142][ T5936] vhci_hcd: release socket [ 488.910742][ T5936] vhci_hcd: disconnect device [ 489.117136][ T9607] sctp: [Deprecated]: syz.2.984 (pid 9607) Use of int in maxseg socket option. [ 489.117136][ T9607] Use struct sctp_assoc_value instead [ 489.748874][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 490.064711][ T5876] usb 5-1: string descriptor 0 read error: -71 [ 490.133095][ T5876] usb 5-1: USB disconnect, device number 13 [ 490.473477][ T9623] loop2: detected capacity change from 0 to 7 [ 490.494480][ T5839] Dev loop2: unable to read RDB block 7 [ 490.528610][ T5839] loop2: unable to read partition table [ 490.572117][ T5839] loop2: partition table beyond EOD, truncated [ 490.781277][ T9623] Dev loop2: unable to read RDB block 7 [ 490.803599][ T9623] loop2: unable to read partition table [ 490.829717][ T9623] loop2: partition table beyond EOD, truncated [ 490.855293][ T9623] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 491.215577][ T9632] netlink: 60 bytes leftover after parsing attributes in process `syz.3.992'. [ 491.466288][ T9632] 8021q: adding VLAN 0 to HW filter on device bond5 [ 491.969626][ T9642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 492.200411][ T9644] sctp: [Deprecated]: syz.3.995 (pid 9644) Use of int in maxseg socket option. [ 492.200411][ T9644] Use struct sctp_assoc_value instead [ 492.288291][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.3.995'. [ 492.742736][ T5887] vhci_hcd: vhci_device speed not set [ 493.995277][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'. [ 494.004547][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'. [ 494.015528][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1001'. [ 494.755364][ T9666] lo speed is unknown, defaulting to 1000 [ 494.823411][ T9672] loop2: detected capacity change from 0 to 7 [ 494.884241][ T9672] Dev loop2: unable to read RDB block 7 [ 494.924451][ T9672] loop2: unable to read partition table [ 494.930357][ T9672] loop2: partition table beyond EOD, truncated [ 495.021737][ T9672] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 495.921494][ T9688] sctp: [Deprecated]: syz.0.1008 (pid 9688) Use of int in maxseg socket option. [ 495.921494][ T9688] Use struct sctp_assoc_value instead [ 496.082718][ T9688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1008'. [ 498.812031][ T9717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1018'. [ 499.455744][ T9716] lo speed is unknown, defaulting to 1000 [ 501.156764][ T9733] rdma_rxe: rxe_newlink: failed to add lo [ 501.165101][ T9733] netlink: 'syz.4.1022': attribute type 1 has an invalid length. [ 501.173199][ T9733] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1022'. [ 501.626877][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.719400][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1025'. [ 503.528623][ T9763] sctp: [Deprecated]: syz.3.1031 (pid 9763) Use of int in maxseg socket option. [ 503.528623][ T9763] Use struct sctp_assoc_value instead [ 506.309001][ T9783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 506.522984][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1037'. [ 506.553607][ T9786] rdma_rxe: rxe_newlink: failed to add lo [ 506.570523][ T9786] netlink: 'syz.0.1038': attribute type 1 has an invalid length. [ 506.591482][ T9786] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1038'. [ 506.693538][ T9788] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(13) [ 506.700237][ T9788] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 506.767312][ T9788] vhci_hcd vhci_hcd.0: Device attached [ 507.011828][ T5876] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 507.019819][ T5878] usb 37-1: new low-speed USB device number 4 using vhci_hcd [ 507.875431][ T5876] usb 3-1: config 0 has no interfaces? [ 507.900416][ T5876] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 507.975022][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.042748][ T5876] usb 3-1: config 0 descriptor?? [ 508.506978][ T9791] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 509.269014][ T6285] vhci_hcd: stop threads [ 509.286572][ T6285] vhci_hcd: release socket [ 509.456071][ T6285] vhci_hcd: disconnect device [ 509.557387][ T9809] lo speed is unknown, defaulting to 1000 [ 509.694232][ T3402] usb 3-1: USB disconnect, device number 15 [ 510.109265][ T9823] sctp: [Deprecated]: syz.0.1045 (pid 9823) Use of int in maxseg socket option. [ 510.109265][ T9823] Use struct sctp_assoc_value instead [ 511.023249][ T9833] lo speed is unknown, defaulting to 1000 [ 512.638001][ T9843] rdma_rxe: rxe_newlink: failed to add lo [ 512.646112][ T9843] netlink: 'syz.4.1050': attribute type 1 has an invalid length. [ 512.654270][ T9843] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1050'. [ 512.842283][ T5878] vhci_hcd: vhci_device speed not set [ 514.161808][ T96] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 514.541794][ T96] usb 5-1: Using ep0 maxpacket: 16 [ 514.561291][ T96] usb 5-1: unable to get BOS descriptor or descriptor too short [ 514.583814][ T96] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 514.649891][ T96] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.700519][ T96] usb 5-1: config 1 interface 0 has no altsetting 0 [ 514.727362][ T96] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 514.738787][ T96] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.750838][ T96] usb 5-1: Product: syz [ 514.912247][ T96] usb 5-1: Manufacturer: syz [ 515.006159][ T9868] sctp: [Deprecated]: syz.2.1059 (pid 9868) Use of int in maxseg socket option. [ 515.006159][ T9868] Use struct sctp_assoc_value instead [ 515.052428][ T96] usb 5-1: SerialNumber: syz [ 515.526223][ T9871] lo speed is unknown, defaulting to 1000 [ 515.923239][ T9878] xt_socket: unknown flags 0xd0 [ 516.958799][ T9886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1062'. [ 518.139446][ T96] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 518.175137][ T96] usb 5-1: USB disconnect, device number 14 [ 518.212475][ T9895] rdma_rxe: rxe_newlink: failed to add lo [ 518.219868][ T9895] netlink: 'syz.3.1064': attribute type 1 has an invalid length. [ 518.227861][ T9895] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1064'. [ 520.894548][ T9910] xt_socket: unknown flags 0xd0 [ 521.410576][ T9915] xt_socket: unknown flags 0xd0 [ 522.040775][ T9924] loop6: detected capacity change from 0 to 524287999 [ 522.050570][ T9924] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.060107][ T9924] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 522.069659][ T9924] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 522.079243][ T9924] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 522.367409][ T9935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1078'. [ 522.740857][ T9945] rdma_rxe: rxe_newlink: failed to add bond0 [ 523.748508][ T9935] vlan0: entered promiscuous mode [ 523.775648][ T9935] bond0: entered promiscuous mode [ 523.997991][ T9935] bond_slave_0: entered promiscuous mode [ 524.015756][ T9935] bond_slave_1: entered promiscuous mode [ 524.115171][ T9934] lo speed is unknown, defaulting to 1000 [ 526.714070][ T9965] lo speed is unknown, defaulting to 1000 [ 528.778337][ T9978] xt_socket: unknown flags 0xd0 [ 530.050036][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1092'. [ 530.114283][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1091'. [ 531.822694][T10008] lo speed is unknown, defaulting to 1000 [ 533.832060][T10015] hub 2-0:1.0: USB hub found [ 533.931901][T10015] hub 2-0:1.0: 1 port detected [ 536.691460][T10027] xt_socket: unknown flags 0xd0 [ 538.884595][T10041] fuse: Bad value for 'fd' [ 541.841813][ T5875] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 542.603673][T10057] lo speed is unknown, defaulting to 1000 [ 542.695851][ T5875] usb 1-1: Using ep0 maxpacket: 16 [ 543.391475][ T5875] usb 1-1: unable to get BOS descriptor or descriptor too short [ 543.507594][ T5875] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 543.691859][ T5875] usb 1-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 543.731480][ T5875] usb 1-1: config 1 interface 0 has no altsetting 0 [ 543.753868][T10077] xt_socket: unknown flags 0xd0 [ 544.202173][ T5875] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 544.211372][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.280839][ T5875] usb 1-1: Product: syz [ 544.295822][ T5875] usb 1-1: Manufacturer: syz [ 544.300575][ T5875] usb 1-1: SerialNumber: syz [ 545.841099][T10086] rdma_rxe: rxe_newlink: failed to add bond0 [ 548.865883][T10097] hub 2-0:1.0: USB hub found [ 548.872218][T10097] hub 2-0:1.0: 1 port detected [ 549.612165][ T5875] usb 1-1: can't set config #1, error -110 [ 551.370862][ T5875] usb 1-1: USB disconnect, device number 10 [ 552.285582][T10116] lo speed is unknown, defaulting to 1000 [ 552.328568][T10120] xt_socket: unknown flags 0xd0 [ 553.366959][T10133] netlink: 'syz.0.1132': attribute type 1 has an invalid length. [ 554.295832][T10144] program syz.0.1136 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.547053][T10154] hub 2-0:1.0: USB hub found [ 555.553014][T10154] hub 2-0:1.0: 1 port detected [ 559.304172][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 563.061372][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.177996][T10184] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.249162][T10184] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.413800][T10184] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.472038][T10191] program syz.4.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.557026][T10184] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.736920][T10184] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.816077][T10204] lo speed is unknown, defaulting to 1000 [ 565.892668][T10184] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.976029][T10184] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.105648][T10184] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.413148][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 566.422226][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 566.431132][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 566.440394][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 566.449463][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 566.458440][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 566.467610][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 566.476646][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 566.485701][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 566.494716][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 566.962510][T10218] loop2: detected capacity change from 0 to 7 [ 567.165644][ T5839] Dev loop2: unable to read RDB block 7 [ 567.171399][ T5839] loop2: unable to read partition table [ 567.177832][ T5839] loop2: partition table beyond EOD, truncated [ 567.197669][T10218] Dev loop2: unable to read RDB block 7 [ 567.635496][T10224] lo speed is unknown, defaulting to 1000 [ 567.975455][T10218] loop2: unable to read partition table [ 568.015743][T10218] loop2: partition table beyond EOD, truncated [ 568.084339][T10218] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 568.674969][T10238] netlink: 'syz.3.1162': attribute type 1 has an invalid length. [ 569.634102][T10246] 9pnet_fd: Insufficient options for proto=fd [ 570.122577][ T96] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 570.377709][T10256] sctp: [Deprecated]: syz.1.1170 (pid 10256) Use of int in maxseg socket option. [ 570.377709][T10256] Use struct sctp_assoc_value instead [ 570.506861][ T96] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 570.520855][ T96] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 570.553364][ T96] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 570.572192][ T96] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 570.581484][ T96] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.597564][ T96] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.796077][ T96] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 570.837253][T10262] program syz.0.1173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 570.871995][ T96] usb 5-1: USB disconnect, device number 15 [ 571.138028][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 572.970385][T10282] 9pnet_fd: Insufficient options for proto=fd [ 573.330217][T10289] rdma_rxe: rxe_newlink: failed to add lo [ 573.787040][T10289] netlink: 'syz.1.1181': attribute type 1 has an invalid length. [ 573.795186][T10289] __nla_validate_parse: 38 callbacks suppressed [ 573.795225][T10289] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1181'. [ 575.266197][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 575.490204][T10306] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1186'. [ 578.126992][T10325] hub 2-0:1.0: USB hub found [ 579.046887][T10325] hub 2-0:1.0: 1 port detected [ 581.278816][T10332] rdma_rxe: rxe_newlink: failed to add lo [ 581.448641][T10332] netlink: 'syz.3.1192': attribute type 1 has an invalid length. [ 581.457303][T10332] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1192'. [ 582.173186][T10343] hub 2-0:1.0: USB hub found [ 582.179380][T10343] hub 2-0:1.0: 1 port detected [ 584.289709][T10348] program syz.0.1199 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.886688][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1198'. [ 585.055152][T10350] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(15) [ 585.061944][T10350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 585.094018][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'. [ 585.246360][T10350] vhci_hcd vhci_hcd.0: Device attached [ 585.492141][ T3402] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 585.643315][ T5907] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 585.862487][ T5907] usb 4-1: config 0 has no interfaces? [ 585.868115][ T5907] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 585.887677][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.907496][ T5907] usb 4-1: config 0 descriptor?? [ 586.222112][ T5907] usb 4-1: string descriptor 0 read error: -71 [ 586.259149][T10363] vhci_hcd: connection reset by peer [ 586.262904][ T5907] usb 4-1: USB disconnect, device number 8 [ 586.314892][ T8091] vhci_hcd: stop threads [ 586.319226][ T8091] vhci_hcd: release socket [ 586.483258][ T8091] vhci_hcd: disconnect device [ 587.573722][T10390] rdma_rxe: rxe_newlink: failed to add lo [ 588.119252][T10390] netlink: 'syz.1.1208': attribute type 1 has an invalid length. [ 588.127144][T10390] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1208'. [ 588.375609][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 589.049020][T10411] rdma_rxe: rxe_newlink: failed to add lo [ 589.421072][T10411] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 589.428963][T10411] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1214'. [ 590.644326][ T3402] vhci_hcd: vhci_device speed not set [ 591.413445][T10437] rdma_rxe: rxe_newlink: failed to add lo [ 591.421235][T10437] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 591.429152][T10437] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1222'. [ 592.205921][T10453] rdma_rxe: rxe_newlink: failed to add lo [ 592.553855][T10453] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 592.561794][T10453] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1227'. [ 593.051814][ T96] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 593.274032][ T96] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 593.289564][ T96] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 593.300357][ T96] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 593.318877][ T96] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 593.328883][ T96] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.360271][ T96] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 594.464070][T10466] hub 2-0:1.0: USB hub found [ 594.469095][T10466] hub 2-0:1.0: 1 port detected [ 595.206577][ T96] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 595.229654][ T96] usb 3-1: USB disconnect, device number 16 [ 595.592502][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 595.749204][T10475] hub 2-0:1.0: USB hub found [ 595.756664][T10475] hub 2-0:1.0: 1 port detected [ 599.401740][T10495] rdma_rxe: rxe_newlink: failed to add lo [ 599.833692][T10495] netlink: 'syz.2.1242': attribute type 1 has an invalid length. [ 599.841681][T10495] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1242'. [ 600.600867][T10505] rdma_rxe: rxe_newlink: failed to add lo [ 601.030242][T10505] netlink: 'syz.2.1244': attribute type 1 has an invalid length. [ 601.038157][T10505] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1244'. [ 601.803774][ T5876] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 601.954933][T10519] rdma_rxe: rxe_newlink: failed to add lo [ 602.384324][T10519] netlink: 'syz.0.1245': attribute type 1 has an invalid length. [ 602.392423][T10519] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1245'. [ 602.697441][ T5876] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 602.697468][ T5876] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 602.697485][ T5876] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 602.697512][ T5876] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 602.697529][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.707134][ T5876] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 602.847686][ T5876] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 603.049956][ T5876] usb 2-1: USB disconnect, device number 4 [ 604.030730][T10534] smc: net device bond0 applied user defined pnetid SYZ2 [ 604.122391][T10534] smc: net device bond0 erased user defined pnetid SYZ2 [ 604.212243][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 605.236183][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1255'. [ 605.249676][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.556878][T10542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.086695][T10559] rdma_rxe: rxe_newlink: failed to add lo [ 607.212312][T10559] netlink: 'syz.0.1259': attribute type 1 has an invalid length. [ 607.220142][T10559] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1259'. [ 607.239779][T10560] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1260'. [ 607.249137][T10560] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1260'. [ 607.258362][T10560] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1260'. [ 609.020183][T10572] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 609.732648][T10573] fuse: Bad value for 'fd' [ 611.930949][T10601] xt_socket: unknown flags 0xd0 [ 612.070097][T10603] hub 2-0:1.0: USB hub found [ 612.077026][T10603] hub 2-0:1.0: 1 port detected [ 614.567287][T10612] hub 2-0:1.0: USB hub found [ 614.573946][T10612] hub 2-0:1.0: 1 port detected [ 617.933978][T10625] loop6: detected capacity change from 0 to 524287999 [ 619.827047][T10640] fuse: Bad value for 'fd' [ 619.999604][T10643] loop6: detected capacity change from 0 to 524287999 [ 620.390005][T10649] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1287'. [ 620.399592][T10649] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1287'. [ 620.409026][T10649] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1287'. [ 621.391424][T10650] xt_socket: unknown flags 0xd0 [ 621.463252][T10658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1290'. [ 621.584947][T10656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1289'. [ 621.665384][T10663] program syz.1.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 624.941290][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.667325][T10698] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1301'. [ 625.676695][T10698] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1301'. [ 625.686011][T10698] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1301'. [ 626.821197][T10706] xt_socket: unknown flags 0xd0 [ 628.181354][T10713] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1306'. [ 628.190732][T10713] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1306'. [ 628.200058][T10713] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1306'. [ 628.971453][T10717] program syz.1.1308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 631.352428][T10745] netlink: 'syz.0.1310': attribute type 1 has an invalid length. [ 632.305778][T10753] sctp: [Deprecated]: syz.0.1315 (pid 10753) Use of int in maxseg socket option. [ 632.305778][T10753] Use struct sctp_assoc_value instead [ 632.341826][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1315'. [ 633.373965][T10371] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 633.459510][T10371] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 633.500691][T10371] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 633.587197][T10764] rdma_rxe: rxe_newlink: failed to add lo [ 633.665810][T10764] netlink: 'syz.2.1311': attribute type 1 has an invalid length. [ 633.674064][T10764] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1311'. [ 633.862300][T10371] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 633.863525][ T5876] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 633.909497][ T5876] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 633.972354][ T5876] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 633.973061][T10772] xt_socket: unknown flags 0xd0 [ 634.187736][ T5876] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 637.069511][T10796] program syz.1.1326 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.635229][T10818] xt_socket: unknown flags 0xd0 [ 639.776696][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1335'. [ 643.288399][T10854] program syz.0.1342 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 643.359785][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1340'. [ 643.755540][T10867] hub 2-0:1.0: USB hub found [ 643.761539][T10867] hub 2-0:1.0: 1 port detected [ 644.618206][T10864] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 644.624876][T10864] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 644.642316][T10864] vhci_hcd vhci_hcd.0: Device attached [ 645.547181][T10865] vhci_hcd: connection closed [ 645.547487][ T6285] vhci_hcd: stop threads [ 645.557934][ T6285] vhci_hcd: release socket [ 645.572291][ T6285] vhci_hcd: disconnect device [ 645.572547][ T3402] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 645.591712][T10371] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 645.619270][T10371] usb 41-1: enqueue for inactive port 0 [ 645.742914][T10371] vhci_hcd: vhci_device speed not set [ 646.455321][T10874] xt_socket: unknown flags 0xd0 [ 649.401953][ T3402] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 649.652026][ T3402] usb 2-1: Using ep0 maxpacket: 16 [ 649.680854][ T3402] usb 2-1: unable to get BOS descriptor or descriptor too short [ 649.692456][ T3402] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 649.703063][ T3402] usb 2-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 650.028855][T10909] lo speed is unknown, defaulting to 1000 [ 650.645209][ T3402] usb 2-1: config 1 interface 0 has no altsetting 0 [ 650.777942][ T3402] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 650.940637][ T3402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.208781][ T3402] usb 2-1: Product: syz [ 651.237873][ T3402] usb 2-1: Manufacturer: syz [ 652.195333][ T3402] usb 2-1: SerialNumber: syz [ 652.568959][T10919] Invalid ELF header magic: != ELF [ 652.682727][ T3402] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 652.695426][ T3402] usb 2-1: USB disconnect, device number 5 [ 653.082890][T10930] fuse: Bad value for 'fd' [ 654.319302][T10944] program syz.0.1363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 654.726694][T10952] netlink: 'syz.1.1365': attribute type 1 has an invalid length. [ 655.368023][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1366'. [ 656.534674][T10964] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1368'. [ 658.419847][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1371'. [ 658.766925][T10975] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(15) [ 658.773602][T10975] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.781778][T10975] vhci_hcd vhci_hcd.0: Device attached [ 658.929930][T10987] fuse: Bad value for 'fd' [ 659.054721][ T96] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 659.242822][ T5876] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 659.663377][ T96] usb 3-1: config 0 has no interfaces? [ 659.675066][ T96] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 659.709314][ T96] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.755053][ T96] usb 3-1: config 0 descriptor?? [ 660.007082][T10982] vhci_hcd: connection reset by peer [ 660.013043][ T96] usb 3-1: string descriptor 0 read error: -71 [ 660.049316][ T8091] vhci_hcd: stop threads [ 660.064912][ T96] usb 3-1: USB disconnect, device number 17 [ 660.075009][ T8091] vhci_hcd: release socket [ 660.081007][ T8091] vhci_hcd: disconnect device [ 660.093121][T10995] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1370'. [ 660.128728][T10995] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1370'. [ 660.208779][T10995] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1370'. [ 661.802940][ T48] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 661.983947][ T48] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 662.002098][ T48] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 662.038807][ T48] usb 1-1: config 0 has no interface number 0 [ 662.049611][T11012] xt_socket: unknown flags 0xd0 [ 662.099141][ T48] usb 1-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 662.115986][ T48] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 662.130165][ T48] usb 1-1: config 0 interface 52 has no altsetting 0 [ 662.145448][ T48] usb 1-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 662.156730][ T48] usb 1-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 662.184900][ T48] usb 1-1: Product: syz [ 662.189265][ T48] usb 1-1: SerialNumber: syz [ 662.216408][ T48] usb 1-1: config 0 descriptor?? [ 664.288910][T11027] lo speed is unknown, defaulting to 1000 [ 664.687346][ T5876] vhci_hcd: vhci_device speed not set [ 664.915071][T11033] fuse: Bad value for 'fd' [ 664.920367][T11034] program syz.4.1387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.014403][ T48] usb 1-1: USB disconnect, device number 11 [ 667.818400][T11059] xt_socket: unknown flags 0xd0 [ 667.895642][T11060] netlink: 'syz.1.1393': attribute type 1 has an invalid length. [ 670.691760][ T5907] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 670.922628][ T5907] usb 2-1: Using ep0 maxpacket: 16 [ 670.994317][ T5907] usb 2-1: unable to get BOS descriptor or descriptor too short [ 671.005273][ T5907] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 671.018352][ T5907] usb 2-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 671.351710][ T5907] usb 2-1: config 1 interface 0 has no altsetting 0 [ 671.407311][ T5907] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 671.417080][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.442231][ T5907] usb 2-1: Product: syz [ 671.446522][ T5907] usb 2-1: Manufacturer: syz [ 671.465541][ T5907] usb 2-1: SerialNumber: syz [ 671.488055][T11095] xt_socket: unknown flags 0xd0 [ 672.717591][T11117] fuse: Bad value for 'fd' [ 675.351472][T11127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.391846][ T5907] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 675.596720][ T5907] usb 2-1: USB disconnect, device number 6 [ 675.637539][T11127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.821399][T11131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1417'. [ 675.883040][T11127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.050380][T11127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.468775][T11127] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.526282][T11127] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.569948][T11127] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.630798][T11127] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.859718][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1418'. [ 681.107229][T11176] sctp: [Deprecated]: syz.2.1430 (pid 11176) Use of int in maxseg socket option. [ 681.107229][T11176] Use struct sctp_assoc_value instead [ 681.257076][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 681.406694][T11181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1433'. [ 684.877024][T11203] hub 2-0:1.0: USB hub found [ 684.892313][T11203] hub 2-0:1.0: 1 port detected [ 685.937687][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.390661][T11206] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1439'. [ 686.399871][T11206] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1439'. [ 686.409023][T11206] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1439'. [ 687.679596][T11220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1444'. [ 688.200393][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1445'. [ 688.265617][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1445'. [ 688.727408][T11230] xt_socket: unknown flags 0xd0 [ 692.564926][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1456'. [ 692.606359][T11263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 692.615997][T11263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 692.989410][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1458'. [ 693.188472][T11268] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1458'. [ 693.786795][T11277] xt_socket: unknown flags 0xd0 [ 695.310540][T11283] lo speed is unknown, defaulting to 1000 [ 696.662799][T11290] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1464'. [ 696.909087][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 697.101940][T11300] fuse: Bad value for 'fd' [ 697.809152][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1471'. [ 697.844499][T11306] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1471'. [ 698.008972][T11313] xt_socket: unknown flags 0xd0 [ 700.677455][T11342] lo speed is unknown, defaulting to 1000 [ 700.852917][T11346] rdma_rxe: rxe_newlink: failed to add lo [ 701.172575][T11346] netlink: 'syz.0.1481': attribute type 1 has an invalid length. [ 701.180439][T11346] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1481'. [ 701.938615][T11351] fuse: Bad value for 'fd' [ 702.541974][T11355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1484'. [ 702.586234][T11355] netlink: 'syz.4.1484': attribute type 72 has an invalid length. [ 702.606267][T11355] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1484'. [ 702.815606][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1486'. [ 704.728119][T11367] xt_socket: unknown flags 0xd0 [ 704.777267][T11370] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.946834][T11370] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.076219][T11370] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.142386][T11377] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.225265][T11370] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.287333][T11385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1493'. [ 705.333678][T11377] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.682386][T11393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1496'. [ 707.687779][T11377] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.745119][T11396] netlink: 'syz.4.1496': attribute type 72 has an invalid length. [ 707.750651][T11370] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.753165][T11396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1496'. [ 707.786601][T11377] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.866909][T11370] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.923837][T11370] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.978985][T11370] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.075732][T11402] hub 2-0:1.0: USB hub found [ 708.081060][T11402] hub 2-0:1.0: 1 port detected [ 708.206476][T11377] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.313112][T11377] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.401053][T11377] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.503185][T11377] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.759493][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1501'. [ 708.792044][ T48] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 709.014160][ T48] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 709.033155][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 709.056054][ T48] usb 3-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.00 [ 709.086170][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.118322][ T48] usb 3-1: config 0 descriptor?? [ 709.135584][T11405] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 711.728339][T11425] dummy0 speed is unknown, defaulting to 1000 [ 711.751400][T11425] dummy0 speed is unknown, defaulting to 1000 [ 711.790629][T11425] dummy0 speed is unknown, defaulting to 1000 [ 711.809575][T11427] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1509'. [ 711.832522][T11425] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 711.840061][T11427] netlink: 'syz.3.1509': attribute type 72 has an invalid length. [ 711.848762][T11427] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1509'. [ 711.894716][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 711.902555][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 712.010657][ T48] usb 3-1: USB disconnect, device number 18 [ 712.437965][T11425] dummy0 speed is unknown, defaulting to 1000 [ 712.496384][T11425] dummy0 speed is unknown, defaulting to 1000 [ 712.555181][T11425] dummy0 speed is unknown, defaulting to 1000 [ 712.721008][T11425] dummy0 speed is unknown, defaulting to 1000 [ 712.796174][T11436] fuse: Bad value for 'fd' [ 712.853971][T11425] dummy0 speed is unknown, defaulting to 1000 [ 714.027960][T11445] rdma_rxe: rxe_newlink: failed to add lo [ 714.342298][T11445] netlink: 'syz.2.1511': attribute type 1 has an invalid length. [ 714.350453][T11445] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1511'. [ 715.525588][T11454] lo speed is unknown, defaulting to 1000 [ 715.560829][T11454] dummy0 speed is unknown, defaulting to 1000 [ 716.572488][ T48] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 716.815587][ T48] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 716.865373][ T48] usb 3-1: config 0 interface 0 has no altsetting 0 [ 716.908893][ T48] usb 3-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice= 0.00 [ 716.976999][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.094188][ T48] usb 3-1: config 0 descriptor?? [ 717.220244][T11461] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 717.761462][T11473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1520'. [ 717.794974][T11473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1520'. [ 718.667887][ T5876] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 718.705726][ T5876] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 718.721782][ T5876] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 718.742102][ T5876] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 718.948122][T11488] hub 2-0:1.0: USB hub found [ 718.954606][T11488] hub 2-0:1.0: 1 port detected [ 720.182064][ T5876] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 720.398912][ T5876] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 720.457871][ T5876] usb 5-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 720.599034][ T5876] usb 5-1: config 0 has no interface number 0 [ 720.625342][ T5876] usb 5-1: config 0 interface 52 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 720.669264][ T5876] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.714119][ T48] usbhid 3-1:0.0: can't add hid device: -71 [ 720.714162][ T5876] usb 5-1: config 0 interface 52 has no altsetting 0 [ 720.720168][ T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 720.773680][ T5876] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 720.784254][ T48] usb 3-1: USB disconnect, device number 19 [ 720.801675][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 720.826385][ T5876] usb 5-1: Product: syz [ 720.852695][ T5876] usb 5-1: SerialNumber: syz [ 720.883069][ T5876] usb 5-1: config 0 descriptor?? [ 722.653249][ T5876] usb 5-1: USB disconnect, device number 17 [ 723.395972][T11522] lo speed is unknown, defaulting to 1000 [ 723.431462][T11522] dummy0 speed is unknown, defaulting to 1000 [ 724.690948][T11532] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 724.701251][T11532] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 724.774101][T11532] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 724.782702][T11532] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 724.790627][T11532] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 724.822967][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 724.846380][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 724.854028][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 724.982598][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 724.990337][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 725.316290][T11536] lo speed is unknown, defaulting to 1000 [ 725.381781][T11536] dummy0 speed is unknown, defaulting to 1000 [ 725.805531][T11530] lo speed is unknown, defaulting to 1000 [ 725.822629][T11530] dummy0 speed is unknown, defaulting to 1000 [ 726.173942][T11395] Set syz1 is full, maxelem 65536 reached [ 726.749466][T11546] sctp: [Deprecated]: syz.4.1539 (pid 11546) Use of int in maxseg socket option. [ 726.749466][T11546] Use struct sctp_assoc_value instead [ 726.879015][T11546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 727.067486][T11532] Bluetooth: hci5: command tx timeout [ 727.111066][T11530] chnl_net:caif_netlink_parms(): no params data found [ 727.712344][T11530] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.719637][T11530] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.763966][T11530] bridge_slave_0: entered allmulticast mode [ 727.797720][T11530] bridge_slave_0: entered promiscuous mode [ 727.811506][T11530] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.824063][T11530] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.834104][T11530] bridge_slave_1: entered allmulticast mode [ 727.847376][T11530] bridge_slave_1: entered promiscuous mode [ 727.957203][T11530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.985648][T11530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.317093][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1542'. [ 728.431084][T11530] team0: Port device team_slave_0 added [ 728.561383][T11530] team0: Port device team_slave_1 added [ 729.148552][T11532] Bluetooth: hci5: command tx timeout [ 729.299682][T11530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 729.313192][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.371743][T11530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.404968][T11530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.434515][T11530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 729.513501][T11530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.591725][ T5876] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 729.696636][T11530] hsr_slave_0: entered promiscuous mode [ 729.711092][T11530] hsr_slave_1: entered promiscuous mode [ 729.732554][T11530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.740200][T11530] Cannot create hsr debugfs directory [ 729.762915][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 729.774663][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short [ 730.792285][ T5876] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 730.803265][ T5876] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 730.818605][ T5876] usb 5-1: config 1 interface 0 has no altsetting 0 [ 730.920953][ T5876] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 730.930239][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.948609][ T5876] usb 5-1: Product: syz [ 730.960705][ T5876] usb 5-1: Manufacturer: syz [ 730.977773][ T5876] usb 5-1: SerialNumber: syz [ 731.089734][T11584] sctp: [Deprecated]: syz.2.1551 (pid 11584) Use of int in maxseg socket option. [ 731.089734][T11584] Use struct sctp_assoc_value instead [ 731.179387][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1551'. [ 731.212130][T11532] Bluetooth: hci5: command tx timeout [ 731.374640][T11530] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 731.443445][T11530] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 731.455812][T11530] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 731.504492][T11530] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 731.589211][T11589] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1553'. [ 731.882069][T11530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.807955][T11530] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.886676][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.893865][ T6286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.989026][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.996344][T11479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 733.019004][ T5876] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 733.102531][ T5876] usb 5-1: USB disconnect, device number 18 [ 733.291726][T11532] Bluetooth: hci5: command tx timeout [ 733.860074][T11603] lo speed is unknown, defaulting to 1000 [ 733.894698][T11603] dummy0 speed is unknown, defaulting to 1000 [ 734.110758][T11530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 734.584774][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1556'. [ 734.630744][T11606] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 734.637506][T11606] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 734.650504][T11606] vhci_hcd vhci_hcd.0: Device attached [ 734.921760][ T5907] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 734.929931][ T3402] usb 41-1: new low-speed USB device number 6 using vhci_hcd [ 735.757314][T11530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.828202][ T5907] usb 5-1: config 0 has no interfaces? [ 735.847079][ T5907] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 735.875540][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.908325][ T5907] usb 5-1: config 0 descriptor?? [ 736.127610][T11616] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 4 [ 736.146771][T11479] vhci_hcd: stop threads [ 736.151189][T11479] vhci_hcd: release socket [ 736.198858][T11479] vhci_hcd: disconnect device [ 737.578488][ T5907] usb 5-1: string descriptor 0 read error: -71 [ 737.603327][ T5907] usb 5-1: USB disconnect, device number 19 [ 737.750192][T11644] fuse: Bad value for 'fd' [ 738.464200][T11530] veth0_vlan: entered promiscuous mode [ 738.767094][T11530] veth1_vlan: entered promiscuous mode [ 738.794624][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 738.851962][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 738.956933][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1567'. [ 739.292969][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 739.735348][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 739.751316][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 739.856826][T11530] veth0_macvtap: entered promiscuous mode [ 739.932792][T11530] veth1_macvtap: entered promiscuous mode [ 740.017766][T11650] lo speed is unknown, defaulting to 1000 [ 740.077509][T11650] dummy0 speed is unknown, defaulting to 1000 [ 740.088355][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.111749][ T3402] vhci_hcd: vhci_device speed not set [ 740.129453][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.383043][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.393817][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 740.403846][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 740.415709][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.015592][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 741.026707][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 741.049658][T11530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 741.071985][T11672] rdma_rxe: rxe_newlink: failed to add lo [ 741.560740][T11672] netlink: 'syz.4.1570': attribute type 1 has an invalid length. [ 741.569009][T11672] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1570'. [ 741.888212][T11676] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 741.938113][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.006936][T11511] Set syz1 is full, maxelem 65536 reached [ 742.193101][T11532] Bluetooth: hci2: command tx timeout [ 742.220365][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.230561][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.241494][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.492627][T11686] fuse: Bad value for 'fd' [ 742.572250][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.652129][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.716154][T11530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.798065][T11530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.078988][T11530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.307763][T11530] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.524902][T11530] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.535463][T11530] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.544686][T11530] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.813983][T11700] hub 2-0:1.0: USB hub found [ 743.821268][T11700] hub 2-0:1.0: 1 port detected [ 743.991093][T11702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1579'. [ 744.549538][T11532] Bluetooth: hci2: command tx timeout [ 745.617460][ T5940] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.752965][ T5838] Bluetooth: hci2: command tx timeout [ 746.771810][T11715] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1582'. [ 747.588328][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.640592][ T5940] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.830764][T11721] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1586'. [ 747.830973][ T5940] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.543339][ T5940] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.763678][T11650] chnl_net:caif_netlink_parms(): no params data found [ 748.922125][T11532] Bluetooth: hci2: command tx timeout [ 748.993608][T11738] rdma_rxe: rxe_newlink: failed to add lo [ 749.137584][T11740] hub 2-0:1.0: USB hub found [ 749.144579][T11740] hub 2-0:1.0: 1 port detected [ 750.081732][T11738] netlink: 'syz.4.1589': attribute type 1 has an invalid length. [ 750.089524][T11738] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1589'. [ 751.569874][T11754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'. [ 752.728586][ T6285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 752.763123][ T6285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 753.666918][ T5940] bridge_slave_1: left allmulticast mode [ 753.711977][ T5940] bridge_slave_1: left promiscuous mode [ 753.733230][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.782805][ T5940] bridge_slave_0: left allmulticast mode [ 753.788877][ T5940] bridge_slave_0: left promiscuous mode [ 753.802546][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.845524][T11779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1597'. [ 754.429920][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.444854][ T5940] bond_slave_0: left promiscuous mode [ 754.457440][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 754.470011][ T5940] bond_slave_1: left promiscuous mode [ 754.480095][ T5940] bond0 (unregistering): Released all slaves [ 754.646745][ T5940] bond1 (unregistering): Released all slaves [ 754.695176][T11650] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.710085][T11650] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.756397][T11650] bridge_slave_0: entered allmulticast mode [ 754.795821][T11650] bridge_slave_0: entered promiscuous mode [ 754.812371][T11650] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.819667][T11650] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.827227][T11650] bridge_slave_1: entered allmulticast mode [ 754.836161][T11650] bridge_slave_1: entered promiscuous mode [ 754.876501][T11780] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 754.885936][T11780] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 754.958276][T11780] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 754.971267][T11780] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 754.998951][ T6286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 755.022567][T11650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.031898][T11786] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1599'. [ 755.045164][ T6286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 755.089863][T11650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 755.466344][T11796] hub 2-0:1.0: USB hub found [ 755.472550][T11796] hub 2-0:1.0: 1 port detected [ 756.229226][T11650] team0: Port device team_slave_0 added [ 756.301777][T11650] team0: Port device team_slave_1 added [ 756.686464][T11650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.236173][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.525690][T11650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.539296][T11650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.546787][T11650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.587224][T11650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.771078][T11650] hsr_slave_0: entered promiscuous mode [ 757.795439][T11650] hsr_slave_1: entered promiscuous mode [ 757.808469][T11650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 757.820721][T11650] Cannot create hsr debugfs directory [ 757.875880][T11808] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.031404][T11808] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.126835][T11808] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.252642][T11808] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.663496][T11808] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.793293][T11808] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.858858][T11808] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.884460][T11650] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 758.940367][T11808] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.949636][T11650] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 758.992906][T11650] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 759.030129][T11650] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 759.245910][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1603'. [ 759.298603][T11650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.322735][T11650] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.421830][T11650] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 759.450925][T11650] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 760.228921][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.236341][ T5939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.251196][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.258499][ T5939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.481745][T11650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.598979][T11847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1607'. [ 761.777615][T11853] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1608'. [ 762.119971][T11650] veth0_vlan: entered promiscuous mode [ 762.156735][T11650] veth1_vlan: entered promiscuous mode [ 762.230092][T11650] veth0_macvtap: entered promiscuous mode [ 762.285249][T11650] veth1_macvtap: entered promiscuous mode [ 762.322605][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.337372][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.352850][T11869] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1611'. [ 762.362146][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.373287][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.388003][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.419260][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.431049][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.467705][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.486743][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.503042][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.537305][T11650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.600541][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.619085][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.646111][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.662076][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.677207][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.688391][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.705135][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.718161][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.731674][T11650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.751250][T11650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.783620][T11650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.835879][T11650] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.866016][T11650] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.895927][T11650] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.915759][T11650] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.137042][T11910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1617'. [ 767.516268][T11918] rdma_rxe: rxe_newlink: failed to add lo [ 767.588116][T11918] netlink: 'syz.3.1618': attribute type 1 has an invalid length. [ 767.596024][T11918] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1618'. [ 768.922777][T11938] sctp: [Deprecated]: syz.3.1621 (pid 11938) Use of int in maxseg socket option. [ 768.922777][T11938] Use struct sctp_assoc_value instead [ 769.927977][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1624'. [ 808.828030][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.255961][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 907.372902][ T31] INFO: task kworker/u8:11:5940 blocked for more than 143 seconds. [ 907.380891][ T31] Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 [ 907.389319][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 907.398550][ T31] task:kworker/u8:11 state:D stack:22152 pid:5940 tgid:5940 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 907.410765][ T31] Workqueue: netns cleanup_net [ 907.415904][ T31] Call Trace: [ 907.419411][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 907.422593][ T31] __schedule+0x168f/0x4c70 [ 907.427167][ T31] ? schedule+0x165/0x360 [ 907.431731][ T31] ? __pfx___schedule+0x10/0x10 [ 907.436644][ T31] ? schedule+0x91/0x360 [ 907.440929][ T31] schedule+0x165/0x360 [ 907.445764][ T31] schedule_preempt_disabled+0x13/0x30 [ 907.452312][ T31] __mutex_lock+0x724/0xe80 [ 907.456882][ T31] ? kobject_put+0x43f/0x480 [ 907.462407][ T31] ? __mutex_lock+0x51b/0xe80 [ 907.467199][ T31] ? rfkill_unregister+0xc8/0x220 [ 907.501594][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 907.506711][ T31] ? __pfx_device_del+0x10/0x10 [ 907.524915][ T31] rfkill_unregister+0xc8/0x220 [ 907.529892][ T31] wiphy_unregister+0x238/0xae0 [ 907.535456][ T31] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 907.541450][ T31] ? __pfx_wiphy_unregister+0x10/0x10 [ 907.547328][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 907.552856][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.558148][ T31] ? kfree+0x193/0x440 [ 907.562393][ T31] ieee80211_unregister_hw+0x1e2/0x2c0 [ 907.567912][ T31] mac80211_hwsim_del_radio+0x275/0x460 [ 907.573603][ T31] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 907.579744][ T31] hwsim_exit_net+0x584/0x640 [ 907.584581][ T31] ? __pfx_hwsim_exit_net+0x10/0x10 [ 907.589961][ T31] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 907.596118][ T31] cleanup_net+0x717/0xbd0 [ 907.600733][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 907.607276][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 907.613235][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 907.619001][ T31] process_scheduled_works+0xadb/0x17a0 [ 907.624762][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 907.630904][ T31] worker_thread+0x8a0/0xda0 [ 907.635631][ T31] kthread+0x70e/0x8a0 [ 907.639757][ T31] ? __pfx_worker_thread+0x10/0x10 [ 907.645140][ T31] ? __pfx_kthread+0x10/0x10 [ 907.649874][ T31] ? __pfx_kthread+0x10/0x10 [ 907.654856][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 907.660217][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.665705][ T31] ? __pfx_kthread+0x10/0x10 [ 907.670338][ T31] ret_from_fork+0x4b/0x80 [ 907.674944][ T31] ? __pfx_kthread+0x10/0x10 [ 907.679610][ T31] ret_from_fork_asm+0x1a/0x30 [ 907.684613][ T31] [ 907.687686][ T31] INFO: task kworker/0:0:11428 blocked for more than 143 seconds. [ 907.695630][ T31] Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 [ 907.703474][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 907.712535][ T31] task:kworker/0:0 state:D stack:25672 pid:11428 tgid:11428 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 907.724743][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 907.731636][ T31] Call Trace: [ 907.734944][ T31] [ 907.737910][ T31] __schedule+0x168f/0x4c70 [ 907.742820][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 907.748265][ T31] ? schedule+0x165/0x360 [ 907.753246][ T31] ? __pfx___schedule+0x10/0x10 [ 907.758173][ T31] ? schedule+0x91/0x360 [ 907.762574][ T31] schedule+0x165/0x360 [ 907.767037][ T31] schedule_preempt_disabled+0x13/0x30 [ 907.772814][ T31] __mutex_lock+0x724/0xe80 [ 907.777375][ T31] ? __mutex_lock+0x51b/0xe80 [ 907.782192][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 907.788483][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 907.793687][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 907.799486][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 907.805374][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 907.811558][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 907.817321][ T31] process_scheduled_works+0xadb/0x17a0 [ 907.823041][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 907.829214][ T31] worker_thread+0x8a0/0xda0 [ 907.834240][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 907.840633][ T31] ? __kthread_parkme+0x7b/0x200 [ 907.845955][ T31] kthread+0x70e/0x8a0 [ 907.850158][ T31] ? __pfx_worker_thread+0x10/0x10 [ 907.855498][ T31] ? __pfx_kthread+0x10/0x10 [ 907.860220][ T31] ? __pfx_kthread+0x10/0x10 [ 907.864914][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 907.870153][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 907.875661][ T31] ? __pfx_kthread+0x10/0x10 [ 907.880371][ T31] ret_from_fork+0x4b/0x80 [ 907.884862][ T31] ? __pfx_kthread+0x10/0x10 [ 907.889508][ T31] ret_from_fork_asm+0x1a/0x30 [ 907.894383][ T31] [ 907.897512][ T31] INFO: task syz.2.1596:11768 blocked for more than 143 seconds. [ 907.912912][ T31] Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 [ 907.920614][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 907.929361][ T31] task:syz.2.1596 state:D stack:25400 pid:11768 tgid:11768 ppid:5831 task_flags:0x400040 flags:0x00004004 [ 907.941672][ T31] Call Trace: [ 907.944999][ T31] [ 907.947978][ T31] __schedule+0x168f/0x4c70 [ 907.952662][ T31] ? schedule+0x165/0x360 [ 907.957041][ T31] ? __pfx___schedule+0x10/0x10 [ 907.962224][ T31] ? schedule+0x91/0x360 [ 907.966510][ T31] schedule+0x165/0x360 [ 907.970770][ T31] schedule_preempt_disabled+0x13/0x30 [ 907.976475][ T31] __mutex_lock+0x724/0xe80 [ 907.981022][ T31] ? kobject_put+0x43f/0x480 [ 907.985725][ T31] ? __mutex_lock+0x51b/0xe80 [ 907.990452][ T31] ? rfkill_unregister+0xc8/0x220 [ 907.995580][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 908.000650][ T31] ? __pfx_device_del+0x10/0x10 [ 908.005730][ T31] rfkill_unregister+0xc8/0x220 [ 908.010723][ T31] nfc_unregister_device+0x96/0x2a0 [ 908.016455][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 908.022377][ T31] virtual_ncidev_close+0x56/0x90 [ 908.027440][ T31] __fput+0x449/0xa70 [ 908.031442][ T31] task_work_run+0x1d1/0x260 [ 908.036363][ T31] ? __pfx_task_work_run+0x10/0x10 [ 908.041597][ T31] resume_user_mode_work+0x5e/0x80 [ 908.046759][ T31] syscall_exit_to_user_mode+0x9a/0x120 [ 908.052411][ T31] do_syscall_64+0x103/0x210 [ 908.057039][ T31] ? clear_bhb_loop+0x45/0xa0 [ 908.062497][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.068527][ T31] RIP: 0033:0x7f3292b8e969 [ 908.073011][ T31] RSP: 002b:00007ffce46ca6e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 908.081602][ T31] RAX: 0000000000000000 RBX: 00007f3292db7ba0 RCX: 00007f3292b8e969 [ 908.089957][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 908.098053][ T31] RBP: 00007f3292db7ba0 R08: 0000000000018a10 R09: 00000014e46ca9df [ 908.106232][ T31] R10: 00007f3292db7ac0 R11: 0000000000000246 R12: 00000000000b81f6 [ 908.114408][ T31] R13: 00007f3292db6080 R14: ffffffffffffffff R15: 00007ffce46ca800 [ 908.122552][ T31] [ 908.125676][ T31] INFO: task syz.4.1598:11780 blocked for more than 143 seconds. [ 908.133860][ T31] Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 [ 908.141648][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 908.150373][ T31] task:syz.4.1598 state:D stack:24456 pid:11780 tgid:11776 ppid:5826 task_flags:0x400140 flags:0x00024006 [ 908.162679][ T31] Call Trace: [ 908.165994][ T31] [ 908.168963][ T31] __schedule+0x168f/0x4c70 [ 908.173579][ T31] ? schedule+0x165/0x360 [ 908.178035][ T31] ? __pfx___schedule+0x10/0x10 [ 908.182996][ T31] ? schedule+0x91/0x360 [ 908.187534][ T31] schedule+0x165/0x360 [ 908.191841][ T31] schedule_preempt_disabled+0x13/0x30 [ 908.197417][ T31] __mutex_lock+0x724/0xe80 [ 908.202012][ T31] ? __mutex_lock+0x51b/0xe80 [ 908.206751][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 908.212254][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 908.217329][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.222631][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 908.228646][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 908.235128][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 908.241067][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 908.246322][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 908.252434][ T31] rfkill_set_block+0x1cf/0x440 [ 908.257365][ T31] rfkill_fop_write+0x44b/0x570 [ 908.262336][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 908.267781][ T31] ? __pfx_security_file_permission+0x10/0x10 [ 908.274121][ T31] ? rw_verify_area+0x258/0x650 [ 908.279023][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 908.284489][ T31] vfs_write+0x27b/0xa90 [ 908.288801][ T31] ? __pfx_vfs_write+0x10/0x10 [ 908.293856][ T31] ? bpf_trace_run2+0x322/0x4b0 [ 908.298787][ T31] ? bpf_trace_run2+0x186/0x4b0 [ 908.303726][ T31] ? __pfx_bpf_trace_run2+0x10/0x10 [ 908.308987][ T31] ksys_write+0x145/0x250 [ 908.313494][ T31] ? __pfx_ksys_write+0x10/0x10 [ 908.318507][ T31] do_syscall_64+0xf6/0x210 [ 908.323106][ T31] ? clear_bhb_loop+0x45/0xa0 [ 908.327831][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.333904][ T31] RIP: 0033:0x7f956398e969 [ 908.338352][ T31] RSP: 002b:00007f9564886038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 908.346852][ T31] RAX: ffffffffffffffda RBX: 00007f9563bb6080 RCX: 00007f956398e969 [ 908.355034][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000d [ 908.363278][ T31] RBP: 00007f9563a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 908.371285][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 908.379356][ T31] R13: 0000000000000000 R14: 00007f9563bb6080 R15: 00007ffe381e15a8 [ 908.387788][ T31] [ 908.390877][ T31] [ 908.390877][ T31] Showing all locks held in the system: [ 908.399008][ T31] 1 lock held by khungtaskd/31: [ 908.404040][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 908.418825][ T31] 2 locks held by getty/5582: [ 908.423809][ T31] #0: ffff88814d85b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 908.434000][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 908.444404][ T31] 4 locks held by kworker/u8:11/5940: [ 908.449803][ T31] #0: ffff88801aef3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 908.460866][ T31] #1: ffffc900045cfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 908.471712][ T31] #2: ffffffff8f2d8a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 908.481183][ T31] #3: ffffffff8f5c0788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 908.492342][ T31] 3 locks held by kworker/0:0/11428: [ 908.498437][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 908.509671][ T31] #1: ffffc90002f47c60 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 908.523639][ T31] #2: ffffffff8f5c0788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 908.535390][ T31] 2 locks held by syz-executor/11650: [ 908.540929][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.549698][ T31] #1: ffffffff8f5c0788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 908.560073][ T31] 2 locks held by syz.2.1596/11768: [ 908.565523][ T31] #0: ffff8880342fd100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 908.575620][ T31] #1: ffffffff8f5c0788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 908.586110][ T31] 2 locks held by syz.4.1598/11780: [ 908.591349][ T31] #0: ffffffff8f5c0788 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 908.601967][ T31] #1: ffff8880342fd100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 908.611864][ T31] 1 lock held by syz-executor/11933: [ 908.617186][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.625807][ T31] 1 lock held by syz.3.1621/11938: [ 908.630950][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.639680][ T31] 1 lock held by syz-executor/11950: [ 908.645148][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.653800][ T31] 1 lock held by syz.5.1624/11956: [ 908.659494][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.668098][ T31] 1 lock held by syz-executor/12140: [ 908.673580][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.682480][ T31] 1 lock held by syz-executor/12142: [ 908.687929][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.696570][ T31] 1 lock held by syz-executor/12146: [ 908.701961][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.710558][ T31] 1 lock held by syz-executor/12148: [ 908.716184][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.724866][ T31] 1 lock held by syz-executor/12150: [ 908.730209][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.739150][ T31] 1 lock held by syz-executor/12158: [ 908.744553][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.753147][ T31] 1 lock held by syz-executor/12159: [ 908.758462][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.767536][ T31] 1 lock held by syz-executor/12161: [ 908.772924][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.781623][ T31] 1 lock held by syz-executor/12164: [ 908.786939][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.795510][ T31] 1 lock held by syz-executor/12167: [ 908.800908][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.809496][ T31] 1 lock held by syz-executor/12170: [ 908.815344][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.824463][ T31] 1 lock held by syz-executor/12172: [ 908.829781][ T31] #0: ffffffff8e799c08 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 908.838704][ T31] [ 908.841074][ T31] ============================================= [ 908.841074][ T31] [ 908.849923][ T31] NMI backtrace for cpu 1 [ 908.849939][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 908.849963][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 908.849974][ T31] Call Trace: [ 908.849981][ T31] [ 908.849990][ T31] dump_stack_lvl+0x189/0x250 [ 908.850021][ T31] ? __wake_up_klogd+0xd9/0x110 [ 908.850046][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 908.850074][ T31] ? __pfx__printk+0x10/0x10 [ 908.850106][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 908.850131][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 908.850147][ T31] ? _printk+0xcf/0x120 [ 908.850170][ T31] ? __pfx__printk+0x10/0x10 [ 908.850191][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 908.850215][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 908.850238][ T31] watchdog+0xfee/0x1030 [ 908.850263][ T31] ? watchdog+0x1de/0x1030 [ 908.850294][ T31] kthread+0x70e/0x8a0 [ 908.850321][ T31] ? __pfx_watchdog+0x10/0x10 [ 908.850343][ T31] ? __pfx_kthread+0x10/0x10 [ 908.850366][ T31] ? __pfx_kthread+0x10/0x10 [ 908.850388][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 908.850409][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.850433][ T31] ? __pfx_kthread+0x10/0x10 [ 908.850454][ T31] ret_from_fork+0x4b/0x80 [ 908.850473][ T31] ? __pfx_kthread+0x10/0x10 [ 908.850495][ T31] ret_from_fork_asm+0x1a/0x30 [ 908.850530][ T31] [ 908.850537][ T31] Sending NMI from CPU 1 to CPUs 0: [ 908.999634][ C0] NMI backtrace for cpu 0 [ 908.999657][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 908.999678][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 908.999689][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 908.999715][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 cb 12 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 908.999730][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 908.999746][ C0] RAX: 366dead36090c600 RBX: ffffffff81973c98 RCX: 366dead36090c600 [ 908.999759][ C0] RDX: 0000000000000001 RSI: ffffffff8d743323 RDI: ffffffff8bc0e700 [ 908.999771][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 908.999783][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7e5970 [ 908.999795][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 908.999807][ C0] FS: 0000000000000000(0000) GS:ffff8881260d7000(0000) knlGS:0000000000000000 [ 908.999820][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 908.999831][ C0] CR2: 00005654ab228088 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 908.999846][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 908.999856][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 908.999866][ C0] Call Trace: [ 908.999874][ C0] [ 908.999880][ C0] default_idle+0x13/0x20 [ 908.999904][ C0] default_idle_call+0x74/0xb0 [ 908.999929][ C0] do_idle+0x1e8/0x510 [ 908.999948][ C0] ? __pfx_do_idle+0x10/0x10 [ 908.999961][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 908.999991][ C0] cpu_startup_entry+0x44/0x60 [ 909.000006][ C0] rest_init+0x2de/0x300 [ 909.000030][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 909.000047][ C0] start_kernel+0x470/0x4f0 [ 909.000070][ C0] x86_64_start_reservations+0x2a/0x30 [ 909.000096][ C0] x86_64_start_kernel+0x66/0x70 [ 909.000120][ C0] common_startup_64+0x13e/0x147 [ 909.000153][ C0] [ 909.000817][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 909.213145][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc3-syzkaller-00076-ge72e9e693307 #0 PREEMPT(full) [ 909.225150][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 909.235212][ T31] Call Trace: [ 909.238496][ T31] [ 909.241552][ T31] dump_stack_lvl+0x99/0x250 [ 909.246255][ T31] ? __asan_memcpy+0x40/0x70 [ 909.251292][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 909.256505][ T31] ? __pfx__printk+0x10/0x10 [ 909.261200][ T31] panic+0x2db/0x790 [ 909.265128][ T31] ? __pfx_panic+0x10/0x10 [ 909.269575][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 909.275523][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 909.280920][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 909.287203][ T31] watchdog+0x102d/0x1030 [ 909.291552][ T31] ? watchdog+0x1de/0x1030 [ 909.295987][ T31] kthread+0x70e/0x8a0 [ 909.300083][ T31] ? __pfx_watchdog+0x10/0x10 [ 909.304775][ T31] ? __pfx_kthread+0x10/0x10 [ 909.309379][ T31] ? __pfx_kthread+0x10/0x10 [ 909.314010][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 909.319312][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 909.324526][ T31] ? __pfx_kthread+0x10/0x10 [ 909.329176][ T31] ret_from_fork+0x4b/0x80 [ 909.333680][ T31] ? __pfx_kthread+0x10/0x10 [ 909.338296][ T31] ret_from_fork_asm+0x1a/0x30 [ 909.343090][ T31] [ 909.346468][ T31] Kernel Offset: disabled [ 909.350796][ T31] Rebooting in 86400 seconds..