last executing test programs: 4.349936707s ago: executing program 0 (id=7553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2f9, 0xffffca88, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200017f020001be3e7d2a182fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0xfeb9, &(0x7f0000000400)="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"}, 0x28) 4.054291295s ago: executing program 0 (id=7555): timer_create(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x8060) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) 3.940037655s ago: executing program 0 (id=7557): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt(r1, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0x2) ioctl$XFS_IOC_GETBMAP(r0, 0xc0205826, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 3.756317435s ago: executing program 0 (id=7560): r0 = socket$kcm(0x2, 0x3, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000600)="b9ed29d8fe490a860b483f2dd090fc0800785f76", 0x14}], 0x1}, 0x0) 3.74869739s ago: executing program 2 (id=7561): dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$NFT_BATCH(r0, 0x0, 0x40008) close(r0) mount$tmpfs(0x0, &(0x7f00000003c0)='./cgroup\x00', 0x0, 0x80006, &(0x7f0000000140)=ANY=[@ANYRESOCT=0x0]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) 3.651113819s ago: executing program 0 (id=7563): pipe2$9p(&(0x7f0000000080), 0x84880) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) listxattr(0x0, &(0x7f0000001d00)=""/4096, 0x1000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='nfsd\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r3, 0x0) sendto(r3, 0x0, 0x0, 0x24000000, 0x0, 0x0) 3.608375629s ago: executing program 4 (id=7564): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9", 0x5d}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e", 0x93}, {&(0x7f00000000c0)}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17a", 0xb}], 0x1}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.586790535s ago: executing program 2 (id=7565): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r2 = timerfd_create(0x0, 0x800) timerfd_gettime(r2, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r4, 0xfffffe4d}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @remote, @multicast, @remote}}}}, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 3.374096452s ago: executing program 2 (id=7568): clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x8000000000000000, 0x3, 0x7fffffffffffffff, 0x200, 0xe3c9, 0xfb, 0x2, 0x6}, &(0x7f0000000080)={0x6, 0x2, 0x1, 0x48c, 0x7, 0x9, 0x1, 0x5}, 0x0, &(0x7f00000001c0)={r0, r1+60000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x4000850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffa6, 0x0) listen(r3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 3.373895076s ago: executing program 4 (id=7569): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000d7be536791010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a01040000"], 0xd0}}, 0x20050800) write$sndseq(0xffffffffffffffff, &(0x7f0000000600)=[{0x4, 0x1, 0xfe, 0x0, @tick=0x100, {}, {0x0, 0x6}, @connect={{0x5, 0x5f}, {0x2, 0xf}}}, {0x1, 0x0, 0x1, 0x0, @time={0x6, 0x5}, {0x4, 0x1}, {0x7, 0x8}, @note={0x79, 0x2, 0x5, 0x4, 0xff}}], 0x38) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) fsync(0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 2.842181787s ago: executing program 2 (id=7570): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x3, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="00d25d52010400000b00c0ff010000006522100008000000"], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2a}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x5) connect$netrom(r1, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) connect$netrom(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x5}], 0x1}, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="110a28bd7000fddbdf6509000000050008000300", @ANYRES32, @ANYBLOB="050007"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.776829644s ago: executing program 4 (id=7571): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r2 = timerfd_create(0x0, 0x800) timerfd_gettime(r2, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r4, 0xfffffe4d}}, 0x48) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @remote, @multicast, @remote}}}}, 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 2.530817948s ago: executing program 3 (id=7572): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x110) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x152) 1.962939801s ago: executing program 4 (id=7574): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000001380), &(0x7f0000001400)=0x68) write$uinput_user_dev(r0, 0x0, 0x0) 1.934216435s ago: executing program 2 (id=7575): mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1214040, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2, 0xffffffff}, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x20000080) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0x1}}}, 0x24}}, 0x24040084) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r5) bind$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) request_key(0x0, &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c4386", 0x9, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1.883786787s ago: executing program 3 (id=7576): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000900), &(0x7f0000000940)=0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffffff, 0xff, 0xff000000]}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x3, [@var={0x6, 0x0, 0x0, 0xe, 0x3, 0x1}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @typedef={0x10, 0x0, 0x0, 0x8, 0x2}, @fwd={0x10}, @restrict={0x4, 0x0, 0x0, 0xb, 0x5}, @float={0x9, 0x0, 0x0, 0x10, 0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x3}, @func={0x1, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x2e]}}, &(0x7f00000007c0)=""/132, 0x83, 0x84, 0x1, 0x1}, 0x28) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0x0, 0x800, {{0x9, 0x4, 0x0, 0x5, 0x24, 0x67, 0x0, 0xb, 0x2f, 0x0, @private=0xa010100, @loopback, {[@timestamp={0x44, 0xc, 0x88, 0x0, 0x8, [0x5, 0x9]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x3f, 0x0, 0x0, 0x6a, '\x00', r1, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {0x0}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff", 0x24}, {&(0x7f0000000ec0)="6e20cbe6a4a132117801a9", 0xb}], 0x2}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.703900532s ago: executing program 3 (id=7578): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[], 0x11) 1.648767506s ago: executing program 4 (id=7580): clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x8000000000000000, 0x3, 0x7fffffffffffffff, 0x200, 0xe3c9, 0xfb, 0x2, 0x6}, &(0x7f0000000080)={0x6, 0x2, 0x1, 0x48c, 0x7, 0x9, 0x1, 0x5}, 0x0, &(0x7f00000001c0)={r0, r1+60000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x4000850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffa6, 0x0) listen(r3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.424518894s ago: executing program 3 (id=7582): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfd', @ANYRESHEX=r5]) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000140)="ba08e9a2cdda5e477365125b76ab922321e63d5e926b651c8cbb77d0c97719a1faee6afb11af94f2eaf01c86d53f1821eb20001f9b7061eff773a032d9d7002e6136b1d4b5e16dc4d4a1ac3454942a233c5680858ab7148d6348c11848596f0a8b36f3e33e5aac9101242fc8bc316bc3b9d6a2f121d5ca278adacd352669e7b27623d1c89d504478aed9c38126d6a24b3f0b8105224e9f", 0x97}, {&(0x7f0000000200)="0dded3a3289f5f963951f82574850cf62548e4b7158ab40d9492c0b9e25193ee6305782b282f059a79a9401ca971eb7454026a37bad276ec7264ecf4ec88c48e5e351e507385e48711161672932ae2747445443ba8b8b3d2dac8044b73716e1ec1553e4271fb4dfe586b87e84feb4c36654bd2afb55225cd1384801d21d6e95eb003a04d0346a81f7f2924e9f8b908443f396a770049de4c923fb4", 0x9b}, {&(0x7f0000000340)="3db981769a4ebaae8cbfb3c5993de2c62799c092695aaec9ded51b0dc1d73bd9d96f00dde42c697c844c332e28d1c32496a855a9a06a753340ef61f31031780856ba7256212924cb03f446a8b1cc859fe9cdbb951f01e45cd886912d77b435e94f3a4e379b9170b56de5a0121639dfb83aeff9559ef5de59746b9cdb4ca643e06f5e5449531d9da31c2152698cd57782198557320c66101c7f46dd6a113ef25ce71f239aec66d2c9d327213e8f44a62a0e99476764c3f5ebbeb5ab2125b0fd84b049ab0f4065a19c141e75f05f78f058c76cc4490f25b8a8af83ba1027f56004d23a8e33068401e1d0a3d95b3db051dd5f06f236cdb0c45e216d62af73e5262aef639b2eff708b9117955750f7bf7dcf8732a4daf3d222fc5095c29bc9d568203f67968b87c3f168d1c777e8e7201faf3feccb7789764f8b62c2aac59a8eed50df0d791f21ba0c6f22aaea73a3a52362f8724048953a4a10eb0313e21813bc7c128a00956c202f4593895a460fe4780a8bfc6fa3cbc5b5ac0bed6b2ac92ac64200fb0742af0eff6a8f674edb35f93844059f26107bbfe15679bf13743f56fd025ce7bb7e9bf319863f500f7aba56b7a135aaa149708fb211d5552c448d2e1453c51c781b0b8d635482f807a4469935097bd5928fc656f055a9a8b036aa41c984462a713c743754bd43282dfb2dd0674c78273cf96ac15777cd4307c6502939166bbe3c10874036a8e5328478220610089e63a8df69a7293e63f25e5c9c6b30ebed4988e31d65ce70faa9004a8318c0b557a4b2683a3d161635e44cf70609f7090defef6cc48cbdf8aae2eccfae9247f6941f46e3962203eabcb4ea9f68065f611b7ae9db974fe8d7cf9fc9ac20fadae316d31d69ef1be90d1bae971c1e4bbd527a8bd953cf35413af83e1c93fb8d4f5ceb56a5a7ac2442405af15a5e0cad028eff78f5483aa08ae44ac067c440c5f6e6cf187dda7f7f4ff20cd17e862ef04006db84e13ddbe1441ff77567427d6ce74f42bf721710eae6d7bf1fd4534b8a7aa567cf1fe5ac64f90d77fc123d0b22c4e3099e5c7da38454d30420933f39202d4e6c9bc229603d8a2b9eef81960af65448b0b326a0d47c2cf55e9153a9291f8bc0524a72e9450b443d5dd8e3bdd48cc3f858b2929708d50e7ef4b4ba2740e41d93efe5d8b8ec3b1ee6b90f408aa858e6570fff26bc1d89ebde660c925fb5d4bd3659304d465322b31a801305e15ee5d6e693c055ddadb94b396c923a9281891a194aac5ea42de083bad592977f3c3efafd3e450263ca1fc0a4fca303b621e8de2f6a6475c762b89364eb4464fd033010fb0040c18a8285b075e85ea280d8fd420970cfade9faaec5e37b67178e6aa7facb024b27ad02908d4f0d62a0306d44afe74b490121261054763f0efa094d83ce80458ee09ba48dbb73cc8a705293082521cbc41cf871bd0a9324139b4d95f1c163f90de433b8124f6080cb330fc51f49196428ce312d38d1aeed65359a435f280696e4d9393f3661eee60e0e8efe9e110a22caef06cf5d9351a721afe7f8a73195ba2cde427944b3ec29c1d590b4e16e51154b10adfd5332d111ea85b466c5dd5b990210b7ee7c61170cde6fa24c8fd1c32f1ca472427c2a46e36ddcbeab423e71befd1599e243f6b99f22899e88334707ed2db2c7f087186b87e873b14969de734eb1480ce965a34f19d5e4cc0463922c76ea1b58da6b5c8015b20ac37bb2e059dc8d399d04e4bce092128336d928f97457dc9ef6e344ca868d2af69bbebca19a3df0f1ad466850ae68996d07b74f11cef93ad71b3b2f720633344fb11789eff43a489f9b78c1af1664a399ca3ed6f79de7db4bc014fd3146d6e70db17bac6f8cd8d640de1b140f91cec1b98024be0490d5b6ca869d3943d8eaf94b1ab0c3821aa87f48938b233198723a61e90726f69d317c553e7f046f52dcab58e08608291e053cece5292a4890626494afd3f1862fa50ceb55c232babeeff09b442e10872a76c1b4ad4851fa1ffa9d951da3c8d52e5796b601d40029b0c8dfac32f66e8a570713ead050db667e781948288606a038a39bf79c2e9d8023631eb742b2da4926edcbc7c91226a5c91250458c4c96cc2b053a32667d889f92732992c074d42538ba5a406916a3e9c72a91e118849ceb0bffb3b75365dacc3cf3cc977138c74a120fbac559a0eca45a64d6b528af5a9260c4e8329a4a3da42b7e7c31047238a2fae80f884d50a14c3fa976187af62b94bad5daf866ef708b4e9fc8cb0604f33e491fb6516f1359ad0f625b4cde23d5e44ddfc478ba5095b755ab0d88f6dac989efab16af0e51cf64ef1d10ba1d00d0228e47d46d1a1dfad936f598ffd70efcf71d147f452b8b2321a1ccfe7e9ae3401aaaf465c8830adca2a140aa858ec5d45e905a36d9304688ed53719e70611465c0a0a318c0e82382ac7768feceaeee63623a3ab353e5198fb48d02d3c004d2849e7942913e09453d6c8836ef0ef1ce8b088b291ad314aa74413eb4fdc81af4bbdb12656d2230f12e0f70b09e432a81630f3abc47bfa1b9082ae511d7999bd4caf4c0fc2a139fc5fd6cba0d6e9930da8fb36feefd85377e071e363e02b20b2c6bacf9d787066c921b28da69a012d63697c5d2aac7873ece3f1ff3e80cd0835515c23784f6d18d9e865fe044b20d646812ca1e957e60f07b00ac1cf845d8c6ccd26771caf6d6c30b82153ad72ac136ca6f5cfb6487b3892f2d8ca7f8ae192495128dcdd3de05e364cffb0b9b17192e5d655ac32a3cf953a73b7414dca1948cb4bb718f0cb0755934b5dbcaffc97ff7693e83c6dc8ffdea126c120fdcfcada29f7593084626091517d44ea47d9e18ef145aae143bf63e865b405c6625cb0cb1baa4b95f21df1ca815d4240a1e612fbf897f13e326503d720c57ac888af8c7c931229bb2d6b3e3ee3f3a2c8e04c81a4c761ef0e18cc3f425c66bc67f0a52fbe6c7a7bbb9a9206402bf1d999160d0c227df52a3665417f01c107be3536c4ab8967322a3c585621bed199b7b12c0807d084aa027d1f14950717942e1c3b7f9dabcbefb728e06c718ab2d202b2b992a494afe6fcd4f805344276558c2bfb1efa5b7615e2932d55ceea2f9ba7c2b70c4b51d17d35cac83254d193c12de5e67e7f63c0442b23987a2f749e95f911f2264986f563eab1da6bcbec62899a5f8dabae780c78bcccb9a4aaa1ae5eba308a7dbd4bb9e9692a7878c51943838751ba3fb38fb2f2f04a27a037a4962fde29d11aa59d18618341496fa0f6330032796a98ec243244a1fb6fbe63861f5b8ce158658a7b52c935cd6662999fd7ef3c72f62c5ccedd014973273cacd3a6232f3fd6e1844c971cf32e4d47d350e76015c4e8e29ebb6e3bb6509d37648e14a1fec93f1af753af9825c5f0c4504d5f543818dea5a1c52d33f6124fc04e9166fe6fdee32512ab54c716a608c8cfe96b24c57692d4c3576b6ab68a5d787bfd7428e332b5fc3c6dc4f2731d4fa5c9bbce218ad643840470b33da0be0a355b2eb9f9cf32311744b5f4ecf6048b8e893724a967b8a64fb2b6541bdb076137c80ca493dd47d239bf1b2ef248731524dd3d94871929bb6c00069ce2c6366858d6fb66434441133bc2a96608af22fdf73562185d612be3fa5370e8df7a841c40b5444180bcd276028852b81a810fc46f8d14ace07c7ab1134fa462bbf9ba2fc6f3eb0d1cc9844cd7ab5e1477e29d229b251287abf9919c97bcafe6e2a2f54c4f0254be39b0b7ab0bde87436f69e8b5911e95439f7a7778cb878a65c95353213f033430f22d2855505a69270c321eee7f02aaf81366507412d37f15c072b1481f18ebeb44cddb73aef7314c85912bdbdc8a3d05225e19f76185939fef2edb737154ab5585e2b6ee5b54992ab5babfd2af4c72c2e8060aa1deb310a5ac15e670fd093c09275c115b4ae4529d40f0d31c958a3e6230bfd856dc953531119565c8e40efcd93c49d02606bde183d2ad9e78bd3a7acc84293acf82af82fd813c47ad2d6bd3f8117f63523d8148e4c38154efe83d17cddbe04a7e148a84db74e73aa46f113b73571106f87e5ef99ddbd67232e4d0477e946e83b400575e4104c21a3d5a3fcb3265d5caac4234d5117a23fc54fd353564e0b32b50972010dbe56ad9a729172de0d080c2ed0336ea439b86c9c5cacedb237d651344b22f276a707f695b8b52a8de17433d32085f7a9c08eecff91b70005bf109b6be025a656d02d63e63405aaeeef3fb9d34eeb5253bc5b52fafc3bea3ff9d9eb16c801081cd10d7fa702130a36122b6f92fc47a07d7cc521ebf40e67460deadfee61ea24fbd53db5e5b8892fe67457375d4833a5a37a42ee50b929fdd1e54128d543a77611f2480b7c3c3ebe4649bb66a421448947fe395b7c62654907d5fca15b304e3e564cfcae28cb7e4e1bbab23b2843d2fa98713e7fc6f81aca5b29c70dc730874fbec54124ecb19e0468ac2e581bf76b9cd66f037b00172cc5818a381c9c50fc31db49bfe303d0a3176c621c3292dd8e9e83b6cf52f49343db40e6d5b31e62cb7a9964d55b680b9b5dbe7fcf1b1eae00043af5d0da20470adea44c7b8efd4feb8465d4efe3b0f0b602e3a1cb8b4b29c99adc4c6fb8bcf71d5ae3e597b6468bc791afe9f28e65ea307ff962cb5f411b6e9478e0f3fb67982cc38b6c7732b0c03338fd85a7d9a3dc83cc1b92eaa11aded4feec55e7fb72ad5b59810c56f7ad75a26da39567f9256603df552f11af0e8b8c39226c9e453670036aedc7a9668390524ee4085ca16b4cf626dc7d97115609757812665a2d78806e657226b738a8f197250bb1c89b0d07e7e75e1fc6ca6d330e9f8de99e28b0c0584bccab40db5145f09a74e9337d4dd7d56c4698816e3f74658b7e135e0ee186a21ff52b66c414da85dc56d12a7a99e5a6fb11b1f6443a0452645757cbf989b610124705670b5c2424e514861673afc343be0402a92652209d3c9b0813b53284440d51eed38094be2bd65933f9092b4d6afc67ebf2c5867afa6ccb67558eea12d8e2b6d0b3ffaa640ee53b7fd788b41cc2baa500a04b5236b7ddf98c72a66a5adc888c2c2d56823f842acf1ab8ce2f78584949c1c6294698c7f62affe762f6615143d82f1b27780f93a90b30ec46474a7b3a7c18363b62ca30d0caa92a479579b43c33c65d8573402d704d501b3fe602af55dac95e1480dc963aa04d9f19543705b9cd9f489b0d14aa1f91d5f41b65ee7e9e958811e4fc95cf3898ad44b0e0b320dc42433adc9e8db2bbd77bc286d960d5bdd9a8668f07e7d51e4d9551f172b4af0224d8bfbd74c154102a997bb8aa28ba78bf765e8303c7c0fb541802", 0xece}], 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r6, 0x0, 0x0}, 0x20) 1.423641239s ago: executing program 4 (id=7583): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000001680)='0', 0x1}, {&(0x7f0000000200)="311d", 0x2}], 0x2) r1 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x800, 0x0, 0x3, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002", @ANYRES16=r3], 0x20}}, 0x8000010) accept4$x25(r3, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x800) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x24, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x8, 0x3, "52ae0000"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlabel\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e2010203010902240001000000000904"], 0x0) 1.35644159s ago: executing program 1 (id=7584): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040800}, 0x4040000) 1.220120186s ago: executing program 1 (id=7585): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000001380), &(0x7f0000001400)=0x68) write$uinput_user_dev(r0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfefff038}, {0x6}]}, 0x10) 602.731555ms ago: executing program 0 (id=7586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x71096000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x10, 0x1403, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, &(0x7f0000000440)={0x0, @frame_sync}) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f0000000200)) 422.330086ms ago: executing program 3 (id=7587): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) 373.795855ms ago: executing program 3 (id=7588): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x4, 0x42}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x200000000000002}]}, @nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @u32=0xe62}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) 319.673068ms ago: executing program 1 (id=7589): socketpair$unix(0x1, 0x6, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 253.782948ms ago: executing program 2 (id=7590): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x4}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) dup(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRESDEC], 0xe4}}, 0x2404c800) r7 = syz_pidfd_open(0x0, 0x0) open_by_handle_at(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 226.018495ms ago: executing program 1 (id=7591): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 135.711039ms ago: executing program 1 (id=7592): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f00000006c0)=ANY=[], 0x11) 0s ago: executing program 1 (id=7593): clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x8000000000000000, 0x3, 0x7fffffffffffffff, 0x200, 0xe3c9, 0xfb, 0x2, 0x6}, &(0x7f0000000080)={0x6, 0x2, 0x1, 0x48c, 0x7, 0x9, 0x1, 0x5}, 0x0, &(0x7f00000001c0)={r0, r1+60000000}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x50}}, 0x4000850) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0xffffffff, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000a00)=ANY=[], 0x0}, 0x94) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffa6, 0x0) listen(r3, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): age: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=22794 comm=syz.0.6082 [ 851.265967][ T5471] 8021q: adding VLAN 0 to HW filter on device eth1 [ 851.566600][T22809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=22809 comm=syz.4.6088 [ 851.691000][T22811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22811 comm=syz.4.6088 [ 851.733540][ T8145] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 851.792059][T22816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6089'. [ 851.802413][T22816] netlink: 'syz.2.6089': attribute type 10 has an invalid length. [ 851.999671][T17126] Bluetooth: hci3: command tx timeout [ 852.053410][ T8145] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 852.071607][ T8145] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.101932][ T8145] usb 4-1: Product: syz [ 852.121226][ T8145] usb 4-1: Manufacturer: syz [ 852.125999][ T8145] usb 4-1: SerialNumber: syz [ 853.051838][ T8145] usb 4-1: config 0 descriptor?? [ 853.203811][T22828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6091'. [ 853.262279][T22694] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 853.295464][T22831] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 853.318229][T22694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.325460][ T8145] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 853.345659][T22694] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 853.378933][T22694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.401516][T22694] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 853.437856][T22694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.455881][T22694] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 853.493607][T22694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.764579][T22846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=22846 comm=syz.0.6095 [ 853.789073][T22694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.859433][T22694] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.882581][T22846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22846 comm=syz.0.6095 [ 853.906402][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.913640][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.966744][T11526] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.973906][T11526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 854.244700][T17126] Bluetooth: hci3: command tx timeout [ 854.684151][T22864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6100'. [ 854.694713][T22864] netlink: 'syz.2.6100': attribute type 10 has an invalid length. [ 854.823889][T21586] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 854.868002][T22694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.966607][T22694] veth0_vlan: entered promiscuous mode [ 854.996246][T22694] veth1_vlan: entered promiscuous mode [ 855.003346][T21586] usb 1-1: Using ep0 maxpacket: 16 [ 855.016757][T21586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.038307][ T8145] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 855.040400][T22694] veth0_macvtap: entered promiscuous mode [ 855.056906][T21586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.067257][T21586] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 855.085639][T22694] veth1_macvtap: entered promiscuous mode [ 855.095604][T21586] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 855.113087][T22694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 855.120731][T21586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.134192][T21586] usb 1-1: config 0 descriptor?? [ 855.141440][T22694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.166469][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.178205][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.188607][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.197519][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.354002][T11530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.363493][T11530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.439553][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.450460][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.557402][T22866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=22866 comm=syz.2.6101 [ 856.180063][T21586] usbhid 1-1:0.0: can't add hid device: -71 [ 856.197634][T21586] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 856.215384][ T8132] usb 4-1: USB disconnect, device number 101 [ 856.229444][T21586] usb 1-1: USB disconnect, device number 80 [ 856.259570][T22866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=22866 comm=syz.2.6101 [ 856.265696][T22874] netlink: 'syz.3.6102': attribute type 1 has an invalid length. [ 856.298098][T22874] bond2: entered promiscuous mode [ 856.308676][T22874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 856.329755][T22874] ipvlan3: entered allmulticast mode [ 856.335319][T22874] bond2: entered allmulticast mode [ 856.364927][T22874] ipvlan4: entered allmulticast mode [ 856.856637][ T8132] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 856.960070][T22892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6110'. [ 856.974362][T22892] netlink: 'syz.0.6110': attribute type 10 has an invalid length. [ 856.982466][T22892] bridge0: port 3(geneve1) entered disabled state [ 856.988984][T22892] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.996053][T22892] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.108959][ T8132] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 857.118181][ T8132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.126257][ T8132] usb 4-1: Product: syz [ 857.130577][ T8132] usb 4-1: Manufacturer: syz [ 857.135199][ T8132] usb 4-1: SerialNumber: syz [ 857.177945][ T8132] usb 4-1: config 0 descriptor?? [ 857.413279][ T8132] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 857.604238][ T8144] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 857.805669][ T8144] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 857.817728][ T8144] usb 2-1: config 0 has no interface number 0 [ 857.819322][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 857.839225][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 857.844093][ T8144] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 857.855500][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 857.869385][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 857.873612][ T8144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.886229][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 857.976564][ T8144] usb 2-1: Product: syz [ 858.095602][ T8144] usb 2-1: Manufacturer: syz [ 858.197493][ T8144] usb 2-1: SerialNumber: syz [ 858.358466][T22910] lo speed is unknown, defaulting to 1000 [ 858.368804][ T8144] usb 2-1: config 0 descriptor?? [ 858.384642][ T8132] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 858.411922][ T8144] usb 2-1: selecting invalid altsetting 1 [ 858.427397][ T8132] usb 4-1: USB disconnect, device number 102 [ 858.445491][ T8144] dvb_ttusb_budget: ttusb_init_controller: error [ 858.462155][ T8144] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 858.528228][ T8144] DVB: Unable to find symbol stv0299_attach() [ 858.562979][ T8144] DVB: Unable to find symbol tda8083_attach() [ 858.570123][ T8144] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 858.650403][T22910] chnl_net:caif_netlink_parms(): no params data found [ 858.656063][T22902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.671998][T22902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.688402][T22902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.716328][T22902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.741456][T22902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.756414][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.775546][T22902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.853390][T22910] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.860583][T22910] bridge0: port 1(bridge_slave_0) entered disabled state [ 858.869201][T22910] bridge_slave_0: entered allmulticast mode [ 858.877158][T22910] bridge_slave_0: entered promiscuous mode [ 858.890165][T22910] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.905088][T22910] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.927639][T22910] bridge_slave_1: entered allmulticast mode [ 858.934349][T22910] bridge_slave_1: entered promiscuous mode [ 859.005996][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.022688][T18211] usb 2-1: USB disconnect, device number 86 [ 859.112618][T22910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.286288][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.307590][T22910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.391237][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.430459][T22910] team0: Port device team_slave_0 added [ 859.453502][T22910] team0: Port device team_slave_1 added [ 859.520277][T22910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.537510][T22910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.595055][T22910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.626669][T22910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.641740][T22910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.699800][T22910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.850139][T22910] hsr_slave_0: entered promiscuous mode [ 859.866798][T22910] hsr_slave_1: entered promiscuous mode [ 859.887215][T22910] debugfs: 'hsr0' already exists in 'hsr' [ 859.901386][T22910] Cannot create hsr debugfs directory [ 860.228095][T17126] Bluetooth: hci2: command tx timeout [ 860.352810][ T35] bridge_slave_1: left allmulticast mode [ 860.358604][ T35] bridge_slave_1: left promiscuous mode [ 860.364392][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.374745][ T35] bridge_slave_0: left allmulticast mode [ 860.385283][ T35] bridge_slave_0: left promiscuous mode [ 860.394611][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.577300][ T35] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 860.639614][ T35] bridge1 (unregistering): left promiscuous mode [ 860.661563][T22958] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6133'. [ 861.018086][ T8132] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 861.026245][ T8144] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 861.178213][ T35] bond1 (unregistering): Released all slaves [ 861.378165][ T8144] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.389187][ T8132] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 861.413271][ T8132] usb 4-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 861.436324][ T8144] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 861.594423][ T8132] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 861.603498][ T8144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.611852][ T8144] usb 2-1: Product: syz [ 861.616259][ T8132] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.635177][ T8144] usb 2-1: Manufacturer: syz [ 861.642261][ T8144] usb 2-1: SerialNumber: syz [ 861.653765][ T8132] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 861.664388][ T8132] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 861.672484][ T35] tipc: Disabling bearer [ 861.705585][ T8144] usb 2-1: config 0 descriptor?? [ 861.726520][ T8132] usb 4-1: Product: syz [ 861.784911][ T8132] usb 4-1: Manufacturer: syz [ 861.813684][ T8144] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 862.098852][ T8132] cdc_wdm 4-1:1.0: skipping garbage [ 862.155634][ T8144] usb 2-1: USB disconnect, device number 87 [ 862.215149][ T8132] cdc_wdm 4-1:1.0: skipping garbage [ 862.318239][ T8132] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 862.614614][T17126] Bluetooth: hci2: command tx timeout [ 862.641404][ T8132] usb 4-1: USB disconnect, device number 103 [ 862.688983][ T35] tipc: Left network mode [ 862.858352][T22978] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6137'. [ 863.282405][ T5471] 8021q: adding VLAN 0 to HW filter on device eth1 [ 864.832990][T17126] Bluetooth: hci2: command tx timeout [ 864.919926][T22999] infiniband syz1: set active [ 864.924651][T22999] infiniband syz1: added team_slave_0 [ 864.932268][T22999] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 864.934285][T22999] infiniband syz1: Couldn't open port 1 [ 865.003883][T22999] RDS/IB: syz1: added [ 865.007999][T22999] smc: adding ib device syz1 with port count 1 [ 865.014166][T22999] smc: ib device syz1 port 1 has no pnetid [ 866.257842][T23037] netlink: 830 bytes leftover after parsing attributes in process `syz.0.6150'. [ 866.638031][T23044] netlink: 770 bytes leftover after parsing attributes in process `syz.1.6152'. [ 867.180529][T17126] Bluetooth: hci2: command tx timeout [ 867.699301][T22910] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 868.069083][T23054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6154'. [ 868.217760][T23058] netlink: 'syz.2.6154': attribute type 10 has an invalid length. [ 868.256839][T22910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 868.280108][T22910] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 868.303213][T22910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 868.345743][T22910] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 868.376609][T22910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.396727][T22910] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 868.430777][T22910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 868.572837][ T8127] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 868.613094][ T35] hsr_slave_0: left promiscuous mode [ 868.629277][ T35] hsr_slave_1: left promiscuous mode [ 868.641153][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.665232][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.686659][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.702637][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.724528][ T35] batman_adv: batadv0: Interface deactivated: macsec1 [ 868.731967][ T35] batman_adv: batadv0: Removing interface: macsec1 [ 868.745994][ T8127] usb 1-1: Using ep0 maxpacket: 16 [ 868.775158][ T8127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.787699][ T35] veth1_macvtap: left promiscuous mode [ 868.802338][ T8127] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.812423][ T8133] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 868.827082][ T35] veth0_macvtap: left promiscuous mode [ 868.837520][ T8127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 868.850390][ T35] veth1_vlan: left promiscuous mode [ 868.850458][ T35] veth0_vlan: left promiscuous mode [ 868.892037][ T8127] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 868.932670][ T8127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.961915][ T8127] usb 1-1: config 0 descriptor?? [ 868.998092][ T8133] usb 4-1: Using ep0 maxpacket: 8 [ 869.017958][ T8133] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 869.034146][ T8133] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 869.069992][ T8133] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 869.093249][ T8133] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 869.111401][ T8133] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 869.139245][ T8133] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 869.161362][ T8133] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.328992][T23093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=23093 comm=syz.2.6161 [ 869.370810][ T35] team0 (unregistering): Port device team_slave_1 removed [ 869.372344][T23093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23093 comm=syz.2.6161 [ 869.412219][ T8133] usb 4-1: usb_control_msg returned -32 [ 869.418643][ T8133] usbtmc 4-1:16.0: can't read capabilities [ 869.426118][ T35] team0 (unregistering): Port device team_slave_0 removed [ 869.647990][ T8127] usbhid 1-1:0.0: can't add hid device: -71 [ 869.658912][ T8127] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 869.698807][ T8127] usb 1-1: USB disconnect, device number 81 [ 869.817957][T23074] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 869.818232][ T8142] usb 4-1: USB disconnect, device number 104 [ 869.848056][T23105] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 869.985669][T22910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.020905][T22910] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.061866][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.069075][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.127319][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.134509][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.272267][T22910] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 870.416498][ T8142] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 870.422722][T23134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=23134 comm=syz.2.6170 [ 870.609873][ T8142] usb 4-1: Using ep0 maxpacket: 8 [ 870.632837][ T8142] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 870.655817][ T8142] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 870.678424][ T8142] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 870.688356][T22910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.714212][T23134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23134 comm=syz.2.6170 [ 870.727183][ T8142] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 870.727213][ T8142] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 870.752300][ T8142] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 870.765108][ T8142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.001975][ T8142] usb 4-1: usb_control_msg returned -71 [ 871.018702][ T8142] usbtmc 4-1:16.0: can't read capabilities [ 871.037129][ T8142] usb 4-1: USB disconnect, device number 105 [ 871.047530][T22910] veth0_vlan: entered promiscuous mode [ 871.078339][T22910] veth1_vlan: entered promiscuous mode [ 871.121317][T22910] veth0_macvtap: entered promiscuous mode [ 871.139303][T22910] veth1_macvtap: entered promiscuous mode [ 871.177546][T22910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 871.194358][T22910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 871.220613][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.230544][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.255401][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.264726][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.398330][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.419179][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.472964][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 871.481097][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.693399][ T8142] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 871.964445][ T8142] usb 1-1: Using ep0 maxpacket: 16 [ 872.015391][ T8142] usb 1-1: unable to get BOS descriptor or descriptor too short [ 872.060950][ T8142] usb 1-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=d4.05 [ 872.110565][ T8142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.174546][ T8142] usb 1-1: Product: syz [ 872.219031][ T8142] usb 1-1: Manufacturer: syz [ 872.247346][ T8142] usb 1-1: SerialNumber: syz [ 872.946995][ T8142] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 872.968321][ T8142] gspca_vc032x: reg_w err -71 [ 872.990202][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 872.997653][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.011201][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.024060][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.032586][T23191] netlink: 262 bytes leftover after parsing attributes in process `syz.2.6188'. [ 873.041802][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.054656][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.070682][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.080582][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.092018][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.104084][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.110962][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.117181][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.122619][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.128256][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.133686][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.148011][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.153331][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.159646][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.164948][ T8142] gspca_vc032x: I2c Bus Busy Wait 00 [ 873.172100][ T8142] gspca_vc032x: Unknown sensor... [ 873.177200][ T8142] vc032x 1-1:12.0: probe with driver vc032x failed with error -22 [ 873.191283][ T8142] usb 1-1: USB disconnect, device number 82 [ 873.308146][ T8145] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 873.492768][ T8145] usb 2-1: Using ep0 maxpacket: 16 [ 873.499678][ T8145] usb 2-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.510973][ T8145] usb 2-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 873.527962][ T8145] usb 2-1: config 0 interface 0 has no altsetting 0 [ 873.534595][ T8145] usb 2-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 873.544556][ T8145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.562567][ T8145] usb 2-1: config 0 descriptor?? [ 874.676725][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6201'. [ 875.006553][T23235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6207'. [ 875.015869][T23235] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 875.259024][ T8142] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 875.435287][ T8142] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 875.457560][ T8142] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 875.476062][ T8142] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 875.485118][ T8142] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 875.501297][ T8142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 875.501328][ T8142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 875.525075][ T8142] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 875.525108][ T8142] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 875.525127][ T8142] usb 1-1: Product: syz [ 875.525142][ T8142] usb 1-1: Manufacturer: syz [ 875.547910][ T8142] cdc_wdm 1-1:1.0: skipping garbage [ 875.547929][ T8142] cdc_wdm 1-1:1.0: skipping garbage [ 875.547991][ T8142] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 875.756295][ T8142] usb 1-1: USB disconnect, device number 83 [ 876.384733][ T8145] usbhid 2-1:0.0: can't add hid device: -71 [ 876.384818][ T8145] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 876.397618][ T8145] usb 2-1: USB disconnect, device number 88 [ 876.783367][T23269] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 876.949343][T17669] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 877.112232][T17669] usb 2-1: Using ep0 maxpacket: 32 [ 877.124554][T17669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 877.146017][T17669] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 877.172169][T17669] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 877.192408][T17669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.208335][T17669] usb 2-1: Product: syz [ 877.224468][T17669] usb 2-1: Manufacturer: syz [ 877.238739][T17669] usb 2-1: SerialNumber: syz [ 877.251357][T17669] usb 2-1: config 0 descriptor?? [ 877.273208][T17669] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 877.378133][T23281] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6224'. [ 877.488582][T23263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.511969][T23263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.764091][ T1141] usb 2-1: Failed to submit usb control message: -71 [ 877.772951][ T8132] usb 2-1: USB disconnect, device number 89 [ 877.786468][ T1141] usb 2-1: unable to send the bmi data to the device: -71 [ 877.917235][ T8138] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 877.925046][ T1141] usb 2-1: unable to get target info from device [ 877.931368][ T1141] usb 2-1: could not get target info (-71) [ 877.974258][ T1141] usb 2-1: could not probe fw (-71) [ 878.748687][ T8138] usb 4-1: Using ep0 maxpacket: 16 [ 878.757001][ T8138] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.770094][ T8138] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 878.795857][ T8138] usb 4-1: config 0 interface 0 has no altsetting 0 [ 878.802516][ T8138] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 878.818990][ T8138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.845722][ T8138] usb 4-1: config 0 descriptor?? [ 879.457554][ T8132] IPVS: starting estimator thread 0... [ 879.481572][ T8138] usbhid 4-1:0.0: can't add hid device: -71 [ 879.495442][ T8138] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 879.528632][ T8138] usb 4-1: USB disconnect, device number 106 [ 879.583259][T23318] IPVS: using max 41 ests per chain, 98400 per kthread [ 879.721052][T23329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=23329 comm=syz.1.6241 [ 879.837446][T23329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23329 comm=syz.1.6241 [ 881.538704][ T8142] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 883.686817][T23370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.712357][ T8142] usb 4-1: Using ep0 maxpacket: 16 [ 883.719123][ T8142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.730371][ T8142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.968998][ T8142] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 883.970244][T23370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.015156][ T8142] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 885.062327][ T8142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.097414][ T8142] usb 4-1: config 0 descriptor?? [ 885.282067][ T8142] usb 4-1: can't set config #0, error -71 [ 885.323891][ T8142] usb 4-1: USB disconnect, device number 107 [ 885.347299][T23379] netlink: 'syz.0.6258': attribute type 1 has an invalid length. [ 885.356248][T23378] netlink: 262 bytes leftover after parsing attributes in process `syz.4.6259'. [ 885.436367][T23379] bond1: entered promiscuous mode [ 885.441785][T23379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 885.478199][T23384] ipvlan2: entered allmulticast mode [ 885.500191][T23384] bond1: entered allmulticast mode [ 885.751149][ T8142] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 885.817102][T23394] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6258'. [ 885.910587][T23379] ipvlan3: entered allmulticast mode [ 885.988564][ T8142] usb 4-1: Using ep0 maxpacket: 8 [ 885.999633][ T8142] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 886.008478][ T8142] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 886.020158][ T8142] usb 4-1: config 0 has no interface number 0 [ 886.026678][T23401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6264'. [ 886.029350][ T8142] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 886.048390][ T8142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.056663][ T8142] usb 4-1: Product: syz [ 886.061341][ T8142] usb 4-1: Manufacturer: syz [ 886.066184][ T8142] usb 4-1: SerialNumber: syz [ 886.192419][ T8142] usb 4-1: config 0 descriptor?? [ 886.200748][ T8142] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 886.208043][ T8142] uvcvideo 4-1:0.31: No valid video chain found. [ 886.850874][T23413] Bluetooth: MGMT ver 1.23 [ 886.868202][T23413] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 888.629921][ T8132] usb 4-1: USB disconnect, device number 108 [ 889.037758][ T29] audit: type=1400 audit(1776367203.791:1318): avc: denied { accept } for pid=23447 comm="syz.1.6282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1 [ 889.079201][ T29] audit: type=1400 audit(1776367203.828:1319): avc: denied { append } for pid=23447 comm="syz.1.6282" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 889.216824][ T8132] IPVS: starting estimator thread 0... [ 889.301888][T23466] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6289'. [ 889.337208][T23461] IPVS: using max 81 ests per chain, 194400 per kthread [ 889.902708][ T8138] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 890.052468][ T8138] usb 1-1: device descriptor read/64, error -71 [ 890.323888][T23488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=23488 comm=syz.3.6298 [ 890.767813][ T8138] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 890.882835][T23488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23488 comm=syz.3.6298 [ 890.909497][ T8138] usb 1-1: device descriptor read/64, error -71 [ 891.039039][ T8138] usb usb1-port1: attempt power cycle [ 893.065462][ T8138] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 893.150595][ T8138] usb 1-1: device descriptor read/8, error -71 [ 895.758613][T23544] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6314'. [ 895.871762][ T8138] IPVS: starting estimator thread 0... [ 895.969925][T23548] IPVS: using max 47 ests per chain, 112800 per kthread [ 896.035193][ T8132] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 896.078972][T23562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6322'. [ 896.210007][ T8132] usb 2-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 896.240821][ T8132] usb 2-1: config 127 has 0 interfaces, different from the descriptor's value: 1 [ 896.252244][ T8132] usb 2-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice= e.76 [ 896.270542][ T8132] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.605927][ T8138] usb 2-1: USB disconnect, device number 90 [ 898.142145][T23597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6334'. [ 898.158785][T23597] bridge0: port 1(geneve1) entered blocking state [ 898.165361][T23597] bridge0: port 1(geneve1) entered disabled state [ 898.171899][T23597] geneve1: entered allmulticast mode [ 898.178450][T23597] geneve1: entered promiscuous mode [ 898.184094][T23597] bridge0: port 1(geneve1) entered blocking state [ 898.190577][T23597] bridge0: port 1(geneve1) entered forwarding state [ 898.200011][T23597] netlink: 'syz.3.6334': attribute type 10 has an invalid length. [ 898.590312][T23612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6340'. [ 898.893496][T23622] €Â0: renamed from batadv_slave_1 (while UP) [ 899.144496][T23636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6350'. [ 899.298669][T23641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6352'. [ 899.308712][T23641] netlink: 'syz.2.6352': attribute type 10 has an invalid length. [ 899.425040][ T29] audit: type=1400 audit(1776367213.369:1320): avc: denied { create } for pid=23627 comm="syz.3.6348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 899.643349][T23650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6354'. [ 899.974674][T23657] trusted_key: syz.3.6359 sent an empty control message without MSG_MORE. [ 900.023331][T23599] Bluetooth: hci2: command tx timeout [ 900.458708][T23599] Bluetooth: hci0: command 0x0406 tx timeout [ 901.782426][T23689] 9p: Bad value for 'wfdno' [ 903.258169][T23724] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6384'. [ 903.633511][T23730] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 904.128111][T23740] block nbd3: not configured, cannot reconfigure [ 904.184945][ T5815] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 904.287233][T23751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=23751 comm=syz.1.6397 [ 904.348969][ T5815] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 904.368644][ T5815] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 904.382443][ T5815] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 904.406753][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 904.431493][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 904.432998][ T5815] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 904.433023][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 904.433043][ T5815] usb 1-1: Product: syz [ 904.433064][ T5815] usb 1-1: Manufacturer: syz [ 904.437764][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 904.437782][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 904.456303][ T5815] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 904.456324][ T5815] cdc_wdm 1-1:1.0: Unknown control protocol [ 904.481706][T23751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23751 comm=syz.1.6397 [ 904.564253][T17669] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 904.726807][T17669] usb 4-1: Using ep0 maxpacket: 8 [ 904.728244][T17669] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 904.728269][T17669] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.728287][T17669] usb 4-1: config 0 has no interface number 0 [ 904.729986][T17669] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 904.767866][T17669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.791794][T17669] usb 4-1: Product: syz [ 904.791814][T17669] usb 4-1: Manufacturer: syz [ 904.791828][T17669] usb 4-1: SerialNumber: syz [ 904.797079][T17669] usb 4-1: config 0 descriptor?? [ 904.835990][T17669] uvcvideo 4-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 904.836021][T17669] uvcvideo 4-1:0.31: No valid video chain found. [ 904.877331][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 4 bytes [ 904.878299][T17669] usb 1-1: USB disconnect, device number 88 [ 904.952697][T23771] lo speed is unknown, defaulting to 1000 [ 904.952796][T23771] lo speed is unknown, defaulting to 1000 [ 904.959247][T23771] lo speed is unknown, defaulting to 1000 [ 904.988576][T23771] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 905.018345][T23773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6405'. [ 905.045589][T23771] lo speed is unknown, defaulting to 1000 [ 905.047190][T23771] lo speed is unknown, defaulting to 1000 [ 905.048570][T23771] lo speed is unknown, defaulting to 1000 [ 905.050103][T23771] lo speed is unknown, defaulting to 1000 [ 905.058533][T23771] lo speed is unknown, defaulting to 1000 [ 905.102264][T23771] lo speed is unknown, defaulting to 1000 [ 905.103648][T23771] lo speed is unknown, defaulting to 1000 [ 905.339003][T23780] 9p: Bad value for 'wfdno' [ 905.451606][T23784] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6410'. [ 906.211603][T23800] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 906.723874][T23808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=23808 comm=syz.4.6419 [ 906.792925][T23812] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 906.819477][T23808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23808 comm=syz.4.6419 [ 907.062174][T23824] €Â0: renamed from batadv_slave_1 (while UP) [ 907.166920][ T8142] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 907.363856][ T8142] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 907.374746][ T8142] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 907.383748][ T8142] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 907.392938][ T8142] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.402370][ T8142] usb 2-1: config 0 descriptor?? [ 907.536573][ T5815] usb 4-1: USB disconnect, device number 109 [ 907.988974][ T5815] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 908.186283][ T5815] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 908.199583][ T5815] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 908.218591][ T5815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 908.235180][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 908.249165][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 908.263401][ T5815] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 908.272806][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 908.280855][ T5815] usb 4-1: Product: syz [ 908.298298][ T5815] usb 4-1: Manufacturer: syz [ 908.312830][ T5815] cdc_wdm 4-1:1.0: skipping garbage [ 908.320705][ T5815] cdc_wdm 4-1:1.0: skipping garbage [ 908.328301][ T5815] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 908.335100][ T5815] cdc_wdm 4-1:1.0: Unknown control protocol [ 908.757898][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 4 bytes [ 908.766244][ T5815] usb 4-1: USB disconnect, device number 110 [ 909.046777][T23875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6446'. [ 909.135261][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 909.183959][ T29] audit: type=1400 audit(1776367222.374:1321): avc: denied { setopt } for pid=23881 comm="syz.2.6449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 909.206912][ T29] audit: type=1400 audit(1776367222.402:1322): avc: denied { connect } for pid=23881 comm="syz.2.6449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 909.710446][T23892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6453'. [ 910.007431][T23904] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 910.087910][T17669] usb 2-1: USB disconnect, device number 91 [ 910.264913][ T5815] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 910.429124][ T5815] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 910.437884][ T5815] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 910.448103][ T5815] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 910.457280][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 910.468343][ T5815] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 910.480793][ T5815] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 910.489898][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 910.497939][ T5815] usb 1-1: Product: syz [ 910.502094][ T5815] usb 1-1: Manufacturer: syz [ 910.512640][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 910.518416][ T5815] cdc_wdm 1-1:1.0: skipping garbage [ 910.524518][ T5815] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 910.530759][ T5815] cdc_wdm 1-1:1.0: Unknown control protocol [ 910.603806][T23923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=23923 comm=syz.1.6466 [ 910.658634][T23923] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23923 comm=syz.1.6466 [ 910.959431][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 6 bytes [ 910.966901][ T5815] usb 1-1: USB disconnect, device number 89 [ 911.050825][T23929] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 912.147615][T23943] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 912.412344][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6475'. [ 912.630703][T23954] netlink: 'syz.0.6475': attribute type 10 has an invalid length. [ 913.047807][ T29] audit: type=1400 audit(1776367225.936:1323): avc: denied { ioctl } for pid=23973 comm="syz.2.6483" path="socket:[92895]" dev="sockfs" ino=92895 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 913.302691][T23976] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 913.489877][T23988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=23988 comm=syz.1.6489 [ 913.662637][T23988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=23988 comm=syz.1.6489 [ 914.097243][T24015] nbd: must specify a size in bytes for the device [ 914.168224][T24018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6498'. [ 914.235003][T24018] bridge0: port 3(geneve1) entered blocking state [ 914.251178][T24018] bridge0: port 3(geneve1) entered disabled state [ 914.268211][T24018] geneve1: entered allmulticast mode [ 914.293533][T24018] geneve1: entered promiscuous mode [ 914.301369][T24018] bridge0: port 3(geneve1) entered blocking state [ 914.307894][T24018] bridge0: port 3(geneve1) entered forwarding state [ 914.318783][T24023] netlink: 'syz.1.6498': attribute type 10 has an invalid length. [ 914.351574][T24023] bridge0: port 3(geneve1) entered disabled state [ 914.358105][T24023] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.365416][T24023] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.415235][T24023] bridge0: port 3(geneve1) entered blocking state [ 914.421717][T24023] bridge0: port 3(geneve1) entered forwarding state [ 914.428653][T24023] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.435751][T24023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.443178][T24023] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.450311][T24023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 914.466725][T24023] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 915.224658][ T29] audit: type=1400 audit(1776367227.947:1324): avc: denied { setopt } for pid=24038 comm="syz.3.6511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 915.271217][T24041] netlink: 770 bytes leftover after parsing attributes in process `syz.1.6510'. [ 915.430079][T24052] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6516'. [ 915.618782][ T5815] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 915.636110][T24058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6518'. [ 915.667837][T24058] netlink: 'syz.1.6518': attribute type 10 has an invalid length. [ 915.676961][T24058] bridge0: port 3(geneve1) entered disabled state [ 915.683581][T24058] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.690782][T24058] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.793498][ T5815] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 915.802161][ T5815] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 915.812745][ T5815] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 915.821964][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 915.834359][ T5815] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 915.847865][ T5815] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 915.857050][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 915.865382][ T5815] usb 4-1: Product: syz [ 915.870095][ T5815] usb 4-1: Manufacturer: syz [ 915.883185][ T5815] cdc_wdm 4-1:1.0: skipping garbage [ 915.956360][ T5815] cdc_wdm 4-1:1.0: skipping garbage [ 915.963284][ T5815] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 915.970138][ T5815] cdc_wdm 4-1:1.0: Unknown control protocol [ 916.010281][T24060] nbd: must specify a size in bytes for the device [ 916.067518][ T29] audit: type=1400 audit(1776367228.732:1325): avc: denied { ioctl } for pid=24063 comm="syz.0.6521" path="socket:[93172]" dev="sockfs" ino=93172 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 916.343506][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 6 bytes [ 916.357834][ T8145] usb 4-1: USB disconnect, device number 111 [ 918.020565][T24088] netlink: 41 bytes leftover after parsing attributes in process `syz.3.6532'. [ 918.063300][T24088] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6532'. [ 918.087735][T24088] netlink: 41 bytes leftover after parsing attributes in process `syz.3.6532'. [ 918.237524][T24099] Bluetooth: MGMT ver 1.23 [ 919.094993][T24122] netlink: 'syz.3.6544': attribute type 25 has an invalid length. [ 919.747006][T24142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6553'. [ 920.532271][T17126] Bluetooth: hci0: command 0x0406 tx timeout [ 920.801299][ T29] audit: type=1400 audit(1776367233.096:1326): avc: denied { accept } for pid=24148 comm="syz.1.6555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 921.995508][T24186] syzkaller0: entered promiscuous mode [ 922.001069][T24186] syzkaller0: entered allmulticast mode [ 922.562935][T24191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24191 comm=syz.0.6573 [ 922.790826][T24195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24195 comm=syz.4.6575 [ 922.849108][ T5815] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 922.943405][ T29] audit: type=1400 audit(1776367235.071:1327): avc: denied { map } for pid=24201 comm="syz.2.6578" path="socket:[95442]" dev="sockfs" ino=95442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 923.067110][ T5815] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.092451][ T5815] usb 2-1: config 0 has no interfaces? [ 923.108148][ T5815] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 923.117338][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.135501][ T5815] usb 2-1: Product: syz [ 923.151044][ T5815] usb 2-1: Manufacturer: syz [ 923.155664][ T5815] usb 2-1: SerialNumber: syz [ 923.166200][ T5815] usb 2-1: config 0 descriptor?? [ 923.529257][T24224] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 923.767138][T24232] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6591'. [ 923.942199][ T5815] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 924.127874][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 924.152789][ T5815] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 924.241652][ T5815] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 924.263785][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.288565][ T5815] usb 1-1: config 0 descriptor?? [ 925.044914][T24245] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 925.789833][T24273] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6606'. [ 925.863267][ T5815] usb 2-1: USB disconnect, device number 92 [ 926.619275][T24282] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 926.665057][ T5815] usb 1-1: USB disconnect, device number 90 [ 926.866441][T24296] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6615'. [ 927.239759][T24315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24315 comm=syz.1.6623 [ 928.824086][T24353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6637'. [ 929.728598][T24392] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6655'. [ 930.526337][T24409] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6662'. [ 930.620177][T24417] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6666'. [ 930.697637][T24423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6669'. [ 930.787074][T24423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6669'. [ 930.938956][T24423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6669'. [ 931.372942][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6680'. [ 931.414356][T24460] syzkaller0: entered promiscuous mode [ 931.420007][T24460] syzkaller0: entered allmulticast mode [ 931.497428][ T29] audit: type=1400 audit(1776367242.960:1328): avc: denied { relabelfrom } for pid=24453 comm="syz.4.6682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 931.518130][ T29] audit: type=1400 audit(1776367242.960:1329): avc: denied { relabelto } for pid=24453 comm="syz.4.6682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 931.675782][T24468] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6684'. [ 931.684944][T24467] syzkaller1: entered promiscuous mode [ 931.690535][T24467] syzkaller1: entered allmulticast mode [ 932.021272][T24476] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6689'. [ 932.397684][ T8138] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 932.584104][ T8138] usb 4-1: Using ep0 maxpacket: 32 [ 932.602687][ T8138] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 932.610898][ T8138] usb 4-1: config 0 has no interface number 0 [ 932.635030][ T8138] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 932.651797][ T8138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.669616][ T8138] usb 4-1: Product: syz [ 932.673779][ T8138] usb 4-1: Manufacturer: syz [ 932.726445][ T8138] usb 4-1: SerialNumber: syz [ 932.750783][ T8138] usb 4-1: config 0 descriptor?? [ 932.845178][T24494] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6694'. [ 933.157673][T24505] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 933.576918][T17126] Bluetooth: hci5: command 0x0406 tx timeout [ 933.644020][ T8138] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 933.654897][ T8138] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 933.882164][ T8138] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 933.902198][ T8138] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 935.010392][ T8142] usb 4-1: USB disconnect, device number 112 [ 935.311636][T17126] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 935.325075][T17126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 935.345129][T17126] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 935.386944][T17126] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 935.417458][T17126] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 935.522183][T24563] lo speed is unknown, defaulting to 1000 [ 936.677581][T24585] 9p: Bad value for 'wfdno' [ 936.913825][T24563] lo speed is unknown, defaulting to 1000 [ 937.652080][T23599] Bluetooth: hci4: command tx timeout [ 937.753318][T24563] chnl_net:caif_netlink_parms(): no params data found [ 937.867725][T24563] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.906763][T24563] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.930429][T24563] bridge_slave_0: entered allmulticast mode [ 937.952560][T24563] bridge_slave_0: entered promiscuous mode [ 937.968616][T24563] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.975898][T24563] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.986252][T24563] bridge_slave_1: entered allmulticast mode [ 937.994707][T24563] bridge_slave_1: entered promiscuous mode [ 938.032799][T24563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.055387][T24563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.088469][T24563] team0: Port device team_slave_0 added [ 938.099300][T24563] team0: Port device team_slave_1 added [ 938.152947][T24563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.170983][T24563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.212956][T24563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.229463][T24563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.236496][T24563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.265040][T24563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.340120][T24563] hsr_slave_0: entered promiscuous mode [ 938.352735][T24563] hsr_slave_1: entered promiscuous mode [ 938.362898][T24563] debugfs: 'hsr0' already exists in 'hsr' [ 938.369026][T24563] Cannot create hsr debugfs directory [ 938.854171][T24563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 938.866498][T24563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.984560][T24563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.002188][T24563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.089360][T24563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.101564][T24563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.202663][T24563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 939.213557][T24563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.394736][T24563] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 939.423592][T24563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 939.433298][T24563] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 939.447567][T24563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 939.546239][T24636] 9p: Bad value for 'wfdno' [ 939.557670][T24563] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 939.568641][T24563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 939.592991][T24563] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 939.606672][T24563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 939.719560][T24563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.853631][T24563] 8021q: adding VLAN 0 to HW filter on device team0 [ 939.873281][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.880387][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 939.904025][T11528] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.911121][T11528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.917164][T23599] Bluetooth: hci4: command tx timeout [ 940.604856][T24660] netlink: 'syz.2.6752': attribute type 1 has an invalid length. [ 940.613743][T24660] __nla_validate_parse: 1 callbacks suppressed [ 940.613758][T24660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6752'. [ 940.839235][T24563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 940.849043][ T8145] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 940.948000][T24563] veth0_vlan: entered promiscuous mode [ 940.994120][T24563] veth1_vlan: entered promiscuous mode [ 941.011709][ T8145] usb 1-1: device descriptor read/64, error -71 [ 941.092500][T24563] veth0_macvtap: entered promiscuous mode [ 941.129098][T24563] veth1_macvtap: entered promiscuous mode [ 941.168770][T24674] 9p: Bad value for 'wfdno' [ 941.199110][T24563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 941.209998][T24563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 941.262558][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.275165][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.297971][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.315115][ T8145] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 941.339653][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 941.409433][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.430938][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.470995][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 941.479025][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.521000][ T8145] usb 1-1: device descriptor read/64, error -71 [ 941.655114][ T8145] usb usb1-port1: attempt power cycle [ 942.074071][ T8145] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 942.107988][ T8145] usb 1-1: device descriptor read/8, error -71 [ 942.268805][T23599] Bluetooth: hci4: command tx timeout [ 942.453327][ T8145] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 942.486267][ T8145] usb 1-1: device descriptor read/8, error -71 [ 942.626834][ T8145] usb usb1-port1: unable to enumerate USB device [ 943.934513][T24708] 9p: Bad value for 'wfdno' [ 944.501354][T23599] Bluetooth: hci4: command tx timeout [ 946.745622][ T8133] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 946.907475][ T8133] usb 2-1: device descriptor read/64, error -71 [ 947.182901][ T8133] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 947.268054][T24783] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6798'. [ 947.731029][ T8133] usb 2-1: device descriptor read/64, error -71 [ 947.861279][ T8133] usb usb2-port1: attempt power cycle [ 948.088649][ T8142] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 948.229680][ T8133] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 948.273538][ T8133] usb 2-1: device descriptor read/8, error -71 [ 948.274275][ T8142] usb 4-1: Using ep0 maxpacket: 8 [ 948.321379][ T8142] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 948.331740][ T8142] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 948.342409][ T8142] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 948.448095][ T8142] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 948.457438][ T8142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.474677][ T8142] usbtmc 4-1:16.0: bulk endpoints not found [ 948.674251][T24809] 9p: Bad value for 'wfdno' [ 949.302991][ T8133] usb 2-1: new full-speed USB device number 96 using dummy_hcd [ 949.326467][ T8133] usb 2-1: device descriptor read/8, error -71 [ 949.465368][ T8133] usb usb2-port1: unable to enumerate USB device [ 950.043766][T24822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.058403][T24822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.075523][ T8143] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 950.267238][ T8143] usb 2-1: Using ep0 maxpacket: 8 [ 950.285110][ T8143] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 950.294153][ T8143] usb 2-1: config 0 has no interface number 0 [ 950.314692][T24830] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6816'. [ 950.336859][ T8143] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 950.346931][ T8143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.355251][ T8143] usb 2-1: Product: syz [ 950.360003][ T8143] usb 2-1: Manufacturer: syz [ 950.364934][ T8143] usb 2-1: SerialNumber: syz [ 950.672868][ T8143] usb 2-1: config 0 descriptor?? [ 950.914828][ T8143] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 950.922947][ T8143] uvcvideo 2-1:0.31: Failed to initialize entity for entity 32774 [ 950.931278][ T8143] uvcvideo 2-1:0.31: Failed to register entities (-22). [ 951.016722][T24842] 9p: Bad value for 'wfdno' [ 951.130397][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6822'. [ 951.145940][ T8133] usb 2-1: USB disconnect, device number 97 [ 951.174999][ T8143] usb 4-1: USB disconnect, device number 113 [ 951.686813][ T8143] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 951.867483][ T8143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.910345][ T8143] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 951.940903][ T8143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.968958][ T8143] usb 4-1: Product: syz [ 951.978399][ T8143] usb 4-1: Manufacturer: syz [ 951.990983][ T8143] usb 4-1: SerialNumber: syz [ 952.009066][ T8143] usb 4-1: config 0 descriptor?? [ 952.031087][ T8143] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 952.073058][T24898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=24898 comm=syz.2.6845 [ 952.150595][T24900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24900 comm=syz.2.6845 [ 952.251551][ T8143] usb 4-1: USB disconnect, device number 114 [ 952.780607][T24917] 9p: Bad value for 'wfdno' [ 952.887468][T24923] tipc: Enabling of bearer rejected, failed to enable media [ 952.899144][T24923] syzkaller0: entered promiscuous mode [ 952.905195][T24923] syzkaller0: entered allmulticast mode [ 953.236633][ T8132] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 953.431883][ T8132] usb 4-1: Using ep0 maxpacket: 16 [ 953.496208][ T8132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.612175][ T8132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.622295][ T8132] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 953.635904][ T8132] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 953.644996][ T8132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.656223][ T8132] usb 4-1: config 0 descriptor?? [ 953.726495][T24950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=24950 comm=syz.2.6867 [ 953.813372][T24950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=24950 comm=syz.2.6867 [ 954.117011][ T8132] hid_parser_main: 5 callbacks suppressed [ 954.117032][ T8132] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 954.234216][ T8132] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 954.247036][ T8132] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 954.260562][ T8132] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 954.270797][ T8132] microsoft 0003:045E:07DA.001A: unknown main item tag 0x0 [ 954.293352][ T8132] hid_map_usage: 8075 callbacks suppressed [ 954.293371][ T8132] HID 045e:07da: Invalid code 65791 type 1 [ 954.305604][ T8132] HID 045e:07da: Invalid code 768 type 1 [ 954.317192][ T8132] HID 045e:07da: Invalid code 769 type 1 [ 954.334737][ T8132] HID 045e:07da: Invalid code 770 type 1 [ 954.345659][ T8132] HID 045e:07da: Invalid code 771 type 1 [ 954.357689][ T8132] HID 045e:07da: Invalid code 772 type 1 [ 954.407570][ T8132] HID 045e:07da: Invalid code 773 type 1 [ 954.433740][ T8132] HID 045e:07da: Invalid code 774 type 1 [ 954.488183][T24925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.500405][ T8132] HID 045e:07da: Invalid code 775 type 1 [ 954.981786][ T8132] HID 045e:07da: Invalid code 776 type 1 [ 955.309359][T24925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.380987][ T8132] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001A/input/input34 [ 955.428461][T24925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.505627][T24925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.523024][T24969] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 955.529566][T24969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 955.565873][ T8132] microsoft 0003:045E:07DA.001A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 955.651434][T24969] vhci_hcd vhci_hcd.0: Device attached [ 955.688804][ T8132] usb 4-1: USB disconnect, device number 115 [ 955.713969][T24970] vhci_hcd: connection closed [ 955.716956][T11526] vhci_hcd vhci_hcd.1: stop threads [ 955.789998][T11526] vhci_hcd vhci_hcd.1: release socket [ 955.834235][T11526] vhci_hcd vhci_hcd.1: disconnect device [ 955.903520][T24972] fido_id[24972]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 956.071127][T24986] 9p: Bad value for 'wfdno' [ 956.799328][T24995] Invalid source name [ 957.510004][T25011] Invalid source name [ 957.825176][T25014] syzkaller1: entered promiscuous mode [ 957.830807][T25014] syzkaller1: entered allmulticast mode [ 959.581136][T25040] dlm: Unknown command passed to DLM device : 3 [ 959.581136][T25040] [ 960.237835][T25053] €Â0: renamed from batadv_slave_1 (while UP) [ 960.509346][T25065] syzkaller0: entered promiscuous mode [ 960.519124][T25065] syzkaller0: entered allmulticast mode [ 961.513895][T25077] netlink: 'syz.3.6909': attribute type 1 has an invalid length. [ 961.521869][T25077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6909'. [ 964.476580][T25113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6918'. [ 964.491858][T25113] netlink: 'syz.1.6918': attribute type 10 has an invalid length. [ 965.202007][ T8143] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 965.262113][T25130] Invalid source name [ 965.343362][T25132] fuse: fd is not a fuse device [ 965.396772][ T8143] usb 4-1: device descriptor read/64, error -71 [ 965.744778][ T8143] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 965.960111][ T8143] usb 4-1: device descriptor read/64, error -71 [ 966.420488][ T8143] usb usb4-port1: attempt power cycle [ 967.271483][ T8143] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 967.377060][ T8143] usb 4-1: device descriptor read/8, error -71 [ 968.531181][T25165] netlink: 'syz.4.6938': attribute type 1 has an invalid length. [ 969.405236][T25174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6940'. [ 969.423256][T25174] bridge0: port 3(geneve1) entered blocking state [ 969.429884][T25174] bridge0: port 3(geneve1) entered disabled state [ 969.437322][T25174] geneve1: entered allmulticast mode [ 969.444014][T25174] geneve1: entered promiscuous mode [ 969.449646][T25174] bridge0: port 3(geneve1) entered blocking state [ 969.456150][T25174] bridge0: port 3(geneve1) entered forwarding state [ 969.464709][T25174] netlink: 'syz.3.6940': attribute type 10 has an invalid length. [ 969.473058][T25174] bridge0: port 3(geneve1) entered disabled state [ 969.479599][T25174] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.487200][T25174] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.498004][T25174] bridge0: port 3(geneve1) entered blocking state [ 969.504520][T25174] bridge0: port 3(geneve1) entered forwarding state [ 969.511310][T25174] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.518433][T25174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.525859][T25174] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.532964][T25174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.543116][T25174] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 970.808147][T25180] netlink: 'syz.1.6943': attribute type 1 has an invalid length. [ 970.816060][T25180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6943'. [ 970.820681][T25178] lo speed is unknown, defaulting to 1000 [ 970.948273][T25178] lo speed is unknown, defaulting to 1000 [ 971.120232][T25185] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 971.468700][ T8143] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 971.487402][ T8145] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 971.671595][ T8145] usb 4-1: Using ep0 maxpacket: 32 [ 971.688680][ T8143] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 971.703365][ T8145] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 971.729298][ T8143] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 971.828918][T25205] lo speed is unknown, defaulting to 1000 [ 972.698067][ T8145] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 972.708494][ T8145] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 972.718750][ T8143] usb 1-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 972.727833][ T8145] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 972.736904][ T8143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.878706][T25205] lo speed is unknown, defaulting to 1000 [ 973.081866][ T8145] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 973.093326][ T8143] usb 1-1: config 0 descriptor?? [ 973.098733][ T8145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.121976][ T8143] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 973.153568][ T8145] usb 4-1: config 0 descriptor?? [ 973.416531][ T8145] usb 4-1: USB disconnect, device number 120 [ 974.091182][ T29] audit: type=1400 audit(1776367282.267:1330): avc: denied { watch } for pid=25225 comm="syz.1.6958" path="/173/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 974.446072][ T8138] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 974.697880][T25240] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6962'. [ 975.052976][ T8138] usb 4-1: Using ep0 maxpacket: 8 [ 975.061979][ T8138] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 975.072911][ T8138] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 975.094714][ T8138] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 975.115579][ T8138] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 975.133610][ T8138] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 975.159154][ T8138] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 975.176362][ T8138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.322903][ T8142] usb 1-1: USB disconnect, device number 95 [ 975.437734][ T8138] usb 4-1: usb_control_msg returned -32 [ 975.457061][ T8138] usbtmc 4-1:16.0: can't read capabilities [ 975.545333][T25244] syzkaller0: entered promiscuous mode [ 975.562932][T25244] syzkaller0: entered allmulticast mode [ 975.732506][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 975.888427][T25252] Invalid source name [ 976.089468][T17669] usb 4-1: USB disconnect, device number 121 [ 976.097564][T25231] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 976.122961][T25250] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 976.983566][T25265] dlm: Unknown command passed to DLM device : 3 [ 976.983566][T25265] [ 977.006175][T25273] netlink: 'syz.4.6972': attribute type 2 has an invalid length. [ 977.508878][T25290] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6974'. [ 977.989549][T23599] Bluetooth: hci3: command 0x0406 tx timeout [ 978.393630][T25296] dlm: Unknown command passed to DLM device : 3 [ 978.393630][T25296] [ 979.381153][T25321] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 980.174352][T25327] netlink: 'syz.0.6986': attribute type 10 has an invalid length. [ 981.803320][T25303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 982.289732][T25340] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6988'. [ 982.616716][T25341] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 983.142042][T25344] lo speed is unknown, defaulting to 1000 [ 984.011505][T25344] lo speed is unknown, defaulting to 1000 [ 985.066880][T25373] Invalid source name [ 987.072984][T25387] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7002'. [ 987.188084][T25390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7004'. [ 987.729614][ T1033] Bluetooth: hci1: Frame reassembly failed (-84) [ 989.846585][T17126] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 989.851367][T23599] Bluetooth: hci1: command 0x1003 tx timeout [ 989.882258][T25411] Invalid source name [ 990.480684][T25415] loop9: detected capacity change from 0 to 7 [ 991.435687][T25421] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 991.717068][ C0] blk_print_req_error: 5 callbacks suppressed [ 991.717088][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 991.732357][ C0] buffer_io_error: 5 callbacks suppressed [ 991.732371][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 991.749271][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 991.758479][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 991.766712][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 991.775913][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 991.785481][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 991.794646][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 991.803330][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 991.812492][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 991.820706][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 991.829864][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 991.837855][T25415] ldm_validate_partition_table(): Disk read failed. [ 991.847996][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 991.857164][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 991.865237][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 991.874386][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 991.882341][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 991.891501][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 991.899795][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 991.908973][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 991.916960][T25415] Dev loop9: unable to read RDB block 0 [ 991.923514][T25415] loop9: unable to read partition table [ 991.929455][T25415] loop9: partition table beyond EOD, truncated [ 991.935646][T25415] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 992.096701][T25424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=25424 comm=syz.0.7015 [ 992.409696][T25424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25424 comm=syz.0.7015 [ 993.247186][T25446] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 993.520701][T17669] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 993.723520][T17669] usb 4-1: Using ep0 maxpacket: 8 [ 993.735579][T17669] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 993.738891][T25459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=25459 comm=syz.2.7027 [ 993.745809][T17669] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 993.772243][T17669] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 993.782864][T17669] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 993.793020][T17669] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 993.806227][T17669] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 993.815644][T17669] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.828902][T25459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25459 comm=syz.2.7027 [ 994.051381][T17669] usb 4-1: usb_control_msg returned -32 [ 994.057541][T17669] usbtmc 4-1:16.0: can't read capabilities [ 994.199955][T25463] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 994.661963][T17669] usb 4-1: USB disconnect, device number 122 [ 994.667700][T25444] usbtmc 4-1:16.0: usb_control_msg returned -71 [ 994.709549][T25464] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -19 [ 994.865894][T25473] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7029'. [ 999.306177][T25542] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7050'. [ 1000.069375][T25548] Invalid source name [ 1000.182158][T25551] Invalid source name [ 1000.791606][T25513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1000.934413][T17669] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 1001.140459][T17669] usb 1-1: device descriptor read/64, error -71 [ 1001.508013][T17669] usb 1-1: new full-speed USB device number 97 using dummy_hcd [ 1001.638087][ T8127] usb 2-1: new full-speed USB device number 98 using dummy_hcd [ 1001.669411][T25576] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7062'. [ 1001.739778][T17669] usb 1-1: device descriptor read/64, error -71 [ 1001.799193][T25578] netlink: 'syz.2.7063': attribute type 1 has an invalid length. [ 1001.869428][T17669] usb usb1-port1: attempt power cycle [ 1001.931933][ T8127] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.942257][ T8127] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1001.954221][ T8127] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1001.963403][ T8127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.374332][ T8127] usb 2-1: Product: syz [ 1002.378782][ T8127] usb 2-1: Manufacturer: syz [ 1002.383397][ T8127] usb 2-1: SerialNumber: syz [ 1002.391747][ T8127] usb 2-1: config 0 descriptor?? [ 1002.661892][T17669] usb 1-1: new full-speed USB device number 98 using dummy_hcd [ 1003.676180][T17669] usb 1-1: device descriptor read/8, error -71 [ 1003.935617][T17669] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 1005.388694][T17669] usb 1-1: device not accepting address 99, error -71 [ 1005.396914][T17669] usb usb1-port1: unable to enumerate USB device [ 1005.795040][T25618] syzkaller0: entered promiscuous mode [ 1005.805017][T25618] syzkaller0: entered allmulticast mode [ 1006.673075][T25631] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7076'. [ 1007.311152][T25633] loop9: detected capacity change from 0 to 7 [ 1007.593798][ C0] blk_print_req_error: 5 callbacks suppressed [ 1007.593816][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1007.609078][ C0] buffer_io_error: 5 callbacks suppressed [ 1007.609091][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.768184][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1008.777364][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.787966][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1008.797170][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.810462][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1008.819654][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.829854][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1008.832845][ T8145] usb 2-1: USB disconnect, device number 98 [ 1008.839038][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.853558][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1008.862680][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.870590][T25633] ldm_validate_partition_table(): Disk read failed. [ 1008.879132][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1008.888260][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.897612][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1008.906798][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.917310][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1008.926493][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.934888][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1008.944105][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1008.952015][T25633] Dev loop9: unable to read RDB block 0 [ 1008.962809][T25633] loop9: unable to read partition table [ 1008.968761][T25633] loop9: partition table beyond EOD, truncated [ 1008.975813][T25633] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1009.517074][ T8127] usb 1-1: new full-speed USB device number 100 using dummy_hcd [ 1009.691967][ T8127] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1009.704740][ T8127] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1009.715213][ T8127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.725301][ T8127] usb 1-1: Product: syz [ 1009.729615][ T8127] usb 1-1: Manufacturer: syz [ 1009.747620][ T8127] usb 1-1: SerialNumber: syz [ 1009.764004][ T8127] usb 1-1: config 0 descriptor?? [ 1010.084426][T25668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=25668 comm=syz.1.7092 [ 1010.171976][T25668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25668 comm=syz.1.7092 [ 1010.589780][T25680] netlink: 'syz.1.7096': attribute type 1 has an invalid length. [ 1010.597766][T25680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7096'. [ 1012.066755][T25688] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7097'. [ 1012.150648][ T8145] usb 2-1: new full-speed USB device number 99 using dummy_hcd [ 1012.302402][ T8145] usb 2-1: device descriptor read/64, error -71 [ 1012.487545][T25650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1012.573953][ T8145] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1012.737257][ T8145] usb 2-1: device descriptor read/64, error -71 [ 1013.812575][ T8145] usb usb2-port1: attempt power cycle [ 1014.101503][ T8143] usb 1-1: USB disconnect, device number 100 [ 1014.272129][ T8145] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1014.299994][ T8145] usb 2-1: device descriptor read/8, error -71 [ 1014.603176][ T8145] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1015.421617][ T8145] usb 2-1: device descriptor read/8, error -71 [ 1015.587077][ T8145] usb usb2-port1: unable to enumerate USB device [ 1016.129750][T25735] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7112'. [ 1020.394028][T25775] tipc: Started in network mode [ 1020.412397][T25775] tipc: Node identity 765afd5295fc, cluster identity 4711 [ 1020.420103][T25775] tipc: Enabled bearer , priority 0 [ 1020.469541][T25777] syzkaller0: entered promiscuous mode [ 1020.534431][T25777] syzkaller0: entered allmulticast mode [ 1020.593624][T25775] tipc: Resetting bearer [ 1020.631829][T25774] tipc: Resetting bearer [ 1020.656112][T25774] tipc: Disabling bearer [ 1023.819060][T25779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1023.978162][T25801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=25801 comm=syz.2.7138 [ 1024.270793][T25811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25811 comm=syz.2.7138 [ 1024.337782][T15496] Bluetooth: hci1: Frame reassembly failed (-84) [ 1026.434949][T23599] Bluetooth: hci1: command 0x1003 tx timeout [ 1026.448220][T17126] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1028.077633][T25843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=25843 comm=syz.0.7150 [ 1029.300162][T25861] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.376446][T25866] loop9: detected capacity change from 0 to 7 [ 1029.496821][ C1] blk_print_req_error: 5 callbacks suppressed [ 1029.496838][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.512108][ C1] buffer_io_error: 5 callbacks suppressed [ 1029.512121][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1029.557256][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.566412][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1029.598396][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.607595][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1029.677652][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.686838][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1029.695854][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.705057][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1029.723675][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.732872][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1029.787623][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.796841][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1029.804906][T25866] ldm_validate_partition_table(): Disk read failed. [ 1029.815752][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.824917][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1029.842964][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.852170][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1029.861393][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1029.870536][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1029.883042][T25866] Dev loop9: unable to read RDB block 0 [ 1029.894353][T25866] loop9: unable to read partition table [ 1029.900851][T25866] loop9: partition table beyond EOD, truncated [ 1029.907132][T25866] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1031.466594][ T5815] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1031.931201][ T5815] usb 1-1: Using ep0 maxpacket: 16 [ 1031.979437][T23599] Bluetooth: hci5: Unknown advertising packet type: 0x3c [ 1031.980087][T23599] Bluetooth: hci5: adv larger than maximum supported [ 1031.987522][T23599] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1032.462564][T25861] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.544359][T17126] Bluetooth: hci2: command 0x0406 tx timeout [ 1034.090974][T25912] autofs: Bad value for 'fd' [ 1034.134704][T25861] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.231111][T25861] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.258042][T25920] syzkaller0: entered promiscuous mode [ 1034.263745][T25920] syzkaller0: entered allmulticast mode [ 1034.337756][T11530] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.354508][T11530] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.377427][T11530] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.395987][T11530] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.411515][ T8142] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1034.427108][ T5815] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1034.440367][ T5815] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1034.448395][ T5815] usb 1-1: can't read configurations, error -71 [ 1034.597206][ T8142] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.614461][ T8142] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1034.623739][ T8142] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.631765][ T8142] usb 4-1: Product: syz [ 1034.635959][ T8142] usb 4-1: Manufacturer: syz [ 1034.640705][ T8142] usb 4-1: SerialNumber: syz [ 1034.647291][ T8142] usb 4-1: config 0 descriptor?? [ 1034.653665][ T8142] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1034.872921][ T8142] usb 4-1: USB disconnect, device number 123 [ 1037.268972][T25906] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1037.569163][ T29] audit: type=1400 audit(1776367340.840:1331): avc: denied { setopt } for pid=25960 comm="syz.4.7185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1039.408722][T25984] Invalid source name [ 1039.791254][T25988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=25988 comm=syz.4.7192 [ 1040.404765][T25988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=25988 comm=syz.4.7192 [ 1042.307136][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1042.523780][T26016] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.875305][T26016] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.052043][ T8145] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1043.094064][T26016] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.982806][ T29] audit: type=1400 audit(1776367345.887:1332): avc: denied { getopt } for pid=26031 comm="syz.3.7206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1044.279975][ T5815] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1044.293679][ T8145] usb 2-1: config 0 has no interfaces? [ 1044.317685][ T8145] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1044.335058][T26016] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.349809][ T8145] usb 2-1: New USB device strings: Mfr=0, Product=10, SerialNumber=0 [ 1044.369633][ T8145] usb 2-1: Product: syz [ 1044.391498][ T8145] usb 2-1: config 0 descriptor?? [ 1044.450467][ T5815] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.476154][ T5815] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1044.497171][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.512913][ T5815] usb 1-1: Product: syz [ 1044.528880][ T5815] usb 1-1: Manufacturer: syz [ 1044.533484][T26038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=26038 comm=syz.3.7208 [ 1044.549852][ T1141] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.572972][ T5815] usb 1-1: SerialNumber: syz [ 1044.591765][ T5815] usb 1-1: config 0 descriptor?? [ 1044.602433][T15496] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.612336][ T5815] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1044.650825][T15496] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.661534][ T8145] usb 2-1: USB disconnect, device number 103 [ 1044.724931][T15496] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.838655][ T5815] usb 1-1: USB disconnect, device number 103 [ 1045.059892][ T57] Bluetooth: hci1: Frame reassembly failed (-84) [ 1047.062585][T26067] loop9: detected capacity change from 0 to 7 [ 1047.247135][T23599] Bluetooth: hci1: command 0x1003 tx timeout [ 1047.254832][T17126] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1047.977784][ C0] blk_print_req_error: 11 callbacks suppressed [ 1047.977797][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1047.993111][ C0] buffer_io_error: 10 callbacks suppressed [ 1047.993120][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1048.157610][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1048.166865][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1048.176265][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1048.185431][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1048.193480][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1048.202631][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1048.210691][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1048.219797][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1048.230061][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1048.239166][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1048.247061][T26067] ldm_validate_partition_table(): Disk read failed. [ 1048.247975][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1048.262846][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1048.271110][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1048.280272][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1048.288265][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1048.297426][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1048.306011][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1048.315150][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1048.323077][T26067] Dev loop9: unable to read RDB block 0 [ 1048.330677][T26067] loop9: unable to read partition table [ 1048.336441][T26067] loop9: partition table beyond EOD, truncated [ 1048.342735][T26067] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1049.981809][ T29] audit: type=1400 audit(1776367352.115:1333): avc: denied { listen } for pid=26092 comm="syz.1.7227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1050.146047][T26099] Invalid source name [ 1050.657687][ T8132] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1050.934155][ T8132] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.032924][ T8132] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1051.047647][ T8132] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.061951][ T8132] usb 4-1: Product: syz [ 1051.069275][ T8132] usb 4-1: Manufacturer: syz [ 1051.077990][ T8132] usb 4-1: SerialNumber: syz [ 1051.095524][ T8132] usb 4-1: config 0 descriptor?? [ 1051.192300][ T8132] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1051.721529][ T8132] usb 4-1: USB disconnect, device number 124 [ 1052.878224][ T1033] Bluetooth: hci1: Frame reassembly failed (-84) [ 1053.659817][T26140] loop9: detected capacity change from 0 to 7 [ 1054.539848][ C0] blk_print_req_error: 10 callbacks suppressed [ 1054.539868][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1054.555236][ C0] buffer_io_error: 10 callbacks suppressed [ 1054.555258][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1054.698726][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1054.707940][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1054.716324][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1054.725565][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1054.733714][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1054.742957][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1054.751406][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1054.760614][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1054.781299][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1054.790528][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1054.798516][T26140] ldm_validate_partition_table(): Disk read failed. [ 1054.813645][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1054.822915][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1054.834740][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1054.843952][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1054.864745][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1054.873965][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1054.943082][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1054.952393][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1054.960396][T26140] Dev loop9: unable to read RDB block 0 [ 1054.982490][T26140] loop9: unable to read partition table [ 1054.988281][T26140] loop9: partition table beyond EOD, truncated [ 1054.994521][T26140] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1055.069719][T17126] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1055.077872][T23599] Bluetooth: hci1: command 0x1003 tx timeout [ 1055.128486][T17126] Bluetooth: hci0: Unknown advertising packet type: 0x3c [ 1055.128606][T17126] Bluetooth: hci0: adv larger than maximum supported [ 1055.136841][T17126] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1055.910459][T26136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1055.933647][T26159] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7249'. [ 1057.420420][T26136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.692888][T26170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=546 sclass=netlink_route_socket pid=26170 comm=syz.3.7253 [ 1057.840607][T26136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.853569][T26170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=26170 comm=syz.3.7253 [ 1057.986890][T26176] Invalid source name [ 1058.340889][T26136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.609830][T26192] loop9: detected capacity change from 0 to 7 [ 1059.747761][T26192] ldm_validate_partition_table(): Disk read failed. [ 1059.756906][T26192] Dev loop9: unable to read RDB block 0 [ 1059.763416][T26192] loop9: unable to read partition table [ 1059.769202][T26192] loop9: partition table beyond EOD, truncated [ 1059.775607][T26192] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1060.104642][T26199] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7262'. [ 1060.706606][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.726756][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.766617][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.826391][ T57] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.147556][T26241] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7277'. [ 1062.754352][ T8138] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1063.456628][ T8138] usb 4-1: Using ep0 maxpacket: 32 [ 1063.466440][ T8138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1063.478578][ T8138] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1063.530134][ T8138] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1063.540602][ T8138] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.550378][ T8138] usb 4-1: Product: syz [ 1063.554792][ T8138] usb 4-1: Manufacturer: syz [ 1063.559419][ T8138] usb 4-1: SerialNumber: syz [ 1063.569074][ T8138] usb 4-1: config 0 descriptor?? [ 1063.594117][ T8138] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1064.587088][T26244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.335693][ T1023] usb 4-1: Failed to submit usb control message: -110 [ 1065.355905][ T1023] usb 4-1: unable to send the bmi data to the device: -110 [ 1065.369025][ T1023] usb 4-1: unable to get target info from device [ 1065.632750][T26244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.654872][ T1023] usb 4-1: could not get target info (-110) [ 1065.759423][ T1023] usb 4-1: could not probe fw (-110) [ 1066.061578][ T8145] usb 4-1: USB disconnect, device number 125 [ 1066.223732][T26284] 9p: Bad value for 'wfdno' [ 1066.682040][T26285] Invalid source name [ 1067.228467][T26293] loop9: detected capacity change from 0 to 7 [ 1067.392327][ C1] blk_print_req_error: 20 callbacks suppressed [ 1067.392346][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1067.407681][ C1] buffer_io_error: 20 callbacks suppressed [ 1067.407695][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1067.422033][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1067.431182][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1067.503355][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1067.512544][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1067.528604][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1067.537775][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1067.550408][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1067.559562][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1067.570697][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1067.579851][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1068.180363][T26293] ldm_validate_partition_table(): Disk read failed. [ 1068.191315][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1068.200506][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1068.454641][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1068.463860][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1068.476065][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1068.485232][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1068.493231][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1068.502400][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1068.510390][T26293] Dev loop9: unable to read RDB block 0 [ 1068.521933][T26293] loop9: unable to read partition table [ 1068.527668][T26293] loop9: partition table beyond EOD, truncated [ 1068.533905][T26293] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1068.897207][ T8138] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1068.955220][T26298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.060289][ T8138] usb 4-1: Using ep0 maxpacket: 16 [ 1069.194560][T26315] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1069.233976][T26298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.452884][T26320] No control pipe specified [ 1069.545921][T26298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.781794][T26298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.175695][T11526] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.224068][T11526] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.379031][T11530] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.457147][T26333] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1070.985308][ T1023] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.078760][ T8138] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1071.111721][ T8138] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1071.132654][ T8138] usb 4-1: can't read configurations, error -71 [ 1074.525972][T26360] No control pipe specified [ 1078.039462][ T8144] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1078.223387][ T8144] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.349027][ T8144] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1079.143518][ T8144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.172092][ T8144] usb 4-1: Product: syz [ 1079.489006][ T8144] usb 4-1: Manufacturer: syz [ 1079.538551][ T8144] usb 4-1: SerialNumber: syz [ 1079.572201][ T8144] usb 4-1: config 0 descriptor?? [ 1079.600135][ T8144] pn533_usb 4-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 1081.593146][ T8144] usb 4-1: USB disconnect, device number 2 [ 1083.564115][ T8133] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1084.145857][ T8133] usb 2-1: Using ep0 maxpacket: 32 [ 1084.152735][ T8133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 1084.164719][ T8133] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 1084.177860][T26481] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=26481 comm=syz.2.7347 [ 1084.193554][ T8133] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1084.202883][ T8133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.211571][ T8133] usb 2-1: Product: syz [ 1084.215990][ T8133] usb 2-1: Manufacturer: syz [ 1084.220669][ T8133] usb 2-1: SerialNumber: syz [ 1084.230135][ T8133] usb 2-1: config 0 descriptor?? [ 1084.250634][ T8133] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1084.367330][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7351'. [ 1084.554322][T26454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.614610][T26454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.946531][T11528] usb 2-1: Failed to submit usb control message: -71 [ 1084.946794][ T8145] usb 2-1: USB disconnect, device number 104 [ 1085.446341][T11528] usb 2-1: unable to send the bmi data to the device: -71 [ 1085.453562][T11528] usb 2-1: unable to get target info from device [ 1085.459955][T11528] usb 2-1: could not get target info (-71) [ 1085.465819][T11528] usb 2-1: could not probe fw (-71) [ 1085.734988][T26521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7363'. [ 1086.401918][T26531] 9p: Bad value for 'rfdno' [ 1088.438046][T26545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1088.445619][T26545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.734863][T26545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1088.743897][T26556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7374'. [ 1088.757319][T26545] batman_adv: batadv0: Interface deactivated: €Â0 [ 1088.845796][T11523] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.875907][T11523] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.908547][T11523] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.942172][T11523] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.596547][T26576] 9p: Bad value for 'rfdno' [ 1089.719776][T26579] fuse: fd is not a fuse device [ 1090.606213][T26603] fuse: Unknown parameter 'group_id00000000000000000000' [ 1091.112071][ T29] audit: type=1400 audit(1776367390.241:1334): avc: denied { unmount } for pid=24563 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1092.304975][T26633] 9p: Bad value for 'rfdno' [ 1095.559340][T26662] loop9: detected capacity change from 0 to 7 [ 1095.711335][ C1] blk_print_req_error: 5 callbacks suppressed [ 1095.711352][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1095.726567][ C1] buffer_io_error: 5 callbacks suppressed [ 1095.726575][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1095.799446][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1095.808645][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1095.823871][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1095.833070][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1095.844056][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1095.853219][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1095.861412][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1095.870561][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1095.878625][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1095.887800][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1095.895823][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1095.904962][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1095.912816][T26662] ldm_validate_partition_table(): Disk read failed. [ 1095.920329][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1095.929487][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1096.066404][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1096.075612][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1096.085490][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1096.094658][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1096.103035][T26662] Dev loop9: unable to read RDB block 0 [ 1096.109583][T26662] loop9: unable to read partition table [ 1096.115983][T26662] loop9: partition table beyond EOD, truncated [ 1096.122833][T26662] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1097.126931][T26687] 9p: Bad value for 'rfdno' [ 1098.208223][T26705] loop9: detected capacity change from 0 to 7 [ 1098.226344][T26705] ldm_validate_partition_table(): Disk read failed. [ 1098.234404][T26705] Dev loop9: unable to read RDB block 0 [ 1098.241739][T26705] loop9: unable to read partition table [ 1098.248213][T26705] loop9: partition table beyond EOD, truncated [ 1098.254446][T26705] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 1101.400427][T26737] 9pnet_fd: Insufficient options for proto=fd [ 1101.628707][T26739] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 1101.890304][T26745] autofs: Bad value for 'fd' [ 1102.550629][T26763] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.604566][T17126] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1102.642200][T26763] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.755848][T26763] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.319728][ T8145] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1103.718466][T26763] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.753609][ T8145] usb 4-1: Using ep0 maxpacket: 16 [ 1103.760753][ T8145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.795206][ T8145] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.819353][T26777] autofs: Bad value for 'fd' [ 1103.838326][ T8145] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1103.893466][ T8145] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1103.937345][ T8145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.985458][ T8145] usb 4-1: config 0 descriptor?? [ 1104.005529][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.077819][ T57] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.187184][ T57] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.229723][T11528] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.441164][T17126] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1104.473831][ T8145] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1104.560631][T26795] 9p: Bad value for 'wfdno' [ 1104.912981][ T8145] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1104.928741][ T8145] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1104.936429][T26774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.960670][ T8145] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1104.969767][T26774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1104.983130][ T8145] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 1104.999117][T26774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.008618][ T8145] hid_map_usage: 8075 callbacks suppressed [ 1105.008633][ T8145] HID 045e:07da: Invalid code 65791 type 1 [ 1105.023435][T26774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.032029][ T8145] HID 045e:07da: Invalid code 768 type 1 [ 1105.040371][ T8145] HID 045e:07da: Invalid code 769 type 1 [ 1105.047136][ T8145] HID 045e:07da: Invalid code 770 type 1 [ 1105.062689][ T8145] HID 045e:07da: Invalid code 771 type 1 [ 1105.072571][ T8145] HID 045e:07da: Invalid code 772 type 1 [ 1105.176455][ T8145] HID 045e:07da: Invalid code 773 type 1 [ 1105.182642][ T8145] HID 045e:07da: Invalid code 774 type 1 [ 1105.188341][ T8145] HID 045e:07da: Invalid code 775 type 1 [ 1105.194224][ T8145] HID 045e:07da: Invalid code 776 type 1 [ 1105.215901][ T8145] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001B/input/input35 [ 1105.376571][ T8145] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1105.493240][ T8145] usb 4-1: USB disconnect, device number 3 [ 1108.893556][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1109.293697][T26849] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 1109.504628][T26858] fuse: Unknown parameter 'user_i00000000000000000000' [ 1110.331746][T26868] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1117.833003][T26984] overlayfs: failed to resolve './file0': -2 [ 1122.105377][T27025] 9p: Bad value for 'rfdno' [ 1122.648652][T27027] syzkaller0: entered promiscuous mode [ 1122.673276][T27027] syzkaller0: entered allmulticast mode [ 1123.130537][T27038] netlink: 'syz.0.7519': attribute type 1 has an invalid length. [ 1123.267432][T27038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7519'. [ 1125.708898][ T8138] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1125.885857][ T8138] usb 4-1: Using ep0 maxpacket: 16 [ 1125.904554][ T8138] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.915653][ T8138] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1126.949576][ T8138] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1126.958957][ T8138] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.977088][ T8138] usb 4-1: config 0 descriptor?? [ 1126.999073][ T8138] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1127.762257][T27062] No control pipe specified [ 1129.216653][ T8143] usb 4-1: USB disconnect, device number 4 [ 1129.653646][ T8143] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1129.680428][T27083] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1129.689426][T27083] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1129.743062][T27083] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1129.749520][T27083] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1129.764090][T27083] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1129.770532][T27083] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1129.794642][T27083] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1129.801092][T27083] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1129.815957][T27083] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1129.822420][T27083] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1129.830278][ T8143] usb 4-1: Using ep0 maxpacket: 32 [ 1129.847830][ T8143] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1129.864590][ T8143] usb 4-1: config 0 has no interface number 0 [ 1129.883072][ T8143] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1129.902961][ T8143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.932333][ T8143] usb 4-1: Product: syz [ 1129.943490][ T8143] usb 4-1: Manufacturer: syz [ 1129.956370][ T8143] usb 4-1: SerialNumber: syz [ 1129.973990][T27092] overlayfs: failed to resolve './file0': -2 [ 1130.005103][ T8143] usb 4-1: config 0 descriptor?? [ 1130.070526][T27095] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1131.624780][ T8143] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1132.137374][ T8143] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1132.160298][ T8143] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 1132.272104][ T8143] usb 4-1: USB disconnect, device number 5 [ 1133.220228][T27153] overlayfs: failed to resolve './file0': -2 [ 1133.334075][T27156] 9p: Bad value for 'rfdno' [ 1134.850199][T27174] nvme_fabrics: missing parameter 'transport=%s' [ 1134.856908][T27174] nvme_fabrics: missing parameter 'nqn=%s' [ 1135.337779][T27200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7583'. [ 1135.451107][T27202] 9pnet_fd: Insufficient options for proto=fd [ 1135.954256][T27204] nvme_fabrics: missing parameter 'transport=%s' [ 1135.961246][T27204] nvme_fabrics: missing parameter 'nqn=%s' [ 1136.623082][T27213] netlink: 'syz.3.7588': attribute type 1 has an invalid length. [ 1136.633379][ C1] ------------[ cut here ]------------ [ 1136.640615][ C1] ODEBUG: free active (active state 0) object: ffff888076bc2490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1136.653500][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.2.7590/27217 [ 1136.663692][ C1] Modules linked in: [ 1136.669266][ C1] CPU: 1 UID: 0 PID: 27217 Comm: syz.2.7590 Tainted: G L syzkaller #0 PREEMPT(full) [ 1136.680240][ C1] Tainted: [L]=SOFTLOCKUP [ 1136.684553][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1136.694628][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1136.700458][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 49 e8 0b 41 56 48 8b 14 dd 20 8f 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 5c 01 de 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1136.720088][ C1] RSP: 0018:ffffc90000a08a28 EFLAGS: 00010246 [ 1136.726160][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1136.734140][ C1] RDX: ffffffff8c1b8e60 RSI: ffffffff8c1b8a80 RDI: ffffffff90e5fac0 [ 1136.742126][ C1] RBP: 0000000000000001 R08: ffff888076bc2490 R09: ffffffff8bb2b140 [ 1136.750088][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b8a80 [ 1136.758071][ C1] R13: ffffffff8bb2b180 R14: ffffffff8a7e12d0 R15: ffffc90000a08b28 [ 1136.766059][ C1] FS: 00007f33369106c0(0000) GS:ffff888124403000(0000) knlGS:0000000000000000 [ 1136.774999][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1136.781589][ C1] CR2: 0000001b33f16ff8 CR3: 0000000086621000 CR4: 00000000003526f0 [ 1136.789605][ C1] Call Trace: [ 1136.792883][ C1] [ 1136.795746][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1136.801386][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1136.807212][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1136.812775][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1136.818872][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1136.823813][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1136.828867][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1136.833996][ C1] ? rose_timer_expiry+0x4c0/0x630 [ 1136.839132][ C1] kfree+0x3d0/0x6c0 [ 1136.843027][ C1] rose_timer_expiry+0x53f/0x630 [ 1136.847951][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1136.853437][ C1] call_timer_fn+0x19a/0x640 [ 1136.858038][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1136.863175][ C1] ? mark_held_locks+0x40/0x70 [ 1136.867953][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1136.873479][ C1] __run_timers+0x75f/0xaf0 [ 1136.877988][ C1] ? __pfx___run_timers+0x10/0x10 [ 1136.883052][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1136.888098][ C1] run_timer_base+0x114/0x190 [ 1136.892773][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1136.897989][ C1] run_timer_softirq+0x1a/0x50 [ 1136.902763][ C1] handle_softirqs+0x1ea/0xa00 [ 1136.907553][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1136.912859][ C1] ? _raw_spin_unlock+0x3e/0x50 [ 1136.917733][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 1136.923371][ C1] __irq_exit_rcu+0x162/0x210 [ 1136.928074][ C1] irq_exit_rcu+0x9/0x30 [ 1136.932315][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1136.937962][ C1] [ 1136.940885][ C1] [ 1136.943804][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1136.949793][ C1] RIP: 0010:pte_offset_map_lock+0x41/0x320 [ 1136.955601][ C1] Code: 41 54 55 48 89 f5 53 48 83 ec 70 4c 8d 6c 24 10 48 89 14 24 48 c7 44 24 10 b3 8a b5 41 49 c1 ed 03 48 c7 44 24 18 28 11 f3 8d <4c> 01 e8 48 c7 44 24 20 00 86 60 82 c7 00 f1 f1 f1 f1 c7 40 04 00 [ 1136.975221][ C1] RSP: 0018:ffffc900043df598 EFLAGS: 00000a02 [ 1136.981313][ C1] RAX: dffffc0000000000 RBX: ffff8880553a2018 RCX: ffffc900043df990 [ 1136.989272][ C1] RDX: 0000200000760000 RSI: ffff8880553a2018 RDI: ffff88807838ee40 [ 1136.997254][ C1] RBP: ffff8880553a2018 R08: 0000000000000007 R09: 0000000000000000 [ 1137.005238][ C1] R10: 000000003f047007 R11: 0000000000000000 R12: ffffc900043df990 [ 1137.013221][ C1] R13: 1ffff9200087beb5 R14: ffffc900043df990 R15: ffffc900043df930 [ 1137.021197][ C1] ? next_uptodate_folio+0x831/0xdd0 [ 1137.026532][ C1] filemap_map_pages+0x412/0x2140 [ 1137.031566][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1137.036533][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1137.042055][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1137.047594][ C1] do_fault+0x985/0x1750 [ 1137.051858][ C1] __handle_mm_fault+0x187d/0x2a00 [ 1137.057003][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1137.062384][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1137.067858][ C1] ? pte_offset_map_lock+0x174/0x320 [ 1137.073147][ C1] ? find_held_lock+0x2b/0x80 [ 1137.077865][ C1] ? follow_page_pte+0x4d0/0x13f0 [ 1137.082905][ C1] handle_mm_fault+0x36d/0xa20 [ 1137.087684][ C1] __get_user_pages+0x1178/0x32a0 [ 1137.092741][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1137.098125][ C1] populate_vma_page_range+0x267/0x3f0 [ 1137.103610][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1137.109595][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1137.115421][ C1] ? do_mmap+0x93f/0x12f0 [ 1137.119762][ C1] __mm_populate+0x107/0x3a0 [ 1137.124367][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1137.129481][ C1] ? up_write+0x28c/0x4f0 [ 1137.133836][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1137.138417][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1137.143538][ C1] ? do_futex+0x192/0x350 [ 1137.147867][ C1] ? __pfx_do_futex+0x10/0x10 [ 1137.152537][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 1137.157231][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 1137.162183][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1137.167489][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1137.172774][ C1] __x64_sys_mmap+0x125/0x190 [ 1137.177470][ C1] do_syscall_64+0x10b/0xf80 [ 1137.182053][ C1] ? clear_bhb_loop+0x40/0x90 [ 1137.186735][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.192619][ C1] RIP: 0033:0x7f333599c819 [ 1137.197033][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.216654][ C1] RSP: 002b:00007f3336910028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1137.225071][ C1] RAX: ffffffffffffffda RBX: 00007f3335c15fa0 RCX: 00007f333599c819 [ 1137.233050][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1137.241027][ C1] RBP: 00007f3335a32c91 R08: ffffffffffffffff R09: 0000000000000000 [ 1137.248991][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1137.256970][ C1] R13: 00007f3335c16038 R14: 00007f3335c15fa0 R15: 00007ffe416fc688 [ 1137.264959][ C1] [ 1137.267955][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1137.275209][ C1] CPU: 1 UID: 0 PID: 27217 Comm: syz.2.7590 Tainted: G L syzkaller #0 PREEMPT(full) [ 1137.286113][ C1] Tainted: [L]=SOFTLOCKUP [ 1137.290405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1137.300434][ C1] Call Trace: [ 1137.303687][ C1] [ 1137.306504][ C1] dump_stack_lvl+0x100/0x190 [ 1137.311157][ C1] vpanic+0x552/0x970 [ 1137.315114][ C1] ? __pfx_vpanic+0x10/0x10 [ 1137.319594][ C1] panic+0xd1/0xe0 [ 1137.323287][ C1] ? __pfx_panic+0x10/0x10 [ 1137.327684][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1137.332773][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1137.338120][ C1] ? debug_print_object+0x18e/0x2a0 [ 1137.343296][ C1] __warn.cold+0x191/0x328 [ 1137.347700][ C1] __report_bug+0x296/0x3d0 [ 1137.352186][ C1] ? debug_print_object+0x18e/0x2a0 [ 1137.357364][ C1] ? __pfx___report_bug+0x10/0x10 [ 1137.362375][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1137.367377][ C1] report_bug_entry+0xe1/0x290 [ 1137.372114][ C1] ? debug_print_object+0x19b/0x2a0 [ 1137.377290][ C1] handle_bug+0x1cd/0x2a0 [ 1137.381611][ C1] exc_invalid_op+0x17/0x50 [ 1137.386125][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1137.390947][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1137.396732][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 62 49 e8 0b 41 56 48 8b 14 dd 20 8f 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 5c 01 de 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1137.416310][ C1] RSP: 0018:ffffc90000a08a28 EFLAGS: 00010246 [ 1137.422348][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1137.430290][ C1] RDX: ffffffff8c1b8e60 RSI: ffffffff8c1b8a80 RDI: ffffffff90e5fac0 [ 1137.438237][ C1] RBP: 0000000000000001 R08: ffff888076bc2490 R09: ffffffff8bb2b140 [ 1137.446188][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b8a80 [ 1137.454135][ C1] R13: ffffffff8bb2b180 R14: ffffffff8a7e12d0 R15: ffffc90000a08b28 [ 1137.462086][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1137.467708][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1137.473313][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1137.479098][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1137.484622][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1137.490763][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1137.495693][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1137.500702][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1137.505798][ C1] ? rose_timer_expiry+0x4c0/0x630 [ 1137.510903][ C1] kfree+0x3d0/0x6c0 [ 1137.514800][ C1] rose_timer_expiry+0x53f/0x630 [ 1137.519729][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1137.525178][ C1] call_timer_fn+0x19a/0x640 [ 1137.529767][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1137.534859][ C1] ? mark_held_locks+0x40/0x70 [ 1137.539619][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1137.545063][ C1] __run_timers+0x75f/0xaf0 [ 1137.549555][ C1] ? __pfx___run_timers+0x10/0x10 [ 1137.554565][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1137.559568][ C1] run_timer_base+0x114/0x190 [ 1137.564231][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1137.569409][ C1] run_timer_softirq+0x1a/0x50 [ 1137.574163][ C1] handle_softirqs+0x1ea/0xa00 [ 1137.578921][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1137.584184][ C1] ? _raw_spin_unlock+0x3e/0x50 [ 1137.589009][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 1137.594635][ C1] __irq_exit_rcu+0x162/0x210 [ 1137.599306][ C1] irq_exit_rcu+0x9/0x30 [ 1137.603529][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1137.609137][ C1] [ 1137.612043][ C1] [ 1137.614960][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1137.620923][ C1] RIP: 0010:pte_offset_map_lock+0x41/0x320 [ 1137.626719][ C1] Code: 41 54 55 48 89 f5 53 48 83 ec 70 4c 8d 6c 24 10 48 89 14 24 48 c7 44 24 10 b3 8a b5 41 49 c1 ed 03 48 c7 44 24 18 28 11 f3 8d <4c> 01 e8 48 c7 44 24 20 00 86 60 82 c7 00 f1 f1 f1 f1 c7 40 04 00 [ 1137.646302][ C1] RSP: 0018:ffffc900043df598 EFLAGS: 00000a02 [ 1137.652349][ C1] RAX: dffffc0000000000 RBX: ffff8880553a2018 RCX: ffffc900043df990 [ 1137.660295][ C1] RDX: 0000200000760000 RSI: ffff8880553a2018 RDI: ffff88807838ee40 [ 1137.668255][ C1] RBP: ffff8880553a2018 R08: 0000000000000007 R09: 0000000000000000 [ 1137.676212][ C1] R10: 000000003f047007 R11: 0000000000000000 R12: ffffc900043df990 [ 1137.684175][ C1] R13: 1ffff9200087beb5 R14: ffffc900043df990 R15: ffffc900043df930 [ 1137.692132][ C1] ? next_uptodate_folio+0x831/0xdd0 [ 1137.697402][ C1] filemap_map_pages+0x412/0x2140 [ 1137.702408][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1137.707338][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1137.712798][ C1] ? __pfx_filemap_map_pages+0x10/0x10 [ 1137.718236][ C1] do_fault+0x985/0x1750 [ 1137.722455][ C1] __handle_mm_fault+0x187d/0x2a00 [ 1137.727549][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1137.732902][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 1137.738338][ C1] ? pte_offset_map_lock+0x174/0x320 [ 1137.743603][ C1] ? find_held_lock+0x2b/0x80 [ 1137.748263][ C1] ? follow_page_pte+0x4d0/0x13f0 [ 1137.753262][ C1] handle_mm_fault+0x36d/0xa20 [ 1137.758006][ C1] __get_user_pages+0x1178/0x32a0 [ 1137.763021][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 1137.768422][ C1] populate_vma_page_range+0x267/0x3f0 [ 1137.773862][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1137.779826][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 1137.785626][ C1] ? do_mmap+0x93f/0x12f0 [ 1137.789946][ C1] __mm_populate+0x107/0x3a0 [ 1137.794512][ C1] ? __pfx___mm_populate+0x10/0x10 [ 1137.799598][ C1] ? up_write+0x28c/0x4f0 [ 1137.803920][ C1] vm_mmap_pgoff+0x37f/0x470 [ 1137.808486][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1137.813570][ C1] ? do_futex+0x192/0x350 [ 1137.817875][ C1] ? __pfx_do_futex+0x10/0x10 [ 1137.822530][ C1] ksys_mmap_pgoff+0xe4/0x610 [ 1137.827178][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 1137.832091][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1137.837353][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 1137.842618][ C1] __x64_sys_mmap+0x125/0x190 [ 1137.847283][ C1] do_syscall_64+0x10b/0xf80 [ 1137.851848][ C1] ? clear_bhb_loop+0x40/0x90 [ 1137.856499][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.862364][ C1] RIP: 0033:0x7f333599c819 [ 1137.866750][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.886335][ C1] RSP: 002b:00007f3336910028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1137.894737][ C1] RAX: ffffffffffffffda RBX: 00007f3335c15fa0 RCX: 00007f333599c819 [ 1137.902697][ C1] RDX: b635773f06ebbeef RSI: 0000000000b36000 RDI: 0000200000000000 [ 1137.910654][ C1] RBP: 00007f3335a32c91 R08: ffffffffffffffff R09: 0000000000000000 [ 1137.918602][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1137.926990][ C1] R13: 00007f3335c16038 R14: 00007f3335c15fa0 R15: 00007ffe416fc688 [ 1137.934952][ C1] [ 1137.938214][ C1] Kernel Offset: disabled [ 1137.942521][ C1] Rebooting in 86400 seconds..