last executing test programs: 8.312194388s ago: executing program 4 (id=2919): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.581856999s ago: executing program 4 (id=2921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000e9fffffeffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffefff0000000001000601000000004400050000001100000000000000000000000001000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.44239145s ago: executing program 4 (id=2928): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$rds(0x15, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x3a, 0x8f, &(0x7f00000000c0)="9826d427fa1366ebd63585491a7489e1c41127ec1fead9d920c137f0a48b5d68d0596f40c06f505b074585c4317e8b0e53094a36ca02533f7e44", &(0x7f00000004c0)=""/143, 0x1, 0x0, 0x5, 0xe6, &(0x7f0000000580)="60cc460a39", &(0x7f0000000640)="b36787cc7d0400e4411f5c3e90adb5fc80d720e0f1a37918116a0cb9868e9eaf5bb4592359b6e1a6a61f256a0b8e28b3c5748bc48770de4132136215f6b123d126a4e71b7bbe89131e890fdba6ca7c79eb56be126ad094690def2ff2b050b682460b243c17bf5fa0ab143771808a8b9d9b55cc66b63aa21eac63a200f47da4c4258c49f6889b0a9091ef3aeb43aed5093679c35eb890fe66bb52c808e579a08d73fcf52deaff6423628c5d7f3ff447f3c1e516515dc0f7e291ab6ff05cfbee10ae5adbf12a4bc6d6c987b92ff81b67621b82543917c74732696dab1c22daf02b800b252ba134", 0x0, 0x0, 0xe}, 0x50) pipe(&(0x7f0000000080)) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x7, 0x4, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fb, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8000005000000005baf2312bbc2", 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.123012103s ago: executing program 1 (id=2930): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={r3, 0x8}, &(0x7f0000000080)=0x8) 5.883838112s ago: executing program 1 (id=2931): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.748297832s ago: executing program 1 (id=2933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) recvmsg(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4008800) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045568, 0x6) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000440)={0xa, 0x4e28, 0x200008, @empty, 0x1}, 0x1c, &(0x7f0000000380)}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x8001}, 0x9c) close_range(r7, 0xffffffffffffffff, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 5.501320146s ago: executing program 4 (id=2937): unshare(0x2a060400) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x24044044, 0x0, 0x32) 4.469458042s ago: executing program 4 (id=2939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000280)=[{0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000180)) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r4, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff", 0x15) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2572], &(0x7f0000000140)='GPL\x00'}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r8 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r8, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r8, r7}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r6, r5}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000300)={r9}) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0x8, 0x6, {{0x9, 0x4, 0x2, 0x25, 0x24, 0x64, 0x0, 0x3, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@generic={0x44, 0xf, "37cf010c80d952c1e7cef44021"}]}}}}}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@deltclass={0x70, 0x29, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x8, 0xa}, {0x4, 0x2}, {0xfff3, 0xc}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_skbprio={0xc}, @tclass_kind_options=@c_prio={0x9}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x80, 0x5}}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) sendmsg$nl_route_sched(r10, 0x0, 0x0) 3.723513913s ago: executing program 1 (id=2946): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f00000002c0)={0x8000000c}) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xfc}}, 0x0) getpeername$l2tp(r3, 0x0, &(0x7f0000000100)) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) close(r1) 3.405836192s ago: executing program 4 (id=2948): unshare(0x22020600) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000040) r1 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff7d) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x1e, 0x1, 0xe6ed, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) recvmmsg(r2, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) bind$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2a000200", 0x4) recvmsg(r1, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r1, &(0x7f00000008c0), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) syz_emit_ethernet(0x3b6, 0x0, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000004c0)={0x1f, @any, 0x7}, 0xa) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x5, 0x0) 2.389949339s ago: executing program 0 (id=2950): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) pread64(r3, &(0x7f0000000340)=""/129, 0x81, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000020000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) 2.223144431s ago: executing program 1 (id=2952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.11315928s ago: executing program 3 (id=2953): socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 2.000104879s ago: executing program 0 (id=2955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x28, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0x9) r5 = accept4(r2, 0x0, 0x0, 0x80800) read$alg(r5, &(0x7f0000000300)=""/214, 0xd6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x1402, 0x800, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x74cb587c83486993) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000004c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x88, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xadc, 0x52}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0efda1a7fde2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8a342e6b6040"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040844}, 0x81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae5}, {0x6, 0x2, 0x7, 0x2}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet(r10, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x3ec0}], 0x1}}], 0x400000000000292, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1.930805498s ago: executing program 1 (id=2956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x400c884}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1070000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x48084}, 0x8000) recvmsg(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x28, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4008800) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045568, 0x6) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r6 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d1000905070000000000000905", @ANYRES32], 0x0) syz_usb_control_io$printer(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = dup(r8) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000440)={0xa, 0x4e28, 0x200008, @empty, 0x1}, 0x1c, &(0x7f0000000380)}, 0x4048043) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x8001}, 0x9c) close_range(r7, 0xffffffffffffffff, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 1.819417495s ago: executing program 2 (id=2957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.81793132s ago: executing program 3 (id=2958): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21af", 0x80}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x159}, {&(0x7f0000000d00)}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.580295158s ago: executing program 3 (id=2959): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21af", 0x80}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502", 0x159}, {&(0x7f0000000d00)}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.473749984s ago: executing program 2 (id=2960): unshare(0x2a060400) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, 0x0, 0x0) sendto(r0, &(0x7f0000000040)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x24044044, 0x0, 0x32) 1.407442936s ago: executing program 0 (id=2961): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001a40)=@newtaction={0x18, 0x30, 0x12f, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000000)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='?', 0x1}], 0x1}}], 0x1, 0xc005) sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}], 0x1}}], 0x2, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c8}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000500)) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) 1.370008775s ago: executing program 2 (id=2962): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de00000000", 0x70) 1.316526982s ago: executing program 3 (id=2963): r0 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r0, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0b", 0xa3}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x1, 0x0) 1.237526194s ago: executing program 2 (id=2964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000804}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r2 = socket$alg(0x26, 0x5, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x28, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4480}, 0x20000000) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:', @ANYRESOCT], 0x9) r5 = accept4(r2, 0x0, 0x0, 0x80800) read$alg(r5, &(0x7f0000000300)=""/214, 0xd6) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r5) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x1402, 0x800, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x74cb587c83486993) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000004c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r6, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x88, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xadc, 0x52}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="0efda1a7fde2"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @random="8a342e6b6040"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040844}, 0x81) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae5}, {0x6, 0x2, 0x7, 0x2}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet(r9, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x3ec0}], 0x1}}], 0x400000000000292, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6c}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 1.040997564s ago: executing program 3 (id=2965): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304, 0x39}, '\x00', "0bf70000000000000000061000000001", "00000004", "27ddbd03c97a8d06"}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002100)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r3, 0x10, 0x70bd27, 0x25dfdc00, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) unshare(0x20000400) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) unshare(0x20040000) syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x600) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e7e0c4e97081eb03760b5e00000000000000030000206110500000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 833.324303ms ago: executing program 0 (id=2966): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x9, 0x24, 0x68, 0x0, 0x8, 0x21, 0x0, @remote, @local}, {{0x4e20, 0x4e24, 0x4, 0x1, 0x9, 0x0, 0x0, 0x0, 0x2, "7dead8", 0x4, "a1d0e7"}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 596.268392ms ago: executing program 0 (id=2967): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xff6d) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 553.749213ms ago: executing program 2 (id=2968): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 305.07164ms ago: executing program 2 (id=2969): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00"/56, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000e9fffffeffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffefff0000000001000601000000004400050000001100000000000000000000000001000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 230.711354ms ago: executing program 0 (id=2970): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000400)={0x1f, 0xffff}, 0xe) listen(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES64=r1], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r8}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 0s ago: executing program 3 (id=2971): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) kernel console output (not intermixed with test programs): ig 0 has no interface number 0 [ 183.384149][ T5728] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 183.384177][ T5728] usb 3-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 183.384201][ T5728] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 183.384227][ T5728] usb 3-1: config 0 interface 196 has no altsetting 0 [ 183.396905][ T5728] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 183.396990][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.397045][ T5728] usb 3-1: Product: syz [ 183.397091][ T5728] usb 3-1: Manufacturer: syz [ 183.397133][ T5728] usb 3-1: SerialNumber: syz [ 183.620873][ T5728] usb 3-1: config 0 descriptor?? [ 183.646448][ T7069] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.106317][ T5728] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 184.106654][ T5728] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 184.180110][ T5728] usb 3-1: USB disconnect, device number 9 [ 184.926817][ T7116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.472'. [ 185.202457][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 185.339014][ T7133] netlink: 'syz.0.479': attribute type 1 has an invalid length. [ 185.388558][ T7133] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.477629][ T7133] macvlan2: entered promiscuous mode [ 185.477658][ T7133] macvlan2: entered allmulticast mode [ 185.600524][ T7133] bond1: (slave ip6gretap1): making interface the new active one [ 185.612986][ T7133] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 186.180443][ T7153] netlink: 64 bytes leftover after parsing attributes in process `syz.4.486'. [ 187.299157][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.504'. [ 188.030202][ T7213] netlink: 64 bytes leftover after parsing attributes in process `syz.0.513'. [ 188.219382][ T7209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.317036][ T7214] macvlan2: entered promiscuous mode [ 188.317064][ T7214] macvlan2: entered allmulticast mode [ 188.356694][ T7218] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 188.706038][ T7233] netlink: 'syz.4.521': attribute type 1 has an invalid length. [ 188.706764][ T7235] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 188.943619][ T7233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.083543][ T7235] 8021q: adding VLAN 0 to HW filter on device bond2 [ 189.808772][ T7280] netlink: 'syz.2.539': attribute type 1 has an invalid length. [ 189.927474][ T7280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.047089][ T7311] netlink: 64 bytes leftover after parsing attributes in process `syz.4.550'. [ 191.603353][ T6740] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 191.751499][ T6740] usb 1-1: Using ep0 maxpacket: 32 [ 191.753787][ T6740] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 191.753816][ T6740] usb 1-1: config 0 has no interface number 0 [ 191.753862][ T6740] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 191.753890][ T6740] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 191.753914][ T6740] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 191.753940][ T6740] usb 1-1: config 0 interface 196 has no altsetting 0 [ 191.829864][ T6740] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 191.829897][ T6740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.829918][ T6740] usb 1-1: Product: syz [ 191.829931][ T6740] usb 1-1: Manufacturer: syz [ 191.829946][ T6740] usb 1-1: SerialNumber: syz [ 191.880523][ T6740] usb 1-1: config 0 descriptor?? [ 191.906742][ T7318] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 192.418541][ T6740] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 192.418842][ T6740] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 192.679950][ T6740] usb 1-1: USB disconnect, device number 2 [ 192.894151][ T7353] tipc: Enabled bearer , priority 0 [ 192.941216][ T7340] syz.2.564 (7340) used greatest stack depth: 16952 bytes left [ 193.065973][ T7352] tipc: Resetting bearer [ 193.237314][ T7350] tipc: Disabling bearer [ 193.471713][ T7369] nbd0: detected capacity change from 0 to 63 [ 193.626246][ T5610] block nbd0: Receive control failed (result -104) [ 194.497814][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.497888][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.534236][ T7453] netlink: 'syz.0.602': attribute type 1 has an invalid length. [ 195.624051][ T7453] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.794980][ T7491] netlink: 236 bytes leftover after parsing attributes in process `syz.2.614'. [ 197.961900][ T7515] Bluetooth: MGMT ver 1.23 [ 198.161553][ T7522] nbd: must specify at least one socket [ 199.150583][ T7551] netlink: 64 bytes leftover after parsing attributes in process `syz.0.641'. [ 199.744833][ T7565] 8021q: adding VLAN 0 to HW filter on device bond4 [ 202.061495][ T5708] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 202.253187][ T5708] usb 4-1: Using ep0 maxpacket: 32 [ 202.256734][ T5708] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 202.256764][ T5708] usb 4-1: config 0 has no interface number 0 [ 202.256810][ T5708] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 202.256838][ T5708] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 202.256862][ T5708] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 202.256888][ T5708] usb 4-1: config 0 interface 196 has no altsetting 0 [ 202.259838][ T5708] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 202.259871][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.259893][ T5708] usb 4-1: Product: syz [ 202.259907][ T5708] usb 4-1: Manufacturer: syz [ 202.259922][ T5708] usb 4-1: SerialNumber: syz [ 202.379009][ T5708] usb 4-1: config 0 descriptor?? [ 202.389300][ T7623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 202.443376][ T7644] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 202.613680][ T7644] 8021q: adding VLAN 0 to HW filter on device bond2 [ 202.639140][ T7647] macvlan2: entered promiscuous mode [ 202.639168][ T7647] macvlan2: entered allmulticast mode [ 202.639516][ T7647] bond2: entered allmulticast mode [ 202.639577][ T7647] bond2: entered promiscuous mode [ 202.651157][ T7647] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 202.710239][ T7647] team0: Port device macvlan2 added [ 202.900049][ T5708] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 202.900294][ T5708] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 202.951742][ T5708] usb 4-1: USB disconnect, device number 3 [ 203.258219][ T7654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 203.455138][ T7666] netlink: 'syz.2.689': attribute type 1 has an invalid length. [ 203.615103][ T7672] netlink: 'syz.4.690': attribute type 1 has an invalid length. [ 203.615128][ T7672] netlink: 244 bytes leftover after parsing attributes in process `syz.4.690'. [ 203.675388][ T7666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.795687][ T7670] macvlan3: entered promiscuous mode [ 203.795715][ T7670] macvlan3: entered allmulticast mode [ 203.796046][ T7670] bond3: entered allmulticast mode [ 203.796109][ T7670] bond3: entered promiscuous mode [ 203.839138][ T7670] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 203.853528][ T7670] team0: Port device macvlan3 added [ 204.213178][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 204.233827][ T7692] netlink: 64 bytes leftover after parsing attributes in process `syz.0.699'. [ 204.641662][ T7705] netlink: 'syz.3.705': attribute type 1 has an invalid length. [ 204.905403][ T7717] netlink: 88 bytes leftover after parsing attributes in process `syz.0.709'. [ 204.905429][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.709'. [ 204.905445][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 205.338927][ T7705] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.455457][ T7710] macvlan3: entered promiscuous mode [ 205.455485][ T7710] macvlan3: entered allmulticast mode [ 205.481983][ T7710] bond2: entered allmulticast mode [ 205.482054][ T7710] bond2: entered promiscuous mode [ 205.482986][ T7710] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 205.751011][ T7710] team0: Port device macvlan3 added [ 207.103619][ T7780] loop9: detected capacity change from 0 to 7 [ 207.230550][ T7780] Dev loop9: unable to read RDB block 7 [ 207.230598][ T7780] loop9: unable to read partition table [ 207.230811][ T7780] loop9: partition table beyond EOD, truncated [ 207.230847][ T7780] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 207.462092][ T6740] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 207.613150][ T6740] usb 1-1: Using ep0 maxpacket: 16 [ 207.616496][ T6740] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 207.616528][ T6740] usb 1-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.616556][ T6740] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.616584][ T6740] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 207.616613][ T6740] usb 1-1: config 0 interface 0 has no altsetting 0 [ 207.665027][ T6740] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 207.665112][ T6740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.665165][ T6740] usb 1-1: Product: syz [ 207.665206][ T6740] usb 1-1: Manufacturer: syz [ 207.665240][ T6740] usb 1-1: SerialNumber: syz [ 207.762807][ T6740] usb 1-1: config 0 descriptor?? [ 207.769791][ T7785] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.017562][ T7780] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 208.171815][ T7806] syzkaller0: entered promiscuous mode [ 208.171844][ T7806] syzkaller0: entered allmulticast mode [ 208.316524][ T5610] Bluetooth: hci2: link tx timeout [ 208.316735][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 208.349152][ T5610] Bluetooth: hci2: link tx timeout [ 208.349170][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 208.454719][ T6740] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 208.540213][ T7806] tipc: Enabled bearer , priority 0 [ 208.608191][ T7804] tipc: Resetting bearer [ 208.997508][ T6740] usb 1-1: USB disconnect, device number 3 [ 209.024080][ T4948] synaptics_usb 1-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 209.025371][ T7804] tipc: Disabling bearer [ 209.745221][ T5610] Bluetooth: hci2: link tx timeout [ 209.745242][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.801467][ T5610] Bluetooth: hci2: link tx timeout [ 209.801487][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.005749][ T5610] Bluetooth: hci2: link tx timeout [ 210.005772][ T5610] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 210.393398][ T5610] Bluetooth: hci2: command 0x0406 tx timeout [ 211.078129][ T7873] netlink: 88 bytes leftover after parsing attributes in process `syz.2.762'. [ 211.078158][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.762'. [ 211.078182][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.762'. [ 212.781933][ T7898] syz.3.769 (7898) used greatest stack depth: 16304 bytes left [ 213.837883][ T5728] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 214.001464][ T5728] usb 1-1: Using ep0 maxpacket: 32 [ 214.008316][ T5728] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 214.008345][ T5728] usb 1-1: config 0 has no interface number 0 [ 214.008391][ T5728] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 214.008417][ T5728] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 214.008440][ T5728] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 214.008466][ T5728] usb 1-1: config 0 interface 196 has no altsetting 0 [ 214.085554][ T5728] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 214.085587][ T5728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.085616][ T5728] usb 1-1: Product: syz [ 214.085628][ T5728] usb 1-1: Manufacturer: syz [ 214.085641][ T5728] usb 1-1: SerialNumber: syz [ 214.134393][ T5728] usb 1-1: config 0 descriptor?? [ 214.135416][ T7935] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 214.299725][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 214.447958][ T5728] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 214.448262][ T5728] ipheth 1-1:0.196: probe with driver ipheth failed with error -71 [ 214.522038][ T5728] usb 1-1: USB disconnect, device number 4 [ 214.905373][ T7968] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 214.905397][ T7968] netlink: 232 bytes leftover after parsing attributes in process `syz.2.797'. [ 214.905989][ T7968] netlink: 'syz.2.797': attribute type 1 has an invalid length. [ 215.454168][ T7980] netlink: 'syz.2.803': attribute type 1 has an invalid length. [ 215.825694][ T7980] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.965306][ T7982] macvlan4: entered promiscuous mode [ 215.965336][ T7982] macvlan4: entered allmulticast mode [ 215.965788][ T7982] bond4: entered allmulticast mode [ 215.965857][ T7982] bond4: entered promiscuous mode [ 216.045384][ T7982] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 216.112496][ T7982] team0: Port device macvlan4 added [ 216.377575][ T7997] netlink: 64 bytes leftover after parsing attributes in process `syz.4.808'. [ 216.377980][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.809'. [ 216.633893][ T8005] loop4: detected capacity change from 0 to 7 [ 216.838518][ T8005] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 216.838546][ T8005] loop4: partition table partially beyond EOD, truncated [ 216.838831][ T8005] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 217.872567][ T6740] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 218.023531][ T6740] usb 4-1: Using ep0 maxpacket: 32 [ 218.025943][ T6740] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 218.025972][ T6740] usb 4-1: config 0 has no interface number 0 [ 218.026019][ T6740] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 218.026046][ T6740] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 218.026070][ T6740] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 218.026096][ T6740] usb 4-1: config 0 interface 196 has no altsetting 0 [ 218.028977][ T6740] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 218.029008][ T6740] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.029028][ T6740] usb 4-1: Product: syz [ 218.029043][ T6740] usb 4-1: Manufacturer: syz [ 218.029057][ T6740] usb 4-1: SerialNumber: syz [ 218.250526][ T6740] usb 4-1: config 0 descriptor?? [ 218.262031][ T8035] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 218.431451][ T5708] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 218.605771][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 218.619660][ T5708] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.619704][ T5708] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 218.619760][ T5708] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.619790][ T5708] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.619818][ T5708] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.619846][ T5708] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.619875][ T5708] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.619905][ T5708] usb 5-1: config 168 interface 0 has no altsetting 0 [ 218.689624][ T5708] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.689673][ T5708] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 218.689718][ T5708] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.689748][ T5708] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.689775][ T5708] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.689802][ T5708] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.689831][ T5708] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.689861][ T5708] usb 5-1: config 168 interface 0 has no altsetting 0 [ 218.739614][ T5708] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 218.739660][ T5708] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 218.739701][ T5708] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 218.739730][ T5708] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.739756][ T5708] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.739782][ T5708] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.739809][ T5708] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 218.739839][ T5708] usb 5-1: config 168 interface 0 has no altsetting 0 [ 218.868988][ T5708] usb 5-1: string descriptor 0 read error: -22 [ 218.869131][ T5708] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 218.869158][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.016113][ T5708] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 219.128908][ T6740] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 219.129221][ T6740] ipheth 4-1:0.196: probe with driver ipheth failed with error -71 [ 219.243998][ T6745] usb 5-1: USB disconnect, device number 3 [ 219.317891][ T6740] usb 4-1: USB disconnect, device number 4 [ 219.428616][ T8064] netlink: 64 bytes leftover after parsing attributes in process `syz.0.835'. [ 220.230111][ T8086] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 220.230145][ T8086] netlink: 232 bytes leftover after parsing attributes in process `syz.0.842'. [ 220.230162][ T8086] netlink: 'syz.0.842': attribute type 1 has an invalid length. [ 221.519810][ T8126] netlink: 'syz.2.860': attribute type 1 has an invalid length. [ 221.624016][ T8132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.862'. [ 221.724547][ T8126] 8021q: adding VLAN 0 to HW filter on device bond5 [ 221.822821][ T8131] macvlan5: entered promiscuous mode [ 221.822849][ T8131] macvlan5: entered allmulticast mode [ 221.823122][ T8131] bond5: entered allmulticast mode [ 221.823164][ T8131] bond5: entered promiscuous mode [ 221.827853][ T8131] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 221.843999][ T8131] team0: Port device macvlan5 added [ 221.844700][ T8132] bond0: left allmulticast mode [ 221.886449][ T8132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.173116][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 222.173156][ T5603] Bluetooth: hci1: command 0x0406 tx timeout [ 222.196298][ T5602] Bluetooth: hci0: command 0x0406 tx timeout [ 222.196337][ T5602] Bluetooth: hci4: command 0x0406 tx timeout [ 222.259690][ T8139] netlink: 64 bytes leftover after parsing attributes in process `syz.0.865'. [ 222.662632][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.866'. [ 223.072361][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.874'. [ 223.190717][ T8171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.876'. [ 223.689700][ T8185] lo speed is unknown, defaulting to 1000 [ 223.689817][ T8185] lo speed is unknown, defaulting to 1000 [ 223.698019][ T8192] : renamed from lo [ 223.982110][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 30 seconds [ 224.002196][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 30 seconds [ 224.002236][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 30 seconds [ 224.002263][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 30 seconds [ 224.054585][ T8185] speed is unknown, defaulting to 1000 [ 224.152200][ T8185] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 224.152256][ T8185] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 224.152300][ T8185] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 224.301471][ T8185] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 224.563520][ T8185] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 225.200093][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 225.294009][ T8231] netlink: 'syz.3.894': attribute type 1 has an invalid length. [ 225.294026][ T8231] netlink: 'syz.3.894': attribute type 2 has an invalid length. [ 225.722830][ T8185] speed is unknown, defaulting to 1000 [ 225.883873][ T8185] speed is unknown, defaulting to 1000 [ 225.924694][ T8185] speed is unknown, defaulting to 1000 [ 226.201563][ T8185] speed is unknown, defaulting to 1000 [ 226.247826][ T8185] speed is unknown, defaulting to 1000 [ 227.253904][ T8285] speed is unknown, defaulting to 1000 [ 230.832227][ T8406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 231.515524][ T8432] netlink: 260 bytes leftover after parsing attributes in process `syz.0.972'. [ 231.557784][ T8427] speed is unknown, defaulting to 1000 [ 231.705040][ T8436] netlink: 132 bytes leftover after parsing attributes in process `syz.0.975'. [ 232.603392][ T8466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.986'. [ 232.625480][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 233.138544][ T8483] netlink: zone id is out of range [ 233.138559][ T8483] netlink: zone id is out of range [ 233.138567][ T8483] netlink: zone id is out of range [ 233.138575][ T8483] netlink: zone id is out of range [ 233.138583][ T8483] netlink: zone id is out of range [ 233.138591][ T8483] netlink: zone id is out of range [ 233.138599][ T8483] netlink: zone id is out of range [ 233.138608][ T8483] netlink: zone id is out of range [ 233.138616][ T8483] netlink: zone id is out of range [ 233.138624][ T8483] netlink: zone id is out of range [ 233.698867][ T8495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.998'. [ 234.182669][ T8512] netlink: 'syz.0.1004': attribute type 25 has an invalid length. [ 234.425183][ T8510] tipc: Enabled bearer , priority 0 [ 236.438392][ T8505] tipc: Disabling bearer [ 237.273880][ T8563] netlink: 'syz.3.1021': attribute type 25 has an invalid length. [ 237.443139][ T8555] speed is unknown, defaulting to 1000 [ 239.616168][ T8617] netlink: 'syz.4.1042': attribute type 2 has an invalid length. [ 239.616220][ T8617] netlink: 'syz.4.1042': attribute type 2 has an invalid length. [ 239.646704][ T8617] netlink: 'syz.4.1042': attribute type 4 has an invalid length. [ 239.646731][ T8617] netlink: 'syz.4.1042': attribute type 8 has an invalid length. [ 239.646774][ T8617] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1042'. [ 240.086516][ T8642] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1050'. [ 240.262658][ T8642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.439467][ T8642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.489210][ T8642] bond0 (unregistering): Released all slaves [ 240.737581][ T8654] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 240.737603][ T8654] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1055'. [ 240.737619][ T8654] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 241.553940][ T8674] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1062'. [ 241.553966][ T8674] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1062'. [ 241.553982][ T8674] netlink: 'syz.3.1062': attribute type 6 has an invalid length. [ 241.553996][ T8674] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1062'. [ 241.883170][ T8681] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 241.991756][ T8693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 242.033159][ T8692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1066'. [ 242.238664][ T8686] bond5: (slave geneve2): making interface the new active one [ 242.263880][ T8686] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 242.274626][ T14] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.274773][ T14] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.274886][ T14] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.274960][ T14] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 243.138523][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 243.816659][ T8724] speed is unknown, defaulting to 1000 [ 244.032084][ T8759] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1096'. [ 244.053094][ T8753] syzkaller0: entered promiscuous mode [ 244.053157][ T8753] syzkaller0: entered allmulticast mode [ 245.081598][ T6746] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 245.137152][ T8791] netlink: 'syz.2.1107': attribute type 1 has an invalid length. [ 245.441503][ T6746] usb 1-1: Using ep0 maxpacket: 8 [ 245.628869][ T6746] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 245.628913][ T6746] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 245.628955][ T6746] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 245.628999][ T6746] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.629025][ T6746] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.629051][ T6746] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 245.629078][ T6746] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 245.629107][ T6746] usb 1-1: config 168 interface 0 has no altsetting 0 [ 245.929613][ T8802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1107'. [ 246.420331][ T6746] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 246.420381][ T6746] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 246.420426][ T6746] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 246.420456][ T6746] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.420484][ T6746] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.420519][ T6746] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.420548][ T6746] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 246.420577][ T6746] usb 1-1: config 168 interface 0 has no altsetting 0 [ 246.488876][ T6746] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 246.488921][ T6746] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 246.488975][ T6746] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 246.489005][ T6746] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 246.489032][ T6746] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 246.489059][ T6746] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 246.489085][ T6746] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 246.489112][ T6746] usb 1-1: config 168 interface 0 has no altsetting 0 [ 246.604326][ T6746] usb 1-1: string descriptor 0 read error: -22 [ 246.604464][ T6746] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 246.604498][ T6746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.685856][ T6746] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 246.812424][ T8794] bond6: (slave geneve2): making interface the new active one [ 246.832349][ T8794] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 246.947192][ T8802] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.953952][ T3304] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.954049][ T8809] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1116'. [ 246.956421][ T3304] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.957169][ T3304] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 246.957279][ T3304] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 247.128444][ T5708] usb 1-1: USB disconnect, device number 5 [ 247.495798][ T8827] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1121'. [ 247.829006][ T5708] IPVS: starting estimator thread 0... [ 247.962401][ T8836] IPVS: using max 8 ests per chain, 19200 per kthread [ 249.405265][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 250.110862][ T8871] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1140'. [ 250.166504][ T8872] syzkaller0: entered promiscuous mode [ 250.166528][ T8872] syzkaller0: entered allmulticast mode [ 250.203464][ T8872] tipc: Enabled bearer , priority 0 [ 250.286474][ T8868] tipc: Resetting bearer [ 250.357888][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 250.413642][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 250.436382][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 250.475611][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 250.476632][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 250.708498][ T8868] tipc: Disabling bearer [ 251.444981][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 252.511316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 252.565020][ T5611] Bluetooth: hci5: command tx timeout [ 252.882582][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1151'. [ 253.009414][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'. [ 254.077180][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 60 seconds [ 254.133073][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 60 seconds [ 254.133116][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 60 seconds [ 254.133142][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 60 seconds [ 254.468125][ T3304] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.631494][ T5611] Bluetooth: hci5: command tx timeout [ 254.647243][ T8874] speed is unknown, defaulting to 1000 [ 255.061149][ T8968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 255.578001][ T3304] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.664208][ T8974] syzkaller1: entered promiscuous mode [ 255.664254][ T8974] syzkaller1: entered allmulticast mode [ 255.931111][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.931187][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.966861][ T8998] nbd: nbd0 already in use [ 256.102787][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 256.143411][ T9003] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1175'. [ 256.443446][ T9008] netlink: 'syz.3.1177': attribute type 4 has an invalid length. [ 256.443466][ T9008] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1177'. [ 256.514386][ T3304] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.715253][ T5611] Bluetooth: hci5: command tx timeout [ 257.176572][ T3304] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.405737][ T9024] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1182'. [ 257.743539][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.745734][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.751102][ T8874] bridge_slave_0: entered allmulticast mode [ 257.759140][ T8874] bridge_slave_0: entered promiscuous mode [ 257.800504][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.800736][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.801211][ T8874] bridge_slave_1: entered allmulticast mode [ 257.841277][ T8874] bridge_slave_1: entered promiscuous mode [ 257.853584][ T9034] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1185'. [ 258.187310][ T8874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.207446][ T8874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.351670][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1187'. [ 258.430137][ T9044] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1188'. [ 258.792829][ T5611] Bluetooth: hci5: command tx timeout [ 259.058862][ T8874] team0: Port device team_slave_0 added [ 259.200849][ T8874] team0: Port device team_slave_1 added [ 259.455207][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1195'. [ 262.418024][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.418038][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.418081][ T8874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.471146][ T8874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.471165][ T8874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.471194][ T8874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.824545][ T9073] netlink: 'syz.4.1198': attribute type 25 has an invalid length. [ 262.927204][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1199'. [ 263.254728][ T9090] netlink: 'syz.0.1203': attribute type 1 has an invalid length. [ 263.254753][ T9090] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1203'. [ 263.254770][ T9090] netlink: 'syz.0.1203': attribute type 1 has an invalid length. [ 263.477620][ T9094] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 263.477644][ T9094] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1204'. [ 263.477661][ T9094] netlink: 'syz.4.1204': attribute type 1 has an invalid length. [ 263.551821][ T3304] bridge_slave_1: left allmulticast mode [ 263.597443][ T3304] bridge_slave_1: left promiscuous mode [ 263.624961][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.694889][ T9100] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1205'. [ 263.842943][ T3304] bridge_slave_0: left allmulticast mode [ 263.842981][ T3304] bridge_slave_0: left promiscuous mode [ 263.843257][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.284485][ T3304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.366676][ T3304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.442743][ T3304] bond0 (unregistering): Released all slaves [ 265.725924][ T8874] hsr_slave_0: entered promiscuous mode [ 265.739964][ T8874] hsr_slave_1: entered promiscuous mode [ 265.747778][ T8874] debugfs: 'hsr0' already exists in 'hsr' [ 265.747807][ T8874] Cannot create hsr debugfs directory [ 265.893505][ T9111] nbd: nbd0 already in use [ 265.964966][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'. [ 266.083913][ T3304] tipc: Left network mode [ 266.461137][ T9122] netlink: 'syz.3.1213': attribute type 25 has an invalid length. [ 267.061206][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 267.469578][ T9150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1218'. [ 267.673273][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1221'. [ 267.849319][ T9161] tipc: Enabled bearer , priority 0 [ 267.914646][ T5258] 8021q: adding VLAN 0 to HW filter on device eth1 [ 268.195098][ T9170] netlink: 'syz.3.1223': attribute type 1 has an invalid length. [ 268.345005][ T9173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1223'. [ 268.613364][ T9171] bond3: (slave geneve2): making interface the new active one [ 268.614731][ T9171] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 268.690720][ T9175] net_ratelimit: 9 callbacks suppressed [ 268.690741][ T9175] netlink: zone id is out of range [ 268.690750][ T9175] netlink: zone id is out of range [ 268.690758][ T9175] netlink: zone id is out of range [ 268.690766][ T9175] netlink: zone id is out of range [ 268.690774][ T9175] netlink: zone id is out of range [ 268.690782][ T9175] netlink: zone id is out of range [ 268.690790][ T9175] netlink: zone id is out of range [ 268.690798][ T9175] netlink: zone id is out of range [ 268.690806][ T9175] netlink: zone id is out of range [ 268.690815][ T9175] netlink: zone id is out of range [ 268.713805][ T9146] tipc: Disabling bearer [ 269.328739][ T9173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 269.364701][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 269.373007][ T1539] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.397811][ T1539] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.399555][ T1539] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 269.399618][ T1539] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 270.229726][ T9184] speed is unknown, defaulting to 1000 [ 270.572998][ T9189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1228'. [ 270.728353][ T9198] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1229'. [ 270.890026][ T9201] netlink: 'syz.3.1230': attribute type 25 has an invalid length. [ 271.053540][ T3304] hsr_slave_0: left promiscuous mode [ 271.093988][ T3304] hsr_slave_1: left promiscuous mode [ 271.097026][ T3304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.097151][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.175410][ T3304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.175439][ T3304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.175768][ T9207] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1231'. [ 271.623166][ T9213] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1232'. [ 271.696197][ T3304] veth1_macvtap: left promiscuous mode [ 271.730785][ T3304] veth0_macvtap: left promiscuous mode [ 271.756578][ T3304] veth1_vlan: left promiscuous mode [ 271.757142][ T3304] veth0_vlan: left promiscuous mode [ 272.612064][ T3304] team0 (unregistering): Port device team_slave_1 removed [ 272.672118][ T3304] team0 (unregistering): Port device team_slave_0 removed [ 272.918572][ T5258] 8021q: adding VLAN 0 to HW filter on device eth2 [ 273.047884][ T9220] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.079227][ T9220] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.423506][ T9231] netlink: 'syz.0.1239': attribute type 1 has an invalid length. [ 273.423532][ T9231] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1239'. [ 273.423550][ T9231] netlink: 'syz.0.1239': attribute type 1 has an invalid length. [ 273.530151][ T9234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1241'. [ 274.361518][ T9242] nbd3: detected capacity change from 0 to 63 [ 274.420153][ T5611] block nbd3: Receive control failed (result -104) [ 274.817281][ T9254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1246'. [ 274.838513][ T5611] Bluetooth: hci2: link tx timeout [ 274.838534][ T5611] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 275.517449][ T9257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1247'. [ 275.551480][ T6746] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 275.741384][ T6746] usb 5-1: device descriptor read/64, error -71 [ 275.780144][ T8874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 275.872225][ T8874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 275.875372][ T8874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 275.966252][ T8874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 275.968918][ T8874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.015928][ T9277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 276.051446][ T6746] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 276.207233][ T6746] usb 5-1: device descriptor read/64, error -71 [ 276.224477][ T8874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.281206][ T8874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.311796][ T6746] usb usb5-port1: attempt power cycle [ 276.397166][ T8874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.567572][ T9293] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1253'. [ 276.712466][ T9293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.771404][ T9293] bond0 (unregistering): Released all slaves [ 276.811499][ T6746] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 276.835593][ T6746] usb 5-1: device descriptor read/8, error -71 [ 276.885549][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 277.645226][ T9312] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1256'. [ 278.140810][ T8874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.282427][ T8874] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.351550][ T1539] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.351957][ T1539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.670419][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.681971][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.044725][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 279.634776][ T9354] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1266'. [ 279.823455][ T9354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.903712][ T9354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.006685][ T9354] bond0 (unregistering): Released all slaves [ 280.254600][ T9368] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1269'. [ 280.464496][ T9368] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.619228][ T9368] bond0 (unregistering): Released all slaves [ 280.851944][ T9378] syzkaller0: entered promiscuous mode [ 280.851971][ T9378] syzkaller0: entered allmulticast mode [ 281.448636][ T9387] speed is unknown, defaulting to 1000 [ 281.945966][ T9410] syzkaller0: entered promiscuous mode [ 281.946004][ T9410] syzkaller0: entered allmulticast mode [ 281.962885][ T9410] tipc: Enabled bearer , priority 0 [ 282.012601][ T9409] tipc: Resetting bearer [ 282.235623][ T9409] tipc: Disabling bearer [ 282.697000][ T9436] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 282.697024][ T9436] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1280'. [ 282.697040][ T9436] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 283.020848][ T8874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.097251][ T9445] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1282'. [ 283.256420][ T9450] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1283'. [ 283.477223][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1286'. [ 283.659700][ T9464] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 283.659722][ T9464] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1285'. [ 283.659740][ T9464] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 283.721846][ T9459] bond_slave_0: left allmulticast mode [ 283.918239][ T8874] veth0_vlan: entered promiscuous mode [ 284.033305][ T8874] veth1_vlan: entered promiscuous mode [ 284.253205][ T8874] veth0_macvtap: entered promiscuous mode [ 284.258701][ T8874] veth1_macvtap: entered promiscuous mode [ 284.478837][ T9479] vlan2: entered allmulticast mode [ 284.478861][ T9479] bond0: entered allmulticast mode [ 284.685509][ T8874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.751511][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 90 seconds [ 284.751548][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 90 seconds [ 284.751569][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 90 seconds [ 284.751590][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 90 seconds [ 284.848266][ T8874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.929295][ T1539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.949092][ T1539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.950575][ T1539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.972892][ T1539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.659827][ T9501] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1294'. [ 286.154810][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1297'. [ 286.709687][ T1539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.709709][ T1539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.511651][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.511673][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.213745][ T9576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 289.762837][ T9595] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1315'. [ 290.551550][ T6728] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 290.660318][ T9625] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1321'. [ 290.711426][ T6728] usb 1-1: Using ep0 maxpacket: 32 [ 290.729940][ T6728] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 290.729971][ T6728] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.767750][ T6728] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 290.767785][ T6728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.767807][ T6728] usb 1-1: Product: syz [ 290.767821][ T6728] usb 1-1: Manufacturer: syz [ 290.767837][ T6728] usb 1-1: SerialNumber: syz [ 290.904024][ T6728] usb 1-1: config 0 descriptor?? [ 290.924873][ T6728] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 291.218625][ T6728] gspca_sunplus: reg_r err -32 [ 291.528284][ T9646] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 291.528308][ T9646] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1325'. [ 291.528325][ T9646] netlink: 'syz.2.1325': attribute type 1 has an invalid length. [ 292.155018][ T9661] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 292.155043][ T9661] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1327'. [ 292.155060][ T9661] netlink: 'syz.2.1327': attribute type 1 has an invalid length. [ 292.201483][ T6728] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 292.667448][ T9663] syzkaller1: entered promiscuous mode [ 292.667476][ T9663] syzkaller1: entered allmulticast mode [ 293.602624][ T9690] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1332'. [ 293.676079][ T5728] usb 1-1: USB disconnect, device number 6 [ 293.745189][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 293.868041][ T9690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.951386][ T9690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.048215][ T9690] bond0 (unregistering): Released all slaves [ 294.296770][ T9703] syzkaller1: entered promiscuous mode [ 294.296798][ T9703] syzkaller1: entered allmulticast mode [ 294.898519][ T9720] syzkaller0: entered promiscuous mode [ 294.898544][ T9720] syzkaller0: entered allmulticast mode [ 294.952591][ T9716] speed is unknown, defaulting to 1000 [ 295.100337][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 296.549330][ T9788] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1358'. [ 298.199546][ T5611] Bluetooth: hci5: link tx timeout [ 298.214309][ T5611] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.236040][ T5608] Bluetooth: hci5: link tx timeout [ 298.236093][ T5608] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.267996][ T5608] Bluetooth: hci5: link tx timeout [ 298.268019][ T5608] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.291845][ T5608] Bluetooth: hci5: link tx timeout [ 298.291865][ T5608] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 298.560672][ T5608] Bluetooth: hci5: link tx timeout [ 298.560693][ T5608] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.095289][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 299.302370][ T5608] Bluetooth: hci5: link tx timeout [ 299.302391][ T5608] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.380715][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1380'. [ 299.685329][ T5608] Bluetooth: hci5: link tx timeout [ 299.685351][ T5608] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 299.916163][ T5608] Bluetooth: hci5: link tx timeout [ 299.916186][ T5608] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 300.275786][ T9861] syzkaller1: entered promiscuous mode [ 300.275815][ T9861] syzkaller1: entered allmulticast mode [ 300.311581][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 303.971570][ T9908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1396'. [ 304.319761][ T9914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1399'. [ 304.380370][ T9911] speed is unknown, defaulting to 1000 [ 304.591758][ T98] block nbd3: Possible stuck request ffff888026cf8dc0: control (read@0,1024B). Runtime 30 seconds [ 304.591813][ T98] block nbd3: Possible stuck request ffff888026cf8f80: control (read@1024,1024B). Runtime 30 seconds [ 304.591840][ T98] block nbd3: Possible stuck request ffff888026cf9140: control (read@2048,1024B). Runtime 30 seconds [ 304.591970][ T98] block nbd3: Possible stuck request ffff888026cf9300: control (read@3072,1024B). Runtime 30 seconds [ 305.139353][ T9919] speed is unknown, defaulting to 1000 [ 305.185910][ T9926] syzkaller0: entered promiscuous mode [ 305.185936][ T9926] syzkaller0: entered allmulticast mode [ 305.238008][ T9929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1405'. [ 305.312527][ T9926] tipc: Started in network mode [ 305.312565][ T9926] tipc: Node identity 6e54c9c08f79, cluster identity 4711 [ 305.313033][ T9926] tipc: Enabled bearer , priority 0 [ 305.406636][ T9932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1407'. [ 305.424877][ T9925] tipc: Resetting bearer [ 305.584626][ T9936] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1408'. [ 305.626762][ T9936] loop9: detected capacity change from 0 to 7 [ 305.648560][ T9925] tipc: Disabling bearer [ 305.660446][ T9936] Dev loop9: unable to read RDB block 7 [ 305.660492][ T9936] loop9: unable to read partition table [ 305.674710][ T9936] loop9: partition table beyond EOD, truncated [ 305.685403][ T9936] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 305.961808][ T6746] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 306.111633][ T6746] usb 3-1: Using ep0 maxpacket: 16 [ 306.115919][ T6746] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 306.115951][ T6746] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 306.115980][ T6746] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 306.116007][ T6746] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 306.116037][ T6746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 306.146200][ T6746] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 306.146293][ T6746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.146346][ T6746] usb 3-1: Product: syz [ 306.146387][ T6746] usb 3-1: Manufacturer: syz [ 306.146428][ T6746] usb 3-1: SerialNumber: syz [ 306.340425][ T6746] usb 3-1: config 0 descriptor?? [ 306.341381][ T9942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 306.555908][ T9936] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 306.656133][ T6746] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 307.050055][ T6746] usb 3-1: USB disconnect, device number 10 [ 307.061743][ T4948] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 307.228352][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1419'. [ 307.245079][ T9965] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1417'. [ 307.511940][ T9970] netlink: 'syz.0.1420': attribute type 1 has an invalid length. [ 307.511965][ T9970] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1420'. [ 308.229319][ T9986] syzkaller1: entered promiscuous mode [ 308.229347][ T9986] syzkaller1: entered allmulticast mode [ 309.025149][ T9979] syzkaller1: entered promiscuous mode [ 309.025179][ T9979] syzkaller1: entered allmulticast mode [ 309.087902][T10006] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 309.087927][T10006] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1429'. [ 309.087944][T10006] netlink: 'syz.2.1429': attribute type 1 has an invalid length. [ 309.831494][T10023] syzkaller0: entered promiscuous mode [ 309.831521][T10023] syzkaller0: entered allmulticast mode [ 310.489562][T10034] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1436'. [ 311.146660][T10045] siw: device registration error -23 [ 311.155623][T10046] tipc: Enabled bearer , priority 0 [ 311.460211][T10044] tipc: Disabling bearer [ 312.499642][T10071] syzkaller0: entered promiscuous mode [ 312.499670][T10071] syzkaller0: entered allmulticast mode [ 312.800324][T10081] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1448'. [ 313.086018][T10082] syzkaller0: entered promiscuous mode [ 313.086045][T10082] syzkaller0: entered allmulticast mode [ 313.868955][T10101] syzkaller0: entered promiscuous mode [ 313.869014][T10101] syzkaller0: entered allmulticast mode [ 313.964528][T10104] netlink: 'syz.2.1457': attribute type 1 has an invalid length. [ 314.121077][T10109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1457'. [ 314.396688][T10109] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.401961][T10112] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1457'. [ 314.488851][T10117] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1460'. [ 314.661428][T10121] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 314.661463][T10121] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1461'. [ 314.661480][T10121] netlink: 'syz.1.1461': attribute type 1 has an invalid length. [ 314.831466][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 120 seconds [ 314.831520][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 120 seconds [ 314.831557][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 120 seconds [ 314.831594][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 120 seconds [ 315.292072][T10140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1468'. [ 315.964857][T10154] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1475'. [ 316.028195][T10157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1472'. [ 316.094517][T10159] netlink: 'syz.0.1476': attribute type 1 has an invalid length. [ 316.281708][T10162] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1476'. [ 316.426877][T10128] syzkaller1: entered promiscuous mode [ 316.426905][T10128] syzkaller1: entered allmulticast mode [ 316.450295][T10162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.689755][T10174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1479'. [ 316.901573][T10170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1476'. [ 317.354995][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.358750][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.469707][T10179] syzkaller1: entered promiscuous mode [ 317.469735][T10179] syzkaller1: entered allmulticast mode [ 317.995865][T10202] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 317.995894][T10202] netlink: 'syz.4.1488': attribute type 1 has an invalid length. [ 318.514579][T10228] netlink: 'syz.3.1496': attribute type 1 has an invalid length. [ 318.770611][T10228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.548846][T10251] __nla_validate_parse: 6 callbacks suppressed [ 319.548866][T10251] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1502'. [ 319.848129][T10257] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1504'. [ 320.020095][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1505'. [ 320.302004][T10265] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1508'. [ 320.725878][T10277] netlink: 'syz.2.1512': attribute type 1 has an invalid length. [ 321.005409][T10287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1512'. [ 321.045210][T10287] 8021q: adding VLAN 0 to HW filter on device bond8 [ 321.113901][T10277] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1512'. [ 321.201448][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1515'. [ 321.490861][T10292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1516'. [ 322.737298][T10312] netlink: 'syz.0.1524': attribute type 1 has an invalid length. [ 322.737327][T10312] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1524'. [ 322.737347][T10312] netlink: 'syz.0.1524': attribute type 1 has an invalid length. [ 323.139645][T10325] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1528'. [ 323.174163][T10330] netlink: 'syz.3.1529': attribute type 1 has an invalid length. [ 323.365367][T10328] block nbd1: server does not support multiple connections per device. [ 323.619585][T10328] block nbd1: shutting down sockets [ 324.587391][T10338] 8021q: adding VLAN 0 to HW filter on device bond4 [ 324.618992][T10335] __nla_validate_parse: 1 callbacks suppressed [ 324.619013][T10335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1529'. [ 325.390827][T10365] loop9: detected capacity change from 0 to 7 [ 325.444671][T10365] Dev loop9: unable to read RDB block 7 [ 325.444718][T10365] loop9: unable to read partition table [ 325.447336][T10365] loop9: partition table beyond EOD, truncated [ 325.449876][T10365] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 326.161697][ T5728] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 328.424227][ T5728] usb 2-1: Using ep0 maxpacket: 16 [ 328.557741][ T5728] usb 2-1: device descriptor read/all, error -71 [ 328.803729][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1553'. [ 328.930610][T10401] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1556'. [ 329.101613][T10400] block nbd1: server does not support multiple connections per device. [ 329.102135][T10400] block nbd1: shutting down sockets [ 329.328120][T10409] syzkaller0: entered promiscuous mode [ 329.328149][T10409] syzkaller0: entered allmulticast mode [ 329.398392][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1562'. [ 329.848879][T10427] tipc: Enabled bearer , priority 0 [ 329.889109][T10423] tipc: Resetting bearer [ 330.096286][T10422] tipc: Disabling bearer [ 330.149445][T10435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1568'. [ 331.267454][T10439] nbd2: detected capacity change from 0 to 63 [ 331.292334][T10446] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1571'. [ 331.327738][ T5611] block nbd2: Receive control failed (result -104) [ 331.614937][T10459] netlink: 'syz.3.1574': attribute type 1 has an invalid length. [ 331.614963][T10459] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1574'. [ 331.614979][T10459] netlink: 'syz.3.1574': attribute type 1 has an invalid length. [ 331.790660][T10464] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1576'. [ 334.673772][ T7046] block nbd3: Possible stuck request ffff888026cf8dc0: control (read@0,1024B). Runtime 60 seconds [ 334.673824][ T7046] block nbd3: Possible stuck request ffff888026cf8f80: control (read@1024,1024B). Runtime 60 seconds [ 334.673856][ T7046] block nbd3: Possible stuck request ffff888026cf9140: control (read@2048,1024B). Runtime 60 seconds [ 334.673887][ T7046] block nbd3: Possible stuck request ffff888026cf9300: control (read@3072,1024B). Runtime 60 seconds [ 337.085172][T10520] syzkaller0: entered promiscuous mode [ 337.085213][T10520] syzkaller0: entered allmulticast mode [ 339.298330][T10535] syzkaller1: entered promiscuous mode [ 339.298351][T10535] syzkaller1: entered allmulticast mode [ 340.046607][T10550] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1605'. [ 341.965987][T10577] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1615'. [ 342.453072][T10589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1619'. [ 342.645142][T10591] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1620'. [ 343.250635][T10605] block nbd1: server does not support multiple connections per device. [ 343.284600][T10605] block nbd1: shutting down sockets [ 343.536561][T10614] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1630'. [ 343.782687][T10618] tipc: Enabled bearer , priority 0 [ 343.783500][T10620] syzkaller0: entered promiscuous mode [ 343.783525][T10620] syzkaller0: entered allmulticast mode [ 343.909497][T10618] tipc: Resetting bearer [ 343.966742][T10617] tipc: Resetting bearer [ 344.126403][T10617] tipc: Disabling bearer [ 344.597794][T10628] syzkaller1: entered promiscuous mode [ 344.597814][T10628] syzkaller1: entered allmulticast mode [ 344.911416][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 150 seconds [ 344.911467][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 150 seconds [ 344.911501][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 150 seconds [ 344.911535][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 150 seconds [ 345.589268][T10660] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1646'. [ 346.194217][ T6728] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 346.351339][ T6728] usb 3-1: Using ep0 maxpacket: 32 [ 346.353644][ T6728] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 346.353751][ T6728] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.359999][ T6728] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 346.360029][ T6728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.360051][ T6728] usb 3-1: Product: syz [ 346.360066][ T6728] usb 3-1: Manufacturer: syz [ 346.360083][ T6728] usb 3-1: SerialNumber: syz [ 346.525569][ T6728] usb 3-1: config 0 descriptor?? [ 346.589614][ T6728] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 346.997147][T10685] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1658'. [ 347.229622][T10692] netlink: 'syz.4.1659': attribute type 1 has an invalid length. [ 347.229646][T10692] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1659'. [ 347.229672][T10692] netlink: 'syz.4.1659': attribute type 1 has an invalid length. [ 348.660742][ T6728] gspca_sunplus: reg_r err -71 [ 348.660964][ T6728] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 348.717944][ T6728] usb 3-1: USB disconnect, device number 11 [ 349.070672][T10718] nbd: nbd0 already in use [ 349.985125][T10737] tipc: Enabled bearer , priority 0 [ 349.986333][T10737] syzkaller0: entered promiscuous mode [ 349.986359][T10737] syzkaller0: entered allmulticast mode [ 350.040122][T10737] tipc: Resetting bearer [ 350.581689][T10734] tipc: Resetting bearer [ 351.056808][T10734] tipc: Disabling bearer [ 351.433839][T10759] block nbd1: server does not support multiple connections per device. [ 351.434332][T10759] block nbd1: shutting down sockets [ 351.434950][T10719] syzkaller1: entered promiscuous mode [ 351.434973][T10719] syzkaller1: entered allmulticast mode [ 351.481416][ T6744] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 351.631448][ T6744] usb 1-1: Using ep0 maxpacket: 32 [ 351.633594][ T6744] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 351.633623][ T6744] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.643407][ T6744] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 351.643439][ T6744] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.643461][ T6744] usb 1-1: Product: syz [ 351.643475][ T6744] usb 1-1: Manufacturer: syz [ 351.643490][ T6744] usb 1-1: SerialNumber: syz [ 351.704784][ T6744] usb 1-1: config 0 descriptor?? [ 351.739698][ T6744] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 352.032877][T10778] tipc: Enabled bearer , priority 0 [ 352.048310][T10772] syzkaller0: entered promiscuous mode [ 352.048358][T10772] syzkaller0: entered allmulticast mode [ 352.096441][T10772] tipc: Resetting bearer [ 352.142047][T10771] tipc: Resetting bearer [ 352.332271][T10771] tipc: Disabling bearer [ 352.445486][T10787] block nbd1: server does not support multiple connections per device. [ 352.446028][T10787] block nbd1: shutting down sockets [ 352.507399][T10791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1692'. [ 352.982567][T10796] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 352.982599][T10796] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1694'. [ 352.982614][T10796] netlink: 'syz.2.1694': attribute type 1 has an invalid length. [ 352.983066][T10807] netlink: 'syz.3.1696': attribute type 1 has an invalid length. [ 353.549408][T10807] 8021q: adding VLAN 0 to HW filter on device bond5 [ 353.830153][T10809] bond5: (slave geneve3): making interface the new active one [ 353.868756][ T6744] gspca_sunplus: reg_r err -110 [ 353.868859][ T6744] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 353.964424][T10809] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 354.668161][ T6740] usb 1-1: USB disconnect, device number 7 [ 354.855905][T10824] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1702'. [ 356.256045][T10859] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1713'. [ 356.363383][T10857] block nbd1: server does not support multiple connections per device. [ 356.401879][T10857] block nbd1: shutting down sockets [ 356.841365][ T6740] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 356.871967][T10876] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1718'. [ 357.008027][T10880] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1720'. [ 357.020780][ T6740] usb 3-1: Using ep0 maxpacket: 32 [ 357.029430][ T6740] usb 3-1: config index 0 descriptor too short (expected 3659, got 75) [ 357.029460][ T6740] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.053564][ T6740] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 357.053597][ T6740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.053619][ T6740] usb 3-1: Product: syz [ 357.053633][ T6740] usb 3-1: Manufacturer: syz [ 357.053648][ T6740] usb 3-1: SerialNumber: syz [ 357.110239][ T6740] usb 3-1: config 0 descriptor?? [ 357.163331][ T6740] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 357.355882][T10886] netlink: 'syz.4.1721': attribute type 1 has an invalid length. [ 357.355906][T10886] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1721'. [ 357.355924][T10886] netlink: 'syz.4.1721': attribute type 1 has an invalid length. [ 358.097369][T10900] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1726'. [ 358.700871][T10910] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1731'. [ 359.015798][ T6740] gspca_sunplus: reg_r err -71 [ 359.015921][ T6740] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 359.045088][ T6740] usb 3-1: USB disconnect, device number 12 [ 359.768549][T10924] netlink: 'syz.4.1737': attribute type 9 has an invalid length. [ 360.240774][T10929] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1739'. [ 360.329980][T10933] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1740'. [ 361.121825][ T5611] Bluetooth: hci5: link tx timeout [ 361.121847][ T5611] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 361.311365][ T6740] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 361.417688][T10963] netlink: 'syz.2.1751': attribute type 9 has an invalid length. [ 361.471334][ T6740] usb 5-1: Using ep0 maxpacket: 32 [ 361.473713][ T6740] usb 5-1: config index 0 descriptor too short (expected 3659, got 75) [ 361.473768][ T6740] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.476717][ T6740] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 361.476755][ T6740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.476776][ T6740] usb 5-1: Product: syz [ 361.476792][ T6740] usb 5-1: Manufacturer: syz [ 361.476812][ T6740] usb 5-1: SerialNumber: syz [ 361.539039][ T6740] usb 5-1: config 0 descriptor?? [ 361.556659][ T6740] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 361.561914][ T32] block nbd2: Possible stuck request ffff888026c97540: control (read@0,1024B). Runtime 30 seconds [ 361.561961][ T32] block nbd2: Possible stuck request ffff888026c97700: control (read@1024,1024B). Runtime 30 seconds [ 361.562056][ T32] block nbd2: Possible stuck request ffff888026c978c0: control (read@2048,1024B). Runtime 30 seconds [ 361.562088][ T32] block nbd2: Possible stuck request ffff888026c97a80: control (read@3072,1024B). Runtime 30 seconds [ 362.167369][T10971] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1753'. [ 362.866054][T10986] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 363.207498][ T5611] Bluetooth: hci5: command 0x0406 tx timeout [ 363.235406][T10991] netlink: 'syz.1.1759': attribute type 1 has an invalid length. [ 363.703451][ T6740] gspca_sunplus: reg_r err -110 [ 363.703552][ T6740] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 363.758881][ T6740] usb 5-1: USB disconnect, device number 8 [ 363.987327][T11004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'. [ 363.987346][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1763'. [ 364.061707][T11001] block nbd1: server does not support multiple connections per device. [ 364.069859][T11001] block nbd1: shutting down sockets [ 364.288668][T11008] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1765'. [ 364.429246][T10991] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 364.753932][ T98] block nbd3: Possible stuck request ffff888026cf8dc0: control (read@0,1024B). Runtime 90 seconds [ 364.753984][ T98] block nbd3: Possible stuck request ffff888026cf8f80: control (read@1024,1024B). Runtime 90 seconds [ 364.754017][ T98] block nbd3: Possible stuck request ffff888026cf9140: control (read@2048,1024B). Runtime 90 seconds [ 364.754050][ T98] block nbd3: Possible stuck request ffff888026cf9300: control (read@3072,1024B). Runtime 90 seconds [ 364.826634][T11020] block nbd1: server does not support multiple connections per device. [ 364.830218][T11020] block nbd1: shutting down sockets [ 365.219622][T11040] netlink: 'syz.3.1774': attribute type 1 has an invalid length. [ 365.896425][T11046] block nbd1: server does not support multiple connections per device. [ 366.053103][T11046] block nbd1: shutting down sockets [ 366.314814][T11074] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 366.314839][T11074] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1780'. [ 366.314858][T11074] netlink: 'syz.4.1780': attribute type 1 has an invalid length. [ 366.662933][T11080] block nbd1: server does not support multiple connections per device. [ 366.670441][T11080] block nbd1: shutting down sockets [ 374.991418][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 180 seconds [ 374.991469][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 180 seconds [ 374.991503][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 180 seconds [ 374.991535][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 180 seconds [ 378.234925][T11230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 378.616464][T11233] nbd1: detected capacity change from 0 to 63 [ 378.715679][ T5608] block nbd1: Receive control failed (result -104) [ 378.808254][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.808320][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.321234][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 382.379868][T11273] netlink: 'syz.2.1829': attribute type 4 has an invalid length. [ 382.448419][T11276] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1829'. [ 382.448447][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1829'. [ 387.631835][ T6745] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 387.788814][ T6745] usb 4-1: Using ep0 maxpacket: 8 [ 387.807218][ T6745] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 387.807275][ T6745] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 387.807319][ T6745] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.807350][ T6745] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.807379][ T6745] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.807407][ T6745] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 387.807436][ T6745] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 387.807465][ T6745] usb 4-1: config 168 interface 0 has no altsetting 0 [ 387.809062][ T6745] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 387.809104][ T6745] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 387.809147][ T6745] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.809179][ T6745] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.809206][ T6745] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.809235][ T6745] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 387.809274][ T6745] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 387.809304][ T6745] usb 4-1: config 168 interface 0 has no altsetting 0 [ 387.963046][ T6745] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 387.963087][ T6745] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 387.963133][ T6745] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 387.963158][ T6745] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 387.963179][ T6745] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 387.963201][ T6745] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 387.963233][ T6745] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 387.963257][ T6745] usb 4-1: config 168 interface 0 has no altsetting 0 [ 388.041772][ T6745] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 388.041808][ T6745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.041830][ T6745] usb 4-1: Product: syz [ 388.041844][ T6745] usb 4-1: Manufacturer: syz [ 388.041865][ T6745] usb 4-1: SerialNumber: syz [ 390.897498][ T6745] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 390.972234][ T6745] usb 4-1: USB disconnect, device number 5 [ 391.519192][T11394] tipc: Enabled bearer , priority 0 [ 391.519917][T11389] tipc: Enabled bearer , priority 0 [ 391.520813][T11394] syzkaller0: entered promiscuous mode [ 391.520837][T11394] syzkaller0: entered allmulticast mode [ 391.553556][T11389] syzkaller0: entered promiscuous mode [ 391.553587][T11389] syzkaller0: entered allmulticast mode [ 391.651373][ T32] block nbd2: Possible stuck request ffff888026c97540: control (read@0,1024B). Runtime 60 seconds [ 391.651424][ T32] block nbd2: Possible stuck request ffff888026c97700: control (read@1024,1024B). Runtime 60 seconds [ 391.651457][ T32] block nbd2: Possible stuck request ffff888026c978c0: control (read@2048,1024B). Runtime 60 seconds [ 391.651491][ T32] block nbd2: Possible stuck request ffff888026c97a80: control (read@3072,1024B). Runtime 60 seconds [ 391.819749][T11395] tipc: Resetting bearer [ 391.855081][T11394] tipc: Resetting bearer [ 391.901568][T11388] tipc: Resetting bearer [ 392.108044][T11388] tipc: Disabling bearer [ 392.329535][T11392] tipc: Resetting bearer [ 392.516110][T11392] tipc: Disabling bearer [ 392.965135][T11436] syzkaller1: entered promiscuous mode [ 392.965166][T11436] syzkaller1: entered allmulticast mode [ 393.333851][T11430] syzkaller0: entered promiscuous mode [ 393.333880][T11430] syzkaller0: entered allmulticast mode [ 393.835983][T11461] netlink: 'syz.3.1882': attribute type 1 has an invalid length. [ 393.977432][T11461] 8021q: adding VLAN 0 to HW filter on device bond6 [ 394.115299][T11465] vlan2: entered allmulticast mode [ 394.115324][T11465] bond6: entered allmulticast mode [ 394.550623][T11490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1891'. [ 394.831454][ T98] block nbd3: Possible stuck request ffff888026cf8dc0: control (read@0,1024B). Runtime 120 seconds [ 394.831506][ T98] block nbd3: Possible stuck request ffff888026cf8f80: control (read@1024,1024B). Runtime 120 seconds [ 394.831541][ T98] block nbd3: Possible stuck request ffff888026cf9140: control (read@2048,1024B). Runtime 120 seconds [ 394.831573][ T98] block nbd3: Possible stuck request ffff888026cf9300: control (read@3072,1024B). Runtime 120 seconds [ 395.068051][T11495] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1892'. [ 395.509075][T11508] tipc: Enabling of bearer rejected, failed to enable media [ 396.035915][T11524] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1904'. [ 400.051231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 400.311467][ T6744] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 405.348348][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 210 seconds [ 405.348416][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 210 seconds [ 405.348462][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 210 seconds [ 405.348540][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 210 seconds [ 406.494900][T11654] netlink: 'syz.2.1954': attribute type 4 has an invalid length. [ 406.533586][T11654] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1954'. [ 406.533606][T11654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1954'. [ 407.121392][ T6744] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 407.216332][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1960'. [ 407.281835][ T6744] usb 4-1: Using ep0 maxpacket: 8 [ 407.285160][ T6744] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 407.285205][ T6744] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 407.285257][ T6744] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 407.285278][ T6744] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.285304][ T6744] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.285324][ T6744] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 407.285344][ T6744] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 407.285365][ T6744] usb 4-1: config 168 interface 0 has no altsetting 0 [ 407.286491][ T6744] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 407.286537][ T6744] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 407.286567][ T6744] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 407.286587][ T6744] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.286607][ T6744] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.286626][ T6744] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 407.286646][ T6744] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 407.286667][ T6744] usb 4-1: config 168 interface 0 has no altsetting 0 [ 407.287813][ T6744] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 407.287858][ T6744] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 407.287903][ T6744] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 407.287924][ T6744] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 407.287943][ T6744] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 407.287962][ T6744] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 407.287982][ T6744] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 407.288003][ T6744] usb 4-1: config 168 interface 0 has no altsetting 0 [ 407.317644][ T6744] usb 4-1: string descriptor 0 read error: -22 [ 407.318014][ T6744] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 407.318091][ T6744] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.677081][ T6744] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 407.915592][ T5869] usb 4-1: USB disconnect, device number 6 [ 408.911303][ T98] block nbd1: Possible stuck request ffff888026be0000: control (read@0,4096B). Runtime 30 seconds [ 409.121464][T11686] syzkaller1: entered promiscuous mode [ 409.121493][T11686] syzkaller1: entered allmulticast mode [ 409.634751][T11707] block nbd4: server does not support multiple connections per device. [ 409.716127][T11707] block nbd4: shutting down sockets [ 415.747613][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2005'. [ 416.001695][T11797] block nbd4: server does not support multiple connections per device. [ 416.002137][T11797] block nbd4: shutting down sockets [ 419.876543][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2023'. [ 420.076293][T11851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2024'. [ 420.522475][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 421.254560][T11884] netlink: 'syz.0.2038': attribute type 1 has an invalid length. [ 421.322813][T11890] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2039'. [ 421.322843][T11890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2039'. [ 421.516916][T11884] 8021q: adding VLAN 0 to HW filter on device bond6 [ 421.517893][T11886] netlink: 'syz.4.2039': attribute type 4 has an invalid length. [ 421.675698][T11900] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2042'. [ 421.711435][ T32] block nbd2: Possible stuck request ffff888026c97540: control (read@0,1024B). Runtime 90 seconds [ 421.711483][ T32] block nbd2: Possible stuck request ffff888026c97700: control (read@1024,1024B). Runtime 90 seconds [ 421.711516][ T32] block nbd2: Possible stuck request ffff888026c978c0: control (read@2048,1024B). Runtime 90 seconds [ 421.711548][ T32] block nbd2: Possible stuck request ffff888026c97a80: control (read@3072,1024B). Runtime 90 seconds [ 422.694172][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2054'. [ 422.942981][T11934] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2055'. [ 423.129220][T11913] syzkaller1: entered promiscuous mode [ 423.129256][T11913] syzkaller1: entered allmulticast mode [ 423.152702][T11909] syzkaller1: entered promiscuous mode [ 423.152732][T11909] syzkaller1: entered allmulticast mode [ 424.121022][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2064'. [ 424.381792][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2068'. [ 424.911395][ T98] block nbd3: Possible stuck request ffff888026cf8dc0: control (read@0,1024B). Runtime 150 seconds [ 424.911519][ T98] block nbd3: Possible stuck request ffff888026cf8f80: control (read@1024,1024B). Runtime 150 seconds [ 424.911559][ T98] block nbd3: Possible stuck request ffff888026cf9140: control (read@2048,1024B). Runtime 150 seconds [ 424.911665][ T98] block nbd3: Possible stuck request ffff888026cf9300: control (read@3072,1024B). Runtime 150 seconds [ 426.170901][T12001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2082'. [ 426.403042][T12009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2084'. [ 427.032574][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2091'. [ 428.856402][T12091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2113'. [ 429.408300][T12109] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2120'. [ 429.574631][T12105] block nbd4: server does not support multiple connections per device. [ 429.628276][T12105] block nbd4: shutting down sockets [ 430.557870][T12148] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2132'. [ 430.909866][T12156] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2136'. [ 431.405026][T12166] tipc: Enabling of bearer rejected, failed to enable media [ 431.806286][T12181] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2148'. [ 433.057739][T12224] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2166'. [ 434.027244][T12254] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2178'. [ 434.435275][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2183'. [ 434.802086][T12243] syzkaller1: entered promiscuous mode [ 434.802117][T12243] syzkaller1: entered allmulticast mode [ 435.552837][T12260] syzkaller1: entered promiscuous mode [ 435.552867][T12260] syzkaller1: entered allmulticast mode [ 435.686403][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2189'. [ 435.933737][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 240 seconds [ 435.933778][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 240 seconds [ 435.933804][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 240 seconds [ 435.933828][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 240 seconds [ 436.046965][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2192'. [ 436.385713][T12314] loop9: detected capacity change from 0 to 7 [ 436.386954][T12314] Dev loop9: unable to read RDB block 7 [ 436.386999][T12314] loop9: unable to read partition table [ 436.387224][T12314] loop9: partition table beyond EOD, truncated [ 436.387274][T12314] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 436.621848][ T5708] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 436.772819][ T5708] usb 4-1: Using ep0 maxpacket: 16 [ 436.776216][ T5708] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 436.776239][ T5708] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 436.776258][ T5708] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 436.776277][ T5708] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 436.776297][ T5708] usb 4-1: config 0 interface 0 has no altsetting 0 [ 436.778631][ T5708] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 436.778662][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.778684][ T5708] usb 4-1: Product: syz [ 436.778700][ T5708] usb 4-1: Manufacturer: syz [ 436.778716][ T5708] usb 4-1: SerialNumber: syz [ 436.964934][ T5708] usb 4-1: config 0 descriptor?? [ 436.966055][T12314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 437.178408][T12314] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 437.286105][ T5708] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 437.742621][ T5708] usb 4-1: USB disconnect, device number 7 [ 437.742710][ C0] synaptics_usb 4-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 437.851303][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'. [ 438.991428][ T98] block nbd1: Possible stuck request ffff888026be0000: control (read@0,4096B). Runtime 60 seconds [ 439.335973][T12361] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2213'. [ 439.842629][T12375] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m% ic;AAZZ I [ 440.006315][T12385] loop9: detected capacity change from 0 to 7 [ 440.007838][T12385] Dev loop9: unable to read RDB block 7 [ 440.007881][T12385] loop9: unable to read partition table [ 440.008088][T12385] loop9: partition table beyond EOD, truncated [ 440.008107][T12385] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 440.237052][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.237127][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.281362][ T5708] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 440.441321][ T5708] usb 3-1: Using ep0 maxpacket: 16 [ 440.443780][ T5708] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 440.443812][ T5708] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 440.443841][ T5708] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 440.443868][ T5708] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 440.443898][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 440.448756][ T5708] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 440.448787][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.448809][ T5708] usb 3-1: Product: syz [ 440.448824][ T5708] usb 3-1: Manufacturer: syz [ 440.448839][ T5708] usb 3-1: SerialNumber: syz [ 440.545727][ T5708] usb 3-1: config 0 descriptor?? [ 440.611386][T12388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 440.815096][T12385] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 440.839017][ T5708] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 441.147993][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2227'. [ 441.327288][ T6746] usb 3-1: USB disconnect, device number 13 [ 441.327388][ C1] synaptics_usb 3-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 441.672279][T12425] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2230'. [ 443.230310][T12469] loop9: detected capacity change from 0 to 7 [ 443.239609][T12469] Dev loop9: unable to read RDB block 7 [ 443.239655][T12469] loop9: unable to read partition table [ 443.239891][T12469] loop9: partition table beyond EOD, truncated [ 443.239910][T12469] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 443.474981][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2249'. [ 443.475036][T12471] net_ratelimit: 7 callbacks suppressed [ 443.475129][T12471] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 443.533993][ T6746] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 443.687202][ T6746] usb 3-1: Using ep0 maxpacket: 16 [ 443.697079][ T6746] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 443.697112][ T6746] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 443.697139][ T6746] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 443.697166][ T6746] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 443.697196][ T6746] usb 3-1: config 0 interface 0 has no altsetting 0 [ 443.718602][ T6746] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 443.718711][ T6746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.718734][ T6746] usb 3-1: Product: syz [ 443.718749][ T6746] usb 3-1: Manufacturer: syz [ 443.718766][ T6746] usb 3-1: SerialNumber: syz [ 443.869447][ T6746] usb 3-1: config 0 descriptor?? [ 443.871134][T12469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 444.109848][T12469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 444.168077][ T6746] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input18 [ 444.524042][ T6746] usb 3-1: USB disconnect, device number 14 [ 444.711448][ T5611] Bluetooth: hci5: command 0x0406 tx timeout [ 445.550936][T12512] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2263'. [ 446.331512][T12527] block nbd4: server does not support multiple connections per device. [ 446.332003][T12527] block nbd4: shutting down sockets [ 446.571527][T12532] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2270'. [ 447.172660][T12550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2277'. [ 447.231391][T12549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2276'. [ 447.231436][T12549] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 449.949388][T12607] syzkaller1: entered promiscuous mode [ 449.949417][T12607] syzkaller1: entered allmulticast mode [ 450.826953][T12650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 451.849805][ T32] block nbd2: Possible stuck request ffff888026c97540: control (read@0,1024B). Runtime 120 seconds [ 451.849933][ T32] block nbd2: Possible stuck request ffff888026c97700: control (read@1024,1024B). Runtime 120 seconds [ 451.849960][ T32] block nbd2: Possible stuck request ffff888026c978c0: control (read@2048,1024B). Runtime 120 seconds [ 451.849984][ T32] block nbd2: Possible stuck request ffff888026c97a80: control (read@3072,1024B). Runtime 120 seconds [ 452.162287][T12682] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5598] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[12682] [ 452.976778][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'. [ 452.976815][T12700] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 454.319191][T12740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2326'. [ 454.319228][T12740] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 454.385976][T12750] netlink: 'syz.0.2330': attribute type 4 has an invalid length. [ 454.438684][T12750] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2330'. [ 454.438716][T12750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2330'. [ 454.992193][ T98] block nbd3: Possible stuck request ffff888026cf8dc0: control (read@0,1024B). Runtime 180 seconds [ 454.992241][ T98] block nbd3: Possible stuck request ffff888026cf8f80: control (read@1024,1024B). Runtime 180 seconds [ 454.992272][ T98] block nbd3: Possible stuck request ffff888026cf9140: control (read@2048,1024B). Runtime 180 seconds [ 454.992302][ T98] block nbd3: Possible stuck request ffff888026cf9300: control (read@3072,1024B). Runtime 180 seconds [ 455.100789][T12767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2337'. [ 455.100821][T12767] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 455.362591][T12753] syzkaller1: entered promiscuous mode [ 455.362635][T12753] syzkaller1: entered allmulticast mode [ 456.216480][T12778] syzkaller1: entered promiscuous mode [ 456.216508][T12778] syzkaller1: entered allmulticast mode [ 457.168243][T12807] syzkaller1: entered promiscuous mode [ 457.168272][T12807] syzkaller1: entered allmulticast mode [ 457.262958][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2352'. [ 457.262995][T12818] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 458.385423][T12852] block nbd4: server does not support multiple connections per device. [ 458.386072][T12852] block nbd4: shutting down sockets [ 458.410833][T12856] syzkaller1: entered promiscuous mode [ 458.410870][T12856] syzkaller1: entered allmulticast mode [ 458.933684][T12871] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2373'. [ 459.234544][T12849] syzkaller1: entered promiscuous mode [ 459.234573][T12849] syzkaller1: entered allmulticast mode [ 459.733796][T12898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2382'. [ 463.320769][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2395'. [ 463.537888][ T5611] block nbd4: Receive control failed (result -32) [ 465.356835][T13011] netlink: 'syz.1.2420': attribute type 1 has an invalid length. [ 465.528838][T13011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.511412][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 270 seconds [ 466.511461][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 270 seconds [ 466.511495][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 270 seconds [ 466.511527][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 270 seconds [ 466.799974][T13034] syzkaller1: entered promiscuous mode [ 466.800004][T13034] syzkaller1: entered allmulticast mode [ 469.071324][ T98] block nbd1: Possible stuck request ffff888026be0000: control (read@0,4096B). Runtime 90 seconds [ 469.713474][ T5611] block nbd5: Receive control failed (result -32) [ 470.707491][ T5611] block nbd6: Receive control failed (result -32) [ 471.114518][T13113] netlink: 'syz.4.2454': attribute type 1 has an invalid length. [ 471.306430][T13113] 8021q: adding VLAN 0 to HW filter on device bond3 [ 471.475217][T13117] bond3: (slave geneve2): making interface the new active one [ 471.500484][T13117] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 471.518190][T11738] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.525704][T11738] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.527847][T11738] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.527991][T11738] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.799450][T13134] netlink: 'syz.2.2460': attribute type 1 has an invalid length. [ 472.077224][T13134] 8021q: adding VLAN 0 to HW filter on device bond9 [ 472.204547][T13151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'. [ 472.215453][T13136] bond9: (slave geneve3): making interface the new active one [ 472.230816][T13136] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 472.264303][ T160] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 472.295104][ T160] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 472.295935][ T160] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 472.503030][ T160] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 472.731489][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2470'. [ 474.603286][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2482'. [ 474.901868][T13206] netlink: 'syz.0.2484': attribute type 4 has an invalid length. [ 474.910638][T13206] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2484'. [ 474.910665][T13206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2484'. [ 475.238081][T13218] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 475.279116][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2489'. [ 475.440889][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2490'. [ 475.657945][T13232] netlink: 'syz.3.2493': attribute type 3 has an invalid length. [ 475.657988][T13232] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2493'. [ 475.843289][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2494'. [ 476.334646][T13247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 478.005015][T13295] netlink: 'syz.0.2513': attribute type 3 has an invalid length. [ 478.005034][T13295] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2513'. [ 479.851872][T13334] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2525'. [ 479.851902][T13334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2525'. [ 480.273050][T13333] netlink: 'syz.1.2525': attribute type 4 has an invalid length. [ 480.748612][T13362] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2536'. [ 482.511430][ T32] block nbd2: Possible stuck request ffff888026c97540: control (read@0,1024B). Runtime 150 seconds [ 482.511480][ T32] block nbd2: Possible stuck request ffff888026c97700: control (read@1024,1024B). Runtime 150 seconds [ 482.511514][ T32] block nbd2: Possible stuck request ffff888026c978c0: control (read@2048,1024B). Runtime 150 seconds [ 482.511545][ T32] block nbd2: Possible stuck request ffff888026c97a80: control (read@3072,1024B). Runtime 150 seconds [ 482.698388][T13420] nbd: nbd4 already in use [ 482.700157][T13420] block nbd4: NBD_DISCONNECT [ 482.700177][T13420] block nbd4: Send disconnect failed -32 [ 482.700192][T13420] block nbd4: shutting down sockets [ 483.157649][T13431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2558'. [ 483.217298][T13433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2561'. [ 483.329142][T13441] netlink: 'syz.1.2560': attribute type 4 has an invalid length. [ 483.370662][T13441] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2560'. [ 483.370694][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2560'. [ 483.994694][T13434] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2558'. [ 483.994729][T13434] nbd: nbd64 already in use [ 484.619847][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2573'. [ 485.071337][ T98] block nbd3: Possible stuck request ffff888026cf8dc0: control (read@0,1024B). Runtime 210 seconds [ 485.071380][ T98] block nbd3: Possible stuck request ffff888026cf8f80: control (read@1024,1024B). Runtime 210 seconds [ 485.071405][ T98] block nbd3: Possible stuck request ffff888026cf9140: control (read@2048,1024B). Runtime 210 seconds [ 485.071429][ T98] block nbd3: Possible stuck request ffff888026cf9300: control (read@3072,1024B). Runtime 210 seconds [ 487.227701][T13563] netlink: 'syz.1.2602': attribute type 25 has an invalid length. [ 487.246194][T13570] netlink: 'syz.0.2601': attribute type 4 has an invalid length. [ 487.269563][T13570] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2601'. [ 487.269594][T13570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2601'. [ 487.658994][T13578] netlink: 'syz.0.2605': attribute type 4 has an invalid length. [ 487.691646][T13578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2605'. [ 487.691674][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2605'. [ 488.387927][T13595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2611'. [ 489.552242][T13635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2623'. [ 489.564030][T13635] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2623'. [ 490.811950][T13641] block nbd4: shutting down sockets [ 491.086350][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2630'. [ 491.449999][T13678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2636'. [ 491.764476][T13684] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2638'. [ 491.862289][T13678] hsr_slave_1 (unregistering): left promiscuous mode [ 492.061533][T13690] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 492.240760][T13697] nbd: must specify an index to disconnect [ 492.688998][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2648'. [ 492.875260][T13718] syz_tun: entered allmulticast mode [ 492.915360][T13722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2651'. [ 493.347008][T13717] syz_tun: left allmulticast mode [ 493.547630][T13730] block nbd4: shutting down sockets [ 494.036395][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 494.830599][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2673'. [ 494.921376][T13778] hsr_slave_1 (unregistering): left promiscuous mode [ 495.018501][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2677'. [ 495.088709][T13788] bridge1: entered allmulticast mode [ 495.382652][T13774] bridge1: left allmulticast mode [ 495.869767][T13816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2685'. [ 496.591396][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 300 seconds [ 496.591438][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 300 seconds [ 496.591462][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 300 seconds [ 496.591487][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 300 seconds [ 496.749086][T13830] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2692'. [ 496.750889][T13830] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2692'. [ 497.274205][T13836] block nbd4: shutting down sockets [ 497.623769][T13843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2698'. [ 497.809741][T13843] hsr_slave_1 (unregistering): left promiscuous mode [ 497.883627][T13849] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 499.114435][T13886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2715'. [ 499.151712][ T98] block nbd1: Possible stuck request ffff888026be0000: control (read@0,4096B). Runtime 120 seconds [ 501.352648][T13916] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2726'. [ 501.678733][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.678805][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.744391][T13932] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2734'. [ 501.760694][T13932] netlink: 'syz.3.2734': attribute type 1 has an invalid length. [ 502.570970][T13926] block nbd4: server does not support multiple connections per device. [ 502.572592][T13926] block nbd4: shutting down sockets [ 502.940464][T13950] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2740'. [ 503.027932][T13954] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2742'. [ 503.030105][T13954] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2742'. [ 503.504815][T13973] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2749'. [ 503.510560][T13973] netlink: 'syz.0.2749': attribute type 1 has an invalid length. [ 503.715914][T13982] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2753'. [ 503.908067][T13991] netlink: 'syz.4.2755': attribute type 4 has an invalid length. [ 503.927245][T13991] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2755'. [ 503.927276][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2755'. [ 504.586651][T14012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2763'. [ 504.864568][T14016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2764'. [ 507.419156][T14039] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2773'. [ 507.421694][T14039] netlink: 'syz.2.2773': attribute type 1 has an invalid length. [ 507.551482][T14016] hsr_slave_1 (unregistering): left promiscuous mode [ 507.797309][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2775'. [ 508.208655][T14064] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2782'. [ 509.255400][T14080] team0: Port device syz_tun added [ 509.858658][T14099] netlink: 388 bytes leftover after parsing attributes in process `syz.4.2794'. [ 509.963936][T14104] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2795'. [ 510.328825][T14113] team0: Port device syz_tun added [ 512.292134][T14151] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2807'. [ 512.594322][ T32] block nbd2: Possible stuck request ffff888026c97540: control (read@0,1024B). Runtime 180 seconds [ 512.594376][ T32] block nbd2: Possible stuck request ffff888026c97700: control (read@1024,1024B). Runtime 180 seconds [ 512.594408][ T32] block nbd2: Possible stuck request ffff888026c978c0: control (read@2048,1024B). Runtime 180 seconds [ 512.594440][ T32] block nbd2: Possible stuck request ffff888026c97a80: control (read@3072,1024B). Runtime 180 seconds [ 512.764472][T14176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2809'. [ 513.803583][T14202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2819'. [ 513.833570][T14205] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2820'. [ 514.043885][T14206] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2819'. [ 514.043940][T14206] nbd: nbd64 already in use [ 514.560225][T12419] udevd[12419]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 514.808425][T14230] syz_tun: entered allmulticast mode [ 514.925053][T14234] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2831'. [ 515.097238][T14229] syz_tun: left allmulticast mode [ 515.151325][ T98] block nbd3: Possible stuck request ffff888026cf8dc0: control (read@0,1024B). Runtime 240 seconds [ 515.151375][ T98] block nbd3: Possible stuck request ffff888026cf8f80: control (read@1024,1024B). Runtime 240 seconds [ 515.151407][ T98] block nbd3: Possible stuck request ffff888026cf9140: control (read@2048,1024B). Runtime 240 seconds [ 515.151440][ T98] block nbd3: Possible stuck request ffff888026cf9300: control (read@3072,1024B). Runtime 240 seconds [ 515.501688][T14250] lo: entered allmulticast mode [ 515.548898][T14249] lo: left allmulticast mode [ 515.854000][T14261] netlink: 388 bytes leftover after parsing attributes in process `syz.0.2843'. [ 518.776383][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2867'. [ 518.776415][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2867'. [ 521.244532][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'. [ 521.349223][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'. [ 521.349259][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2881'. [ 521.564110][T14379] hsr_slave_1 (unregistering): left promiscuous mode [ 523.674404][T14452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2896'. [ 524.687060][T14486] bridge1: entered allmulticast mode [ 524.703281][T14484] bridge1: left allmulticast mode [ 524.789437][T14489] loop9: detected capacity change from 0 to 7 [ 524.857441][T14489] Dev loop9: unable to read RDB block 7 [ 524.857494][T14489] loop9: unable to read partition table [ 524.857704][T14489] loop9: partition table beyond EOD, truncated [ 524.857725][T14489] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 525.081742][ T5708] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 525.234566][ T5708] usb 1-1: Using ep0 maxpacket: 16 [ 525.237873][ T5708] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 525.237909][ T5708] usb 1-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.237941][ T5708] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 525.237972][ T5708] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 525.238004][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 525.297653][ T5708] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 525.297689][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.297710][ T5708] usb 1-1: Product: syz [ 525.297726][ T5708] usb 1-1: Manufacturer: syz [ 525.297743][ T5708] usb 1-1: SerialNumber: syz [ 525.346705][ T5708] usb 1-1: config 0 descriptor?? [ 525.348257][T14490] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 525.565866][T14489] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 525.635593][ T5708] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20 [ 526.406052][ T5708] usb 1-1: USB disconnect, device number 8 [ 526.406137][ C0] synaptics_usb 1-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 526.682229][ T98] block nbd0: Possible stuck request ffff888026b87000: control (read@0,1024B). Runtime 330 seconds [ 526.682277][ T98] block nbd0: Possible stuck request ffff888026b871c0: control (read@1024,1024B). Runtime 330 seconds [ 526.682311][ T98] block nbd0: Possible stuck request ffff888026b87380: control (read@2048,1024B). Runtime 330 seconds [ 526.682344][ T98] block nbd0: Possible stuck request ffff888026b87540: control (read@3072,1024B). Runtime 330 seconds [ 527.132747][T14544] syz_tun: entered allmulticast mode [ 527.345387][T14543] syz_tun: left allmulticast mode [ 527.897029][T14552] team0: Port device syz_tun added [ 528.527146][T14572] loop9: detected capacity change from 0 to 7 [ 528.549445][T14572] Dev loop9: unable to read RDB block 7 [ 528.549500][T14572] loop9: unable to read partition table [ 528.549703][T14572] loop9: partition table beyond EOD, truncated [ 528.549724][T14572] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 528.714048][T14582] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2936'. [ 528.921294][ T6745] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 529.101272][ T6745] usb 2-1: Using ep0 maxpacket: 16 [ 529.105426][ T6745] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 529.105462][ T6745] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 529.105494][ T6745] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 529.105526][ T6745] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 529.105560][ T6745] usb 2-1: config 0 interface 0 has no altsetting 0 [ 529.109763][ T6745] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 529.109934][ T6745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.109961][ T6745] usb 2-1: Product: syz [ 529.109978][ T6745] usb 2-1: Manufacturer: syz [ 529.109997][ T6745] usb 2-1: SerialNumber: syz [ 529.206184][ T6745] usb 2-1: config 0 descriptor?? [ 529.207748][T14577] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.242182][ T98] block nbd1: Possible stuck request ffff888026be0000: control (read@0,4096B). Runtime 150 seconds [ 529.416508][T14572] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 529.441459][ T6745] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input22 [ 529.827825][ T6744] usb 2-1: USB disconnect, device number 5 [ 530.339097][T14608] bridge1: entered allmulticast mode [ 530.379915][T14607] bridge1: left allmulticast mode [ 530.669307][T14612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2946'. [ 531.599229][T14576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 532.255938][T14634] netlink: 'syz.3.2953': attribute type 25 has an invalid length. [ 532.387005][T14640] loop9: detected capacity change from 0 to 7 [ 532.420322][T14640] Dev loop9: unable to read RDB block 7 [ 532.420376][T14640] loop9: unable to read partition table [ 532.420588][T14640] loop9: partition table beyond EOD, truncated [ 532.420625][T14640] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 532.762558][ T5869] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 532.921736][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 532.924355][ T5869] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 532.924443][ T5869] usb 2-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 532.924473][ T5869] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 532.924502][ T5869] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 532.924533][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0 [ 532.927441][ T5869] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 532.927472][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.927493][ T5869] usb 2-1: Product: syz [ 532.927508][ T5869] usb 2-1: Manufacturer: syz [ 532.927523][ T5869] usb 2-1: SerialNumber: syz [ 533.085610][ T5869] usb 2-1: config 0 descriptor?? [ 533.086686][T14640] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 533.293401][T14640] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 533.350208][ T5869] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input24 [ 533.686680][T14669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2967'. [ 533.807219][ T5869] usb 2-1: USB disconnect, device number 6 [ 533.807239][ C1] synaptics_usb 2-1:0.0: synusb_irq - usb_submit_urb failed with result: -19 [ 533.969657][T14673] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2969'. [ 534.216828][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2970'. [ 534.365706][T14675] vlan2: entered promiscuous mode [ 534.365736][T14675] hsr0: entered promiscuous mode [ 534.406032][T14675] vlan2: entered allmulticast mode [ 534.406059][T14675] hsr0: entered allmulticast mode [ 534.406075][T14675] hsr_slave_0: entered allmulticast mode [ 534.483180][T14639] ------------[ cut here ]------------ [ 534.483194][T14639] kcov->t != t [ 534.483208][T14639] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#0: syz.1.2956/14639 [ 534.483456][T14639] Modules linked in: [ 534.483485][T14639] CPU: 0 UID: 0 PID: 14639 Comm: syz.1.2956 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 534.483537][T14639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 534.483554][T14639] RIP: 0010:kcov_task_exit+0x181/0x240 [ 534.483618][T14639] Code: 90 00 00 00 e8 50 cb 57 00 4c 89 f7 5b 41 5e 41 5f e9 f3 8b 5d 00 7c 40 5b 41 5e 41 5f e9 87 ec 7f 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 534.483634][T14639] RSP: 0018:ffffc9000ea4fd20 EFLAGS: 00010206 [ 534.483674][T14639] RAX: 0c7ecca88eb7a200 RBX: ffff8880257b8000 RCX: 0000000000000000 [ 534.483687][T14639] RDX: 000000004f210036 RSI: ffffffff8bca5f60 RDI: 00000000ffffffff [ 534.483699][T14639] RBP: ffffc9000ea4fe80 R08: ffffffff8b43b9a0 R09: 0000000000000000 [ 534.483712][T14639] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 534.483723][T14639] R13: ffff8880257b8000 R14: ffff888035352800 R15: ffff888035352808 [ 534.483737][T14639] FS: 000055557cd05500(0000) GS:ffff888125c4c000(0000) knlGS:0000000000000000 [ 534.483752][T14639] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 534.483764][T14639] CR2: 00002000000cd200 CR3: 00000000548a6000 CR4: 00000000003526f0 [ 534.483781][T14639] Call Trace: [ 534.483817][T14639] [ 534.483878][T14639] do_exit+0x159/0x2360 [ 534.483981][T14639] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 534.484104][T14639] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 534.484126][T14639] ? reacquire_held_locks+0x104/0x190 [ 534.484208][T14639] ? __pfx_do_exit+0x10/0x10 [ 534.484239][T14639] ? rt_spin_unlock+0x157/0x200 [ 534.484262][T14639] ? rt_spin_unlock+0x163/0x200 [ 534.484283][T14639] do_group_exit+0x22d/0x2f0 [ 534.484312][T14639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.484357][T14639] __x64_sys_exit_group+0x3f/0x40 [ 534.484386][T14639] x64_sys_call+0x221a/0x2240 [ 534.484418][T14639] do_syscall_64+0x174/0x580 [ 534.484501][T14639] ? clear_bhb_loop+0x40/0x90 [ 534.484526][T14639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.484545][T14639] RIP: 0033:0x7fadc709de59 [ 534.484567][T14639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.484590][T14639] RSP: 002b:00007ffebe3256e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 534.484608][T14639] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadc709de59 [ 534.484621][T14639] RDX: 00007fadc62f9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.484632][T14639] RBP: 00007ffebe32574c R08: 0000000000000000 R09: 00000000000927c0 [ 534.484643][T14639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000149 [ 534.484654][T14639] R13: 00000000000927c0 R14: 0000000000081d43 R15: 00007ffebe3257a0 [ 534.484681][T14639] [ 534.484690][T14639] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 534.484709][T14639] CPU: 0 UID: 0 PID: 14639 Comm: syz.1.2956 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 534.484730][T14639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 534.484741][T14639] Call Trace: [ 534.484748][T14639] [ 534.484756][T14639] vpanic+0x56c/0xa60 [ 534.484790][T14639] ? __pfx__printk+0x10/0x10 [ 534.484812][T14639] ? __pfx_vpanic+0x10/0x10 [ 534.484828][T14639] ? is_bpf_text_address+0x292/0x2b0 [ 534.484926][T14639] ? is_bpf_text_address+0x26/0x2b0 [ 534.484954][T14639] panic+0xc5/0xd0 [ 534.484973][T14639] ? __pfx_panic+0x10/0x10 [ 534.485006][T14639] __warn+0x315/0x4c0 [ 534.485022][T14639] ? kcov_task_exit+0x181/0x240 [ 534.485052][T14639] ? kcov_task_exit+0x181/0x240 [ 534.485080][T14639] __report_bug+0x331/0x530 [ 534.485167][T14639] ? __lock_acquire+0x683/0x2ce0 [ 534.485194][T14639] ? kcov_task_exit+0x181/0x240 [ 534.485222][T14639] ? __pfx___report_bug+0x10/0x10 [ 534.485250][T14639] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 534.485275][T14639] ? rt_spin_lock+0x1e0/0x400 [ 534.485295][T14639] ? rt_spin_lock+0x1e0/0x400 [ 534.485316][T14639] ? kcov_task_exit+0x181/0x240 [ 534.485341][T14639] report_bug+0x16a/0x220 [ 534.485368][T14639] ? kcov_task_exit+0x181/0x240 [ 534.485393][T14639] ? kcov_task_exit+0x183/0x240 [ 534.485418][T14639] handle_bug+0x9c/0x200 [ 534.485484][T14639] exc_invalid_op+0x1a/0x50 [ 534.485503][T14639] asm_exc_invalid_op+0x1a/0x20 [ 534.485522][T14639] RIP: 0010:kcov_task_exit+0x181/0x240 [ 534.485552][T14639] Code: 90 00 00 00 e8 50 cb 57 00 4c 89 f7 5b 41 5e 41 5f e9 f3 8b 5d 00 7c 40 5b 41 5e 41 5f e9 87 ec 7f 09 cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 534.485567][T14639] RSP: 0018:ffffc9000ea4fd20 EFLAGS: 00010206 [ 534.485590][T14639] RAX: 0c7ecca88eb7a200 RBX: ffff8880257b8000 RCX: 0000000000000000 [ 534.485604][T14639] RDX: 000000004f210036 RSI: ffffffff8bca5f60 RDI: 00000000ffffffff [ 534.485628][T14639] RBP: ffffc9000ea4fe80 R08: ffffffff8b43b9a0 R09: 0000000000000000 [ 534.485640][T14639] R10: 0000000000000000 R11: ffffffff8e1c3000 R12: 0000000000000000 [ 534.485652][T14639] R13: ffff8880257b8000 R14: ffff888035352800 R15: ffff888035352808 [ 534.485672][T14639] ? rt_spin_lock+0x1e0/0x400 [ 534.485699][T14639] do_exit+0x159/0x2360 [ 534.485726][T14639] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 534.485752][T14639] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 534.485775][T14639] ? reacquire_held_locks+0x104/0x190 [ 534.485799][T14639] ? __pfx_do_exit+0x10/0x10 [ 534.485831][T14639] ? rt_spin_unlock+0x157/0x200 [ 534.485855][T14639] ? rt_spin_unlock+0x163/0x200 [ 534.485876][T14639] do_group_exit+0x22d/0x2f0 [ 534.485906][T14639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.485928][T14639] __x64_sys_exit_group+0x3f/0x40 [ 534.485959][T14639] x64_sys_call+0x221a/0x2240 [ 534.485977][T14639] do_syscall_64+0x174/0x580 [ 534.486004][T14639] ? clear_bhb_loop+0x40/0x90 [ 534.486027][T14639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.486045][T14639] RIP: 0033:0x7fadc709de59 [ 534.486062][T14639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.486081][T14639] RSP: 002b:00007ffebe3256e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 534.486099][T14639] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fadc709de59 [ 534.486113][T14639] RDX: 00007fadc62f9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 534.486126][T14639] RBP: 00007ffebe32574c R08: 0000000000000000 R09: 00000000000927c0 [ 534.486140][T14639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000149 [ 534.486153][T14639] R13: 00000000000927c0 R14: 0000000000081d43 R15: 00007ffebe3257a0 [ 534.486187][T14639] [ 534.491103][T14639] Kernel Offset: disabled