last executing test programs: 19m54.671000798s ago: executing program 32 (id=490): r0 = shmget$private(0x0, 0x2000, 0x80, &(0x7f0000ffd000/0x2000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) shmctl$IPC_STAT(r0, 0x2, 0x0) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000001b80)=""/79) shmctl$IPC_RMID(r0, 0x0) 19m41.841299314s ago: executing program 33 (id=592): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r4, r2, r3}) 19m12.070252054s ago: executing program 34 (id=789): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) ioprio_set$pid(0x3, 0x0, 0x0) 19m2.421808661s ago: executing program 2 (id=855): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000740)) r0 = syz_io_uring_setup(0xec4, &(0x7f00000001c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500)=0x0, &(0x7f0000000600)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x0, 0xa9e7, 0x3, &(0x7f0000000040)={[0xfffffffffffffffa]}, 0x8) 19m1.42221313s ago: executing program 2 (id=861): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0xa, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 19m0.954342491s ago: executing program 2 (id=864): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) close(r0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x3}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 19m0.886793761s ago: executing program 2 (id=865): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x38ad211, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) 19m0.664539357s ago: executing program 2 (id=868): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 18m59.994925696s ago: executing program 2 (id=870): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 18m59.574424576s ago: executing program 35 (id=870): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000140)=0x3, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000180)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0) 18m52.896545739s ago: executing program 5 (id=907): mq_open(0x0, 0x2, 0x0, 0x0) r0 = fsopen(0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x4a11, 0x0, 0x0) fsmount(r0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x8001) 18m50.827572037s ago: executing program 5 (id=914): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 18m50.428599176s ago: executing program 5 (id=917): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) read(0xffffffffffffffff, 0x0, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sync_file_range(r0, 0x68218abd, 0x6, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 18m50.27721983s ago: executing program 5 (id=919): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f00000006c0)='./file0\x00', 0x0, 0x38ad211, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 18m50.053417235s ago: executing program 5 (id=921): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='vegas', 0x5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x30008001) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x28281, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x80000005, 0x7eac0, 0x3d3b4e}) 18m48.126836248s ago: executing program 5 (id=925): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0}) 18m47.487662328s ago: executing program 36 (id=925): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0}) 17m9.069694229s ago: executing program 8 (id=1517): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c6", 0x1}], 0x1, 0x0, 0x0, 0x20048054}}], 0x1, 0x8800) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x1}, 0x8) sendmmsg$alg(r1, &(0x7f0000005ac0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="eb13456f46a765abf639b72b8a139f359b9ab775ac089217bd34619d163b302fe5b56c83ba36f2ad5754652a659f4ca2976163de39b0b1cb89a196cf345297dcd360a49eb55a17802e01dd8889e790398c694d209ea9ec4b5a7b2137842999f05efaaffad4d5fc4c297426d39e2973afd17797c56f1ee7565a175f08702135bc531a8f2f45a6e2256a06a59cd5c0e8f04a30cf162903e042383dcf85118a5c0512d767cca0b677800dbe39150990370afcbbc0550c13d62bdd242cc9dfab2e194bc4103e3293bcb3d55fb5e7887c07d23157b978ce1378c755f654a5eeed63e488fafc22fa520f8c974e901ac57ad1072d8362d5022583ce4698aa51a1ba478ec2128d2467a4a5c8ba0e0e073115c783458d5cc562d473a42b8693dfa2f5047ad4484c9000fc70303560903325dba08cc0ca84652ac269a33e43981372f5f0cbf016385b579c2e3bae9fe2ae1b537dae375160794c21e1d0346bd9577ce62bfb3634105ebfa216cd9a2d693b4eb420af5b94b2a35c024a2199f72280b96ebbd50d1f934e2ed5e809b7eb513b932f049846c783c755c2997d9213d3be892dcbd11e9618aebd610b230b78c5fd673741063fb3603c3c87989eb6a2ca0d2029d8c055c35e3b918c234abc1287ad6665fc04995434cd078d5997edc4b2f86ee29412688aafbb274b1837783edf0cea84870a97a13b5acd0e409ea7bf9ae009785b5effd2745231f0d95b42649f41d4fe01b9c079960701bbb696036cd39a7775fa4ee55b67687f976a269e42fcbae04fc688ca91a013661f47027c0b669a55ad7a84476293273282e170d28ab4db9e3b8d26b756d0eea813fb28df6a9a2127fef569c27dc1a721b1ccd709eb97636a1c1bc796edaabd6751b9d402fccb80767ee30665c7186dd94eafa176fe21871f0610533771fdccfedfa071ab4dba858e2b0bd7f9ea6638226c43c87e709b5ca61967573b6cb7b758a9ad659f2caf4a260027a000eead341238d4c213dd75683694d9a938ec88ce5a78e27d611c1af8cf9b22501e29847a73eab3c39d936088b856d3de4338a1d8bf078e517448c3f19646899ae2fe6edc10448e4e5ce1d4a37141835819bf278166071bb6806e2e7eec03184d7dd0b7c89bbd6f8cf6b9535b167f472ca59fd3357bf75fbf1cf2e7eba744334f82c6b49a6675abdf500c262b1526b5a708aa38964cb65127097ddc5695e6c95038457b38924ddbb537ed72cc37ee823bf61e42247b9456f85e9dca39596f96f00fe37eabb9d782ef34932ff05b170aa3d0ea2d422f42f2eee50e12937c0fd1016a6fcc55692c1b4f108dfbd6d90bda43295a64b25a033d773358c71842d2159e8c4cca76596f7748920968fdfe46b08235b3910a375c5a6db9355d2fd6f269e7c8cc3ab6a442829a68b358ae27d3346817a2f0d93c0c6745d67051e9b58428f1745be75e3aca2b99c93a452b28d84cc84d433baa63a9e345f027eef5cd4901d81b77fbb90d8a51d8c9071c94e4e907b1a1b29ebe55f4545d51a9b1c23daa92b0b6555afb80942fd7fdfcffd16f2e4fcbf1bd2181a8a714539eebed30a47084b47a7cfc69862611948ba8beb154979f8ac9cf4c7cf449e4de220a88e941323c67965e86c1bbe5baf43a5a57ab8820f76082aff7e4ca01d9fffb9b2e849ed59c520664115fc510b3c5799ae9b0ce0a3689573b5e75686555fabaabaf22d5ce759cc0eb01856426db4763cbbb32355e99ac8c", 0x4d1}], 0x1, 0x0, 0x0, 0x40045}], 0x1, 0x4081) close(r1) 17m8.858995566s ago: executing program 8 (id=1518): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x79af, 0x8, 0x0, 0x272}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)='(', 0x1, 0x10, 0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1800001, 0x12, r4, 0x6a6db000) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 17m5.941119636s ago: executing program 8 (id=1527): add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000780)={0x29e9c934, 0x3, 0x7f, 0x404}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000340)=0x2a8, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0xfffffffffffffffe, 0x180, 0x2, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xffffffffffffffff, 0xbdb], 0xdddd0000, 0x1c4213}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040002"], 0x28}}, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17m5.286867769s ago: executing program 8 (id=1533): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x2c) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m3.652672566s ago: executing program 8 (id=1536): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x28800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x101) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0xb8, r0}, './file0\x00'}) 17m3.430288321s ago: executing program 8 (id=1538): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 16m46.197302972s ago: executing program 37 (id=1538): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 15m27.492912733s ago: executing program 3 (id=1787): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 15m27.333348455s ago: executing program 3 (id=1789): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) 15m24.254212444s ago: executing program 3 (id=1794): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x9d) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m22.663211364s ago: executing program 3 (id=1797): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) 15m15.655152527s ago: executing program 3 (id=1806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x10, 0x2, 0xb, &(0x7f0000000000)) 15m6.957265202s ago: executing program 3 (id=1820): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x220900, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$key(0xf, 0x3, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 14m50.56351522s ago: executing program 38 (id=1820): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x220900, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) socket$key(0xf, 0x3, 0x2) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 8m0.417877183s ago: executing program 0 (id=3466): socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0xffffffd3, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x6}, 0x22}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$inet(0x2b, 0x801, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, 0x0) syz_emit_ethernet(0x107, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00001100ff8a9ec64ab8068fcd7dc5ea86b299f42e6eccc1962f4820ebc2a82324763e4734dbdef83e111878f45b6554061a5dec7ea2583a2276bafc68ea11ce9ba2fd482b60b68c15d52e8fa6765a0454c7ed400349f0513b4bcd2b8368cfdbd1bb0a421b30ce868ad82653325eea40631e5f3686ace6366a5c"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 7m59.030091371s ago: executing program 0 (id=3470): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xc, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f1022"}) 7m58.879500055s ago: executing program 0 (id=3472): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) listen(r0, 0x1) 7m58.773153182s ago: executing program 0 (id=3474): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, 0x0, 0x4002, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1001410, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 7m58.606481736s ago: executing program 0 (id=3476): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7m57.708545583s ago: executing program 0 (id=3483): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsmount(r1, 0x0, 0xc) 7m57.364454029s ago: executing program 39 (id=3483): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fsmount(r1, 0x0, 0xc) 3.909644715s ago: executing program 1 (id=5543): r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x8000, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x10e80, &(0x7f00000000c0)=ANY=[], 0x0) 3.493341278s ago: executing program 1 (id=5549): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) write$P9_RVERSION(r2, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.L'}, 0x41) 3.049322877s ago: executing program 1 (id=5554): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000300)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12141, 0x0) 2.913718209s ago: executing program 1 (id=5557): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001480)=@raw={'raw\x00', 0x8, 0x3, 0x1288, 0x10c8, 0x8, 0xfa04, 0x10c8, 0x6c02, 0x11f0, 0x194, 0x194, 0x11f0, 0x194, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'wlan1\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x2}, 0x0, 0x10a0, 0x10c8, 0x0, {0x0, 0x74020000}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup/syz1\x00', 0xcc}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x0, 0x23}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@addrtype={{0x30}, {0x218, 0x11}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x0, 0x3, 0x4, 0x2], 0x1, 0x6}, {0x0, [0x3, 0x5, 0x6, 0x2, 0x0, 0x6], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x12e8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x17e6, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.543363363s ago: executing program 9 (id=5561): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "941895a14fa6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x48010}, 0xd209f6d814827b13) recvmmsg(r0, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000a00)=""/16, 0x10}], 0x1}, 0x3}], 0x2, 0x10023, 0x0) 2.402710131s ago: executing program 9 (id=5564): ftruncate(0xffffffffffffffff, 0x74c893df) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) sync() 2.193541842s ago: executing program 1 (id=5567): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001"], 0xe4}}, 0x4000005) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x16}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002"], 0x50}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.862987888s ago: executing program 4 (id=5569): unshare(0x4040600) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4) 1.786795799s ago: executing program 9 (id=5570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000001c0)={@val={0x0, 0x6003}, @void, @eth={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0xe000, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x9}}}}}}}, 0x3e) 1.549698324s ago: executing program 4 (id=5571): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xed]}, 0x8) ppoll(&(0x7f0000000000)=[{r0, 0x2001}], 0x1, 0x0, 0x0, 0x0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000000)={[0xe]}, 0x0, 0x0, 0x8) tkill(r1, 0x4) 1.194914495s ago: executing program 1 (id=5572): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000300)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x9, 0x5, 0x7, 0xff, 0xf0}, 0x19, &(0x7f0000000240)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x2c, "71ba6579f87e86eab7c251eb3190e2c5"}]}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="2015d5"], 0x0, 0x0}) 835.775087ms ago: executing program 6 (id=5575): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r1, 0x0) tkill(r0, 0x1) 834.971157ms ago: executing program 7 (id=5576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000840)={"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"}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0x2000, 0x2, 0x9, 0xffffffff, 0x0, [{0x81, 0xd, 0x2, '\x00', 0xff}, {0x6, 0x3, 0x5, '\x00', 0xcf}, {0x1, 0x2, 0x91, '\x00', 0x6}, {0x4, 0xfd, 0xff, '\x00', 0x97}, {0x9, 0xb, 0x80, '\x00', 0x8}, {0xfa, 0x6, 0xf, '\x00', 0x6}, {0x0, 0x5, 0x4, '\x00', 0xcf}, {0x7, 0xd, 0xf, '\x00', 0x1}, {0x3, 0x0, 0x4, '\x00', 0xff}, {0x1, 0x1, 0xfb, '\x00', 0x9}, {0xd, 0xfd, 0x8f, '\x00', 0x9}, {0x2, 0x5, 0x10, '\x00', 0x5}, {0xf, 0x6, 0x42, '\x00', 0x7f}, {0x9, 0x1, 0x8, '\x00', 0x8}, {0x81, 0x10, 0x4, '\x00', 0x3d}, {0x1, 0xe, 0x2, '\x00', 0x20}, {0x0, 0xc, 0x20, '\x00', 0x5}, {0x20, 0x40, 0x8, '\x00', 0xfc}, {0xb, 0x2, 0x5, '\x00', 0x4}, {0x81, 0x5, 0x9, '\x00', 0x8}, {0x1, 0x6, 0x5, '\x00', 0xa}, {0x9, 0xfc, 0x90, '\x00', 0x21}, {0x4, 0xeb, 0xc0}, {0x6, 0x5, 0x0, '\x00', 0xb}]}}) 702.861617ms ago: executing program 7 (id=5577): syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000a00)={0x14, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 689.979779ms ago: executing program 6 (id=5578): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r2 = fanotify_init(0x8, 0x800) fanotify_mark(r2, 0x1, 0x23, r0, 0x0) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r0, 0x0, r3, 0x0, 0x1, 0xb) 663.006144ms ago: executing program 9 (id=5579): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x48, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1, 0x0, 0xff, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010102}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @private=0xa0100ff}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 546.929794ms ago: executing program 4 (id=5580): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) sendmmsg(r0, &(0x7f0000002680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="100000000000000000000000035afd6a9d"], 0x30}}], 0x1, 0x8000) 546.755504ms ago: executing program 6 (id=5581): unshare(0x20000400) gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) 477.041886ms ago: executing program 4 (id=5582): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r1, @ANYBLOB="08000b00e000000108000200ac"], 0x60}}, 0x814) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 434.498864ms ago: executing program 9 (id=5583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000080850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000007c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, {0x4e21, 0x4e20, 0x8}}}}}, 0x0) 375.282929ms ago: executing program 6 (id=5584): ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) eventfd2(0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f00000007c0)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}}}, 0x0) 360.370922ms ago: executing program 4 (id=5585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@arm64={0xf8, 0x6, 0x4, '\x00', 0x200}) 329.616235ms ago: executing program 6 (id=5586): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x3fc, 0x7, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 242.601455ms ago: executing program 4 (id=5587): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0) exit(0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x2, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x8, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 233.445295ms ago: executing program 9 (id=5588): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) fcntl$lock(r0, 0x7, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r1, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 202.093768ms ago: executing program 6 (id=5589): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/4096, 0x1000}, 0xbac00000}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x401, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 71.024328ms ago: executing program 7 (id=5590): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setresuid(0x0, 0xee00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) 70.840411ms ago: executing program 7 (id=5591): socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xda0, 0x0, 0xa}]}) 42.010134ms ago: executing program 7 (id=5592): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 7 (id=5593): unshare(0x22020400) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) ftruncate(r1, 0x1) kernel console output (not intermixed with test programs): Opcode 0x0c03 failed: -110 [ 874.588364][ T5801] usb 7-1: USB disconnect, device number 17 [ 874.631229][T16569] udevd[16569]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 875.415975][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 875.581537][ T9] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 875.581579][ T9] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 875.581596][ T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 875.581643][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 875.581666][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 875.583674][ T9] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 875.583699][ T9] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 875.583717][ T9] usb 7-1: Product: syz [ 875.583729][ T9] usb 7-1: Manufacturer: syz [ 875.725445][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 875.725464][ T9] cdc_wdm 7-1:1.0: skipping garbage [ 876.260841][ T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 876.260862][ T9] cdc_wdm 7-1:1.0: Unknown control protocol [ 876.334590][T16944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 876.468181][T16944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 876.543777][T16944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 876.792643][T16944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 877.309429][ C1] net_ratelimit: 3319 callbacks suppressed [ 877.309479][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 877.886937][T16944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.935028][T16944] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.975868][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.975999][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.044298][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.049723][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.395387][T15720] usb 7-1: USB disconnect, device number 18 [ 881.866264][T16944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.603542][T16944] veth0_vlan: entered promiscuous mode [ 884.652370][T16944] veth1_vlan: entered promiscuous mode [ 884.837516][T16944] veth0_macvtap: entered promiscuous mode [ 884.864919][T16944] veth1_macvtap: entered promiscuous mode [ 884.907419][T16944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.921082][T16944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.943245][T11934] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.943405][T11934] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.943741][T11934] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.943762][T11934] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.493499][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.493514][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.652733][ T7715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.652752][ T7715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 886.527408][T17419] lo speed is unknown, defaulting to 1000 [ 889.603579][T17445] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3644'. [ 890.559388][T17442] kthread_run failed with err -4 [ 894.066509][T17475] overlayfs: failed to clone upperpath [ 894.391781][ T5931] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 894.552159][ T5931] usb 7-1: Using ep0 maxpacket: 8 [ 894.554710][ T5931] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 894.554762][ T5931] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 894.554784][ T5931] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 894.554806][ T5931] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 894.554829][ T5931] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 894.554867][ T5931] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 894.554888][ T5931] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.552126][ T5931] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 895.606267][T17496] usbtmc 7-1:16.0: simple usb_control_msg returned 0 [ 895.632895][T17497] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 895.642329][ T37] audit: type=1326 audit(2000000786.889:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17491 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 895.642426][ T37] audit: type=1326 audit(2000000786.889:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17491 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 895.726601][T17501] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3657'. [ 895.937697][ T5931] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 895.937775][ T5931] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 895.937843][ T5931] usb 5-1: config 0 interface 0 has no altsetting 0 [ 896.278407][ T5931] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 896.278437][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 896.278455][ T5931] usb 5-1: Product: syz [ 896.278468][ T5931] usb 5-1: Manufacturer: syz [ 896.278481][ T5931] usb 5-1: SerialNumber: syz [ 896.281829][T15720] usb 7-1: USB disconnect, device number 19 [ 896.322728][ T5931] usb 5-1: config 0 descriptor?? [ 896.355120][ T37] audit: type=1326 audit(2000000787.553:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17491 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 896.355165][ T37] audit: type=1326 audit(2000000787.553:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17491 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 896.355747][ T37] audit: type=1326 audit(2000000787.553:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17491 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 896.355786][ T37] audit: type=1326 audit(2000000787.553:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17491 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 896.355822][ T37] audit: type=1326 audit(2000000787.553:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17491 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 896.355864][ T37] audit: type=1326 audit(2000000787.553:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17491 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 896.362932][ T5931] usb 5-1: selecting invalid altsetting 0 [ 896.494213][ T37] audit: type=1326 audit(2000000787.553:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17491 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 896.494256][ T37] audit: type=1326 audit(2000000787.666:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17491 comm="syz.1.3658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2bc953cece code=0x7ffc0000 [ 896.728063][ T5931] usb 5-1: USB disconnect, device number 20 [ 896.731421][T17510] loop8: detected capacity change from 0 to 7 [ 896.780660][T17510] Dev loop8: unable to read RDB block 7 [ 896.780723][T17510] loop8: unable to read partition table [ 896.780912][T17510] loop8: partition table beyond EOD, truncated [ 896.780929][T17510] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 897.133174][T17524] udevd[17524]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.171837][T17546] bond_slave_0: entered promiscuous mode [ 900.173190][T17546] bond_slave_1: entered promiscuous mode [ 900.302323][T17546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 900.522004][T17546] team0: Port device macvlan2 added [ 901.344948][T17566] netlink: 'syz.6.3679': attribute type 20 has an invalid length. [ 902.452881][T17595] 9p: Bad value for 'rfdno' [ 903.735616][T17613] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 904.774847][T17631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3700'. [ 905.121146][T17643] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 905.121166][T17643] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 905.215033][T17646] loop8: detected capacity change from 0 to 8 [ 905.230161][T17584] Dev loop8: unable to read RDB block 8 [ 905.230202][T17584] loop8: unable to read partition table [ 905.230425][T17584] loop8: partition table beyond EOD, truncated [ 905.258254][T17646] Dev loop8: unable to read RDB block 8 [ 905.258298][T17646] loop8: unable to read partition table [ 905.258480][T17646] loop8: partition table beyond EOD, truncated [ 905.258518][T17646] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 905.936846][T17668] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3710'. [ 906.142319][T17679] overlayfs: failed to clone upperpath [ 906.311934][ T5866] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 906.586192][ T5866] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 906.586292][ T5866] usb 7-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 906.586456][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.791470][ T5866] usb 7-1: config 0 descriptor?? [ 907.480829][ T5866] hid-alps 0003:044E:121E.0018: item fetching failed at offset 2/5 [ 907.481481][ T5866] hid-alps 0003:044E:121E.0018: parse failed [ 907.481576][ T5866] hid-alps 0003:044E:121E.0018: probe with driver hid-alps failed with error -22 [ 907.571963][T17703] sctp: [Deprecated]: syz.7.3726 (pid 17703) Use of struct sctp_assoc_value in delayed_ack socket option. [ 907.571963][T17703] Use struct sctp_sack_info instead [ 907.690464][ T5951] usb 7-1: USB disconnect, device number 20 [ 907.800284][T17717] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3731'. [ 908.176414][T17726] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3732'. [ 908.439978][T17737] netlink: 'syz.4.3735': attribute type 11 has an invalid length. [ 909.425809][T17743] isofs_fill_super: bread failed, dev=loop13, iso_blknum=16, block=32 [ 911.457534][T17795] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3748'. [ 912.302934][T17831] futex_wake_op: syz.6.3760 tries to shift op by 144; fix this program [ 914.567168][ T1053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.763414][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 915.763475][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 915.766125][T12423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.767986][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.784242][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.784376][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.868437][ T1053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.874289][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 915.911719][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 916.147389][T12423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.295149][ T7470] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 917.708132][T17907] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3783'. [ 917.716546][T17907] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3783'. [ 919.249258][T17934] netlink: 'syz.7.3788': attribute type 3 has an invalid length. [ 919.249284][T17934] netlink: 'syz.7.3788': attribute type 3 has an invalid length. [ 919.249916][T17934] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3788'. [ 920.861863][ T5866] net_ratelimit: 5 callbacks suppressed [ 920.861883][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 921.949822][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 922.934231][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.038062][T17977] overlayfs: failed to clone upperpath [ 923.058459][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 923.331271][T15720] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 924.016329][T15720] usb 5-1: Using ep0 maxpacket: 8 [ 924.112683][T15720] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 924.112710][T15720] usb 5-1: config 0 has no interface number 0 [ 924.112750][T15720] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 924.112772][T15720] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 924.112793][T15720] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 924.112816][T15720] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 924.112852][T15720] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 924.112869][T15720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.125300][T15720] usb 5-1: config 0 descriptor?? [ 924.172758][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 924.180147][T15720] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 924.528091][T18010] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3810'. [ 924.537848][ T5951] usb 5-1: USB disconnect, device number 21 [ 924.558071][ T5951] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 925.111124][ T5866] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 925.315363][ T5866] usb 10-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 925.315420][ T5866] usb 10-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 925.385489][ T5866] usb 10-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 925.385525][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 925.385576][ T5866] usb 10-1: Product: syz [ 925.385589][ T5866] usb 10-1: Manufacturer: syz [ 925.385640][ T5866] usb 10-1: SerialNumber: syz [ 925.705558][ T5866] usb 10-1: config 0 descriptor?? [ 926.147636][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.151447][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.221033][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 926.243633][ T5866] cdc_ether 10-1:0.0: skipping garbage [ 926.243656][ T5866] usb 10-1: bad CDC descriptors [ 926.263971][ T5866] usb 10-1: unsupported MDLM descriptors [ 926.284743][ T5866] usb 10-1: USB disconnect, device number 27 [ 926.426192][T18046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 926.602812][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 927.248763][ T5866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.297420][ T808] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 928.367128][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 928.472883][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.472915][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.472949][ T808] usb 7-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 928.472970][ T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.498415][ T808] usb 7-1: config 0 descriptor?? [ 928.992980][ T808] hid_parser_main: 5 callbacks suppressed [ 928.993001][ T808] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 929.190717][T18080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.204826][T18080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.432314][ T808] hid-led 0003:0FC5:B080.0019: probe with driver hid-led failed with error -71 [ 929.457173][ T808] usb 7-1: USB disconnect, device number 21 [ 929.473355][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 930.590530][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.173243][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 931.773736][T18150] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3858'. [ 931.924248][ T808] IPVS: starting estimator thread 0... [ 932.076522][T18152] IPVS: using max 9 ests per chain, 21600 per kthread [ 932.290636][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.409276][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.658655][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.659167][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 933.752839][T18191] netlink: 292 bytes leftover after parsing attributes in process `syz.7.3874'. [ 933.840238][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.251787][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 935.796545][T13151] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 935.880793][T18242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3890'. [ 935.881520][T18242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3890'. [ 935.960333][T13151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.960379][T13151] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 935.960400][T13151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.966857][T13151] usb 7-1: config 0 descriptor?? [ 936.138822][ T5931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.221706][T13151] usbhid 7-1:0.0: can't add hid device: -71 [ 936.221807][T13151] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 936.243116][T13151] usb 7-1: USB disconnect, device number 22 [ 936.397788][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 936.762729][T15720] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 936.920237][T15720] usb 7-1: Using ep0 maxpacket: 32 [ 936.922863][T15720] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.922908][T15720] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 936.922929][T15720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.950752][T15720] usb 7-1: config 0 descriptor?? [ 936.974974][T15720] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 936.986533][T15720] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 937.070190][T18268] netlink: 'syz.4.3902': attribute type 3 has an invalid length. [ 937.081100][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.445314][ T5951] usb 7-1: USB disconnect, device number 23 [ 937.463582][T18275] netlink: 'syz.7.3905': attribute type 8 has an invalid length. [ 937.463601][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3905'. [ 937.470853][ T5951] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 937.510112][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 937.554841][T18275] bond0: entered promiscuous mode [ 937.554863][T18275] bond_slave_0: entered promiscuous mode [ 937.555197][T18275] bond_slave_1: entered promiscuous mode [ 937.557502][T18275] gretap0: entered promiscuous mode [ 937.584233][T18275] bond0: left promiscuous mode [ 937.584254][T18275] bond_slave_0: left promiscuous mode [ 937.584486][T18275] bond_slave_1: left promiscuous mode [ 937.610032][T18275] gretap0: left promiscuous mode [ 938.767484][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 938.902053][T18292] netlink: 'syz.9.3910': attribute type 29 has an invalid length. [ 940.301481][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 940.608420][ T5951] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 941.441444][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.555067][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 942.874323][ T5879] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 943.038974][ T5879] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 943.039039][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 943.039064][ T5879] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 943.039083][ T5879] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 943.039120][ T5879] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 943.039194][ T5879] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.053648][ T5879] usb 10-1: config 0 descriptor?? [ 943.518287][ T5879] plantronics 0003:047F:FFFF.001A: reserved main item tag 0xd [ 943.564221][ T5879] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 943.665081][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.799067][ T5879] usb 10-1: USB disconnect, device number 28 [ 943.861483][T12423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 943.862244][ T9] IPVS: starting estimator thread 0... [ 943.883339][T18374] tipc: Started in network mode [ 943.883366][T18374] tipc: Node identity ac1414aa, cluster identity 4711 [ 943.886638][T18374] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.886675][T18374] tipc: Enabled bearer , priority 10 [ 943.953530][T18375] IPVS: using max 8 ests per chain, 19200 per kthread [ 944.030444][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.136758][T18381] overlayfs: failed to clone upperpath [ 944.178140][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.327680][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.441162][T18390] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3929'. [ 944.477341][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.584631][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 944.584647][ T37] audit: type=1326 audit(2000000832.677:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18391 comm="syz.9.3936" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1078d1c629 code=0x0 [ 944.627017][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 944.781235][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 944.898254][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 945.987557][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 945.997724][ T9] tipc: Node number set to 2886997162 [ 946.145182][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 946.402574][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 946.433696][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 949.740748][T18102] net_ratelimit: 3 callbacks suppressed [ 949.740766][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.066051][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 950.271630][ T5879] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 950.594677][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 950.624460][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 950.628048][ T5879] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 62, using maximum allowed: 30 [ 950.628092][ T5879] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 950.628117][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 950.628147][ T5879] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 950.628167][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.722552][ T5879] usb 5-1: config 0 descriptor?? [ 950.860503][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 951.029033][ T5879] usbhid 5-1:0.0: can't add hid device: -71 [ 951.029138][ T5879] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 951.069936][ T5879] usb 5-1: USB disconnect, device number 22 [ 951.191970][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 951.961037][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 952.302915][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 952.687748][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 952.855990][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 952.856020][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 952.856040][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 952.856076][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 952.856097][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.903099][ T9] usb 7-1: config 0 descriptor?? [ 953.073075][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 953.353977][ T9] plantronics 0003:047F:FFFF.001B: reserved main item tag 0xd [ 953.414891][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 953.454310][ T9] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 953.674424][T13151] usb 7-1: USB disconnect, device number 24 [ 953.746875][T18529] fido_id[18529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 953.864161][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.307179][T18102] net_ratelimit: 2 callbacks suppressed [ 955.307207][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.638409][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 956.408357][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.664784][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 956.750202][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 957.092634][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.434365][ T5879] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 957.520372][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.604565][ T5879] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 957.605733][ T5879] usb 7-1: config 0 has no interfaces? [ 957.609097][ T5879] usb 7-1: config 0 has no interfaces? [ 957.626950][ T5879] usb 7-1: config 0 has no interfaces? [ 957.629132][ T5879] usb 7-1: config 0 has no interfaces? [ 957.634370][ T5879] usb 7-1: config 0 has no interfaces? [ 957.636975][ T5879] usb 7-1: config 0 has no interfaces? [ 957.649632][ T5879] usb 7-1: config 0 has no interfaces? [ 957.659609][ T5879] usb 7-1: config 0 has no interfaces? [ 957.676678][ T5879] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.676704][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.676721][ T5879] usb 7-1: Product: syz [ 957.676733][ T5879] usb 7-1: Manufacturer: syz [ 957.676743][ T5879] usb 7-1: SerialNumber: syz [ 957.711947][ T5879] usb 7-1: config 0 descriptor?? [ 957.862058][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 957.937894][T18595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.938353][T18595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.946504][T18102] usb 7-1: USB disconnect, device number 25 [ 958.631918][T13151] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 958.634650][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 958.721151][T18637] overlayfs: failed to clone upperpath [ 958.794801][T13151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 958.794832][T13151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 958.794853][T13151] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 958.794875][T13151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 958.794898][T13151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 958.797871][T13151] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 958.797898][T13151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.797915][T13151] usb 7-1: Product: syz [ 958.797934][T13151] usb 7-1: Manufacturer: syz [ 958.797946][T13151] usb 7-1: SerialNumber: syz [ 958.832597][T13151] usb 7-1: config 0 descriptor?? [ 958.848905][T13151] adutux 7-1:0.0: interrupt endpoints not found [ 958.973876][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 959.008590][ T37] audit: type=1326 audit(2000000846.166:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18611 comm="syz.9.4014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1078d1c629 code=0x7fc00000 [ 959.056522][ T9] usb 7-1: USB disconnect, device number 26 [ 959.447869][ T37] audit: type=1326 audit(2000000846.577:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18662 comm="syz.7.4037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a4733c629 code=0x0 [ 959.602665][T18102] kernel read not supported for file /admmidi2 (pid: 18102 comm: kworker/1:3) [ 959.766541][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4041'. [ 960.856662][ T808] net_ratelimit: 45 callbacks suppressed [ 960.856680][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 961.071801][T18697] netlink: 1243 bytes leftover after parsing attributes in process `syz.1.4050'. [ 961.470634][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 961.967553][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 962.443807][ T5879] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 962.566058][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 962.597911][ T5879] usb 7-1: Using ep0 maxpacket: 16 [ 962.600104][ T5879] usb 7-1: config 1 has an invalid interface number: 105 but max is 0 [ 962.600127][ T5879] usb 7-1: config 1 has no interface number 0 [ 962.600181][ T5879] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 962.600204][ T5879] usb 7-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 962.600226][ T5879] usb 7-1: config 1 interface 105 has no altsetting 0 [ 962.602488][ T5879] usb 7-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 962.602512][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.602530][ T5879] usb 7-1: Product: syz [ 962.602543][ T5879] usb 7-1: Manufacturer: syz [ 962.602555][ T5879] usb 7-1: SerialNumber: syz [ 962.643704][T18725] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 962.643888][T18725] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 963.079644][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.123702][T18725] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 963.123900][T18725] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 963.592408][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.677725][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 963.784140][ T5879] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 963.794685][ T5879] aqc111 7-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 964.128499][T15720] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 964.166750][ T5879] aqc111 7-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 90:7d:00:73:ae:b9 [ 964.206052][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 964.258149][ T5879] usb 7-1: USB disconnect, device number 27 [ 964.261434][ T5879] aqc111 7-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.6-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 964.302206][T18757] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4073'. [ 964.306019][T15720] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.306057][T15720] usb 10-1: config 0 interface 0 has no altsetting 0 [ 964.343443][T15720] usb 10-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 964.343473][T15720] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.343491][T15720] usb 10-1: Product: syz [ 964.343504][T15720] usb 10-1: Manufacturer: syz [ 964.343517][T15720] usb 10-1: SerialNumber: syz [ 964.402209][T15720] usb 10-1: config 0 descriptor?? [ 964.423923][T15720] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 964.449305][T15720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 964.452220][T15720] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 964.452287][T15720] usb 10-1: media controller created [ 964.574371][T15720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 964.789585][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 965.063096][T18769] netlink: 'syz.7.4078': attribute type 11 has an invalid length. [ 965.128790][ T5879] aqc111 7-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 965.128922][ T5879] aqc111 7-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 965.129044][ T5879] aqc111 7-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 965.130358][T15720] DVB: Unable to find symbol tda10046_attach() [ 965.130370][T15720] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 965.130383][T15720] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 965.303130][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 965.602072][ T5879] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 965.776543][ T5879] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 965.776569][ T5879] usb 7-1: config 0 has no interface number 0 [ 965.776612][ T5879] usb 7-1: config 0 interface 41 has no altsetting 0 [ 965.805717][ T5879] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 965.805795][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.805814][ T5879] usb 7-1: Product: syz [ 965.805826][ T5879] usb 7-1: Manufacturer: syz [ 965.805839][ T5879] usb 7-1: SerialNumber: syz [ 965.814711][ T5879] usb 7-1: config 0 descriptor?? [ 966.251854][T15720] dvb_usb_m920x 10-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 966.255832][T15720] usb 10-1: USB disconnect, device number 29 [ 967.023819][ C0] net_ratelimit: 1 callbacks suppressed [ 967.023833][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 967.093395][T12423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.093629][T12423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.402066][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.735873][ T5879] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 967.952699][ T5879] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 967.952725][ T5879] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 967.952982][ T5879] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 968.033685][ T5879] usb 7-1: USB disconnect, device number 28 [ 968.124937][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 968.572168][T18807] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4088'. [ 968.619327][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 969.585873][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 970.562490][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.568155][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 970.721125][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 972.446529][T18102] net_ratelimit: 1 callbacks suppressed [ 972.446549][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 972.914309][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 973.438206][T15720] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 973.567779][T18857] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4107'. [ 973.599190][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.609605][T15720] usb 5-1: Using ep0 maxpacket: 32 [ 973.616122][T15720] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 973.616150][T15720] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 973.617965][T15720] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 973.617988][T15720] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 973.618006][T15720] usb 5-1: Product: syz [ 973.618019][T15720] usb 5-1: Manufacturer: syz [ 973.649059][T15720] hub 5-1:4.0: USB hub found [ 973.855744][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.864339][T15720] hub 5-1:4.0: 8 ports detected [ 973.864829][T15720] hub 5-1:4.0: insufficient power available to use all downstream ports [ 974.026184][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 974.083451][T15720] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 974.083477][T15720] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 974.113690][T15720] usb 5-1: USB disconnect, device number 23 [ 975.138037][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 975.927657][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 976.147443][T18833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 976.249832][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 976.752360][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 976.995612][ T9] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 976.995641][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.002310][ T9] usb 7-1: config 0 descriptor?? [ 977.070239][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.155014][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 977.486373][ T9] elan 0003:04F3:0755.001C: unknown main item tag 0x1 [ 977.580691][ T9] elan 0003:04F3:0755.001C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 977.791963][ T9] usb 7-1: USB disconnect, device number 29 [ 977.848276][T18908] overlayfs: failed to clone upperpath [ 978.172392][T18907] fido_id[18907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 978.218263][T18102] net_ratelimit: 2 callbacks suppressed [ 978.218281][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.473479][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 978.655222][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 978.815531][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 978.817397][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.817426][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.817446][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 978.817482][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 978.817502][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.824846][ T9] usb 5-1: config 0 descriptor?? [ 978.886689][T15720] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 979.050769][T15720] usb 10-1: Using ep0 maxpacket: 32 [ 979.053075][T15720] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 979.053101][T15720] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.089553][T15720] usb 10-1: config 0 descriptor?? [ 979.309206][T15720] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 979.326847][ T9] microsoft 0003:045E:07DA.001D: unknown main item tag 0x0 [ 979.326881][ T9] microsoft 0003:045E:07DA.001D: ignoring exceeding usage max [ 979.329372][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 979.359050][T15720] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 979.362805][T15720] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 979.362859][T15720] usb 10-1: media controller created [ 979.436906][T15720] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 979.520765][ T9] microsoft 0003:045E:07DA.001D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 979.520797][ T9] microsoft 0003:045E:07DA.001D: no inputs found [ 979.520809][ T9] microsoft 0003:045E:07DA.001D: could not initialize ff, continuing anyway [ 979.585281][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 979.747734][T18102] usb 5-1: USB disconnect, device number 24 [ 980.451263][T15720] stb0899_attach: Driver disabled by Kconfig [ 980.451280][T15720] az6027: no front-end attached [ 980.451280][T15720] [ 980.454963][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.455282][T15720] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 980.461903][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 980.516505][T15720] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input40 [ 980.518773][T15720] dvb-usb: schedule remote query interval to 400 msecs. [ 980.518790][T15720] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 980.678683][T18102] usb 10-1: USB disconnect, device number 30 [ 980.697134][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 980.969548][T18102] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 981.304049][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 981.304133][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 981.563072][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 981.585761][ T10] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 981.770043][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 981.808907][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 981.823484][ T10] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 981.823511][ T10] usb 10-1: config 0 has no interface number 0 [ 981.823551][ T10] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 981.838371][ T10] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 981.838399][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.838417][ T10] usb 10-1: Product: syz [ 981.838430][ T10] usb 10-1: Manufacturer: syz [ 981.838444][ T10] usb 10-1: SerialNumber: syz [ 981.896280][ T10] usb 10-1: config 0 descriptor?? [ 981.898842][T18994] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 982.025324][T19013] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4166'. [ 982.148226][T18994] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 982.361647][T19025] netlink: 1355 bytes leftover after parsing attributes in process `syz.6.4174'. [ 982.453413][T19020] lo speed is unknown, defaulting to 1000 [ 982.556908][T19030] batadv_slave_1: entered promiscuous mode [ 982.596004][T19029] batadv_slave_1: left promiscuous mode [ 982.666454][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 982.837948][T19039] overlayfs: failed to clone upperpath [ 983.450907][ T10] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 983.450937][ T10] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 983.466220][ T10] asix 10-1:0.188: probe with driver asix failed with error -71 [ 983.493670][ T10] usb 10-1: USB disconnect, device number 31 [ 983.690947][T15720] net_ratelimit: 1 callbacks suppressed [ 983.690965][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 983.776906][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 984.032640][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 984.374090][T19086] overlayfs: refusing to follow metacopy origin for (/file1) [ 985.144419][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 985.463097][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.256357][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 986.598746][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 986.940680][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 987.628249][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 987.721223][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 989.109472][ C0] net_ratelimit: 7 callbacks suppressed [ 989.109494][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 990.113469][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.205373][T16493] Bluetooth: hci2: command 0x0406 tx timeout [ 990.347511][T19161] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4203'. [ 990.583154][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 990.928678][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.993620][T19165] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4218'. [ 991.321550][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 991.944969][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 992.417134][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 993.008117][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 994.124498][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 994.496763][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 994.497198][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 995.236320][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 995.322213][T19220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.328310][T19219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 995.632435][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 996.348160][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 996.380232][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 996.553031][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 996.555091][ T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 996.555114][ T10] usb 5-1: config 0 has no interface number 0 [ 996.555174][ T10] usb 5-1: config 0 interface 184 has no altsetting 0 [ 996.557838][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 996.557862][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.557880][ T10] usb 5-1: Product: syz [ 996.557892][ T10] usb 5-1: Manufacturer: syz [ 996.557905][ T10] usb 5-1: SerialNumber: syz [ 996.797441][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.126204][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 998.240353][ T10] usb 5-1: config 0 descriptor?? [ 998.343691][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 998.361566][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.122423][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1000.189136][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1000.337896][ T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1000.338172][ T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1000.360459][ T10] usb 5-1: USB disconnect, device number 25 [ 1000.710567][T19275] overlayfs: failed to get inode (-116) [ 1000.710675][T19275] overlayfs: failed to get inode (-116) [ 1001.135944][T19295] overlayfs: failed to clone upperpath [ 1001.223256][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1001.308899][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1002.351188][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1002.388817][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.368468][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1003.452805][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1003.579996][T19314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4272'. [ 1003.583397][T19314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4272'. [ 1003.810041][T19321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4274'. [ 1003.827295][ T37] audit: type=1326 audit(2000001144.082:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19322 comm="syz.7.4275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a4733c629 code=0x0 [ 1004.626353][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1005.408253][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.670847][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.755980][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1005.873532][T15720] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1006.039156][T15720] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1006.039186][T15720] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.039205][T15720] usb 10-1: Product: syz [ 1006.039218][T15720] usb 10-1: Manufacturer: syz [ 1006.039231][T15720] usb 10-1: SerialNumber: syz [ 1006.681579][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1006.867838][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1008.967240][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.057058][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1009.060888][T15720] (unnamed net_device) (uninitialized): Assigned a random MAC address: e2:bf:69:3a:ed:c0 [ 1009.082142][T12423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1009.137075][T15720] rtl8150 10-1:1.0: eth5: rtl8150 is detected [ 1009.155657][T15720] usb 10-1: USB disconnect, device number 32 [ 1010.203650][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1010.299726][T13151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1011.371219][ T37] audit: type=1326 audit(2000001151.144:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19358 comm="syz.9.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1078d1c629 code=0x7ffc0000 [ 1011.371262][ T37] audit: type=1326 audit(2000001151.144:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19358 comm="syz.9.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1078d1c629 code=0x7ffc0000 [ 1011.371296][ T37] audit: type=1326 audit(2000001151.144:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19358 comm="syz.9.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1078d1c629 code=0x7ffc0000 [ 1011.371328][ T37] audit: type=1326 audit(2000001151.144:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19358 comm="syz.9.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1078d1c629 code=0x7ffc0000 [ 1011.371362][ T37] audit: type=1326 audit(2000001151.144:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19358 comm="syz.9.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1078d1c629 code=0x7ffc0000 [ 1011.371395][ T37] audit: type=1326 audit(2000001151.144:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19358 comm="syz.9.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1078d1c629 code=0x7ffc0000 [ 1011.371429][ T37] audit: type=1326 audit(2000001151.144:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19358 comm="syz.9.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1078d1c629 code=0x7ffc0000 [ 1011.371462][ T37] audit: type=1326 audit(2000001151.144:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19358 comm="syz.9.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1078d1c629 code=0x7ffc0000 [ 1011.371496][ T37] audit: type=1326 audit(2000001151.144:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19358 comm="syz.9.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1078d1c629 code=0x7ffc0000 [ 1011.371529][ T37] audit: type=1326 audit(2000001151.144:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19358 comm="syz.9.4286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1078d1c629 code=0x7ffc0000 [ 1011.905952][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1012.084292][T18102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1013.136018][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1013.187528][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.222971][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1014.610774][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1015.334812][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1015.764382][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.446636][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1016.447071][T12423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.795389][T19429] netlink: 'syz.9.4308': attribute type 4 has an invalid length. [ 1017.668523][ C0] net_ratelimit: 1 callbacks suppressed [ 1017.668544][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1017.937436][T19442] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1017.988878][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1018.956549][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1019.098813][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1019.289643][T19454] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1019.289954][T19454] block device autoloading is deprecated and will be removed. [ 1019.875515][T12423] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.038664][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1020.218075][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1020.855279][ T37] kauditd_printk_skb: 4 callbacks suppressed [ 1020.855557][ T37] audit: type=1326 audit(2000001160.003:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19487 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1020.856826][ T37] audit: type=1326 audit(2000001160.003:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19487 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1020.857340][ T37] audit: type=1326 audit(2000001160.003:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19487 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1020.857379][ T37] audit: type=1326 audit(2000001160.003:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19487 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1020.857415][ T37] audit: type=1326 audit(2000001160.003:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19487 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1020.857451][ T37] audit: type=1326 audit(2000001160.003:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19487 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1020.857487][ T37] audit: type=1326 audit(2000001160.003:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19487 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1020.857524][ T37] audit: type=1326 audit(2000001160.003:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19487 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1020.857560][ T37] audit: type=1326 audit(2000001160.003:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19487 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1020.857596][ T37] audit: type=1326 audit(2000001160.003:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19487 comm="syz.4.4329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1021.150454][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1021.332419][ T5801] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1021.849078][T19506] netlink: 'syz.4.4337': attribute type 4 has an invalid length. [ 1021.911772][T19508] netlink: 'syz.4.4337': attribute type 4 has an invalid length. [ 1022.264173][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1023.299853][T15720] net_ratelimit: 1 callbacks suppressed [ 1023.299870][T15720] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.374125][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1023.556295][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1023.906374][T19539] netlink: 43 bytes leftover after parsing attributes in process `syz.6.4348'. [ 1023.924404][T19539] netlink: 'syz.6.4348': attribute type 4 has an invalid length. [ 1023.993188][ T31] lo speed is unknown, defaulting to 1000 [ 1023.993229][ T31] syz0: Port: 1 Link DOWN [ 1024.627555][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1025.768895][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1026.354800][T19580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.354830][T19580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.379074][T19580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.379091][T19580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.483456][T19583] overlayfs: conflicting lowerdir path [ 1026.654021][T19583] overlayfs: failed to clone upperpath [ 1026.873116][T19590] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4365'. [ 1026.881277][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1026.918494][T19590] vlan2: entered promiscuous mode [ 1026.918515][T19590] bridge0: entered promiscuous mode [ 1027.992502][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1028.194155][T12423] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1029.192417][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1029.392931][T12423] usb 10-1: Using ep0 maxpacket: 32 [ 1029.396164][T12423] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1029.396187][T12423] usb 10-1: config 0 has no interface number 0 [ 1029.396227][T12423] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1029.398949][T12423] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1029.398973][T12423] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.398990][T12423] usb 10-1: Product: syz [ 1029.399002][T12423] usb 10-1: Manufacturer: syz [ 1029.399015][T12423] usb 10-1: SerialNumber: syz [ 1029.468394][T12423] usb 10-1: config 0 descriptor?? [ 1029.469606][T19592] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1029.693274][T19592] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1029.776634][T19614] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4373'. [ 1030.521702][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1031.680733][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1032.246395][T12423] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1032.246425][T12423] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 1032.246665][T12423] asix 10-1:0.188: probe with driver asix failed with error -71 [ 1032.276994][T12423] usb 10-1: USB disconnect, device number 33 [ 1032.686729][T12423] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1032.788302][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1033.750079][T19644] binder: BINDER_SET_CONTEXT_MGR already set [ 1033.750093][T19644] binder: 19643:19644 ioctl 4018620d 200000000040 returned -16 [ 1033.750771][T19644] binder: 19643:19644 ioctl c0306201 200000000240 returned -11 [ 1033.776021][T12423] usb 5-1: Using ep0 maxpacket: 32 [ 1033.802065][T12423] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1033.802091][T12423] usb 5-1: config 0 has no interface number 0 [ 1033.802135][T12423] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1033.812936][T12423] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1033.812963][T12423] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.812980][T12423] usb 5-1: Product: syz [ 1033.812992][T12423] usb 5-1: Manufacturer: syz [ 1033.813004][T12423] usb 5-1: SerialNumber: syz [ 1033.863592][T12423] usb 5-1: config 0 descriptor?? [ 1033.893607][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1034.253645][T19652] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4385'. [ 1035.005405][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1035.168259][T12423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1035.168288][T12423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1036.121265][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1036.370116][ T37] kauditd_printk_skb: 30 callbacks suppressed [ 1036.370134][ T37] audit: type=1326 audit(2000001174.529:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19672 comm="syz.7.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4733c629 code=0x7ffc0000 [ 1036.373485][ T37] audit: type=1326 audit(2000001174.529:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19672 comm="syz.7.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4733c629 code=0x7ffc0000 [ 1036.434609][ T37] audit: type=1326 audit(2000001174.529:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19672 comm="syz.7.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a4733c629 code=0x7ffc0000 [ 1036.435946][ T37] audit: type=1326 audit(2000001174.585:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19672 comm="syz.7.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4733c629 code=0x7ffc0000 [ 1036.436916][ T37] audit: type=1326 audit(2000001174.585:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19672 comm="syz.7.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4733c629 code=0x7ffc0000 [ 1036.518350][ T37] audit: type=1326 audit(2000001174.670:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19672 comm="syz.7.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a4733c629 code=0x7ffc0000 [ 1036.519334][ T37] audit: type=1326 audit(2000001174.670:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19672 comm="syz.7.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4733c629 code=0x7ffc0000 [ 1036.520885][ T37] audit: type=1326 audit(2000001174.670:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19672 comm="syz.7.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5a4733c629 code=0x7ffc0000 [ 1036.521802][ T37] audit: type=1326 audit(2000001174.670:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19672 comm="syz.7.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4733c629 code=0x7ffc0000 [ 1036.679103][T12423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1036.679132][T12423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1036.679146][T12423] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1036.679355][T12423] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1036.684691][T12423] usb 5-1: USB disconnect, device number 26 [ 1036.783409][ T37] audit: type=1326 audit(2000001174.670:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19672 comm="syz.7.4393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a4733c629 code=0x7ffc0000 [ 1036.813356][T19356] udevd[19356]: setting mode of /dev/bus/usb/005/026 to 020664 failed: No such file or directory [ 1036.820383][T19356] udevd[19356]: setting owner of /dev/bus/usb/005/026 to uid=0, gid=0 failed: No such file or directory [ 1037.786463][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1038.940183][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1039.543284][T19709] netlink: 'syz.6.4403': attribute type 1 has an invalid length. [ 1039.599843][T19709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1039.666805][T19709] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4403'. [ 1039.666843][T19709] bond2: entered promiscuous mode [ 1039.666862][T19709] bond2: entered allmulticast mode [ 1039.669402][T19709] dummy0: left allmulticast mode [ 1039.674340][T19709] bond2: (slave dummy0): making interface the new active one [ 1039.674360][T19709] dummy0: entered promiscuous mode [ 1039.674547][T19709] dummy0: entered allmulticast mode [ 1039.676277][T19709] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1040.060068][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1040.719858][T19717] netlink: 'syz.4.4404': attribute type 12 has an invalid length. [ 1041.888827][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1042.963418][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1044.071092][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1045.612462][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1046.818635][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1047.052968][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1047.053045][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1047.920050][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1049.031530][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1049.152708][T19819] netlink: 'syz.4.4435': attribute type 4 has an invalid length. [ 1049.317092][T19817] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4436'. [ 1050.320161][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1051.429913][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1052.743122][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1054.039314][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1055.931758][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1057.071885][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1058.195218][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1060.256438][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1060.547380][T19879] netlink: 'syz.4.4453': attribute type 1 has an invalid length. [ 1060.637853][T19881] bond1: (slave bridge2): making interface the new active one [ 1060.638995][T19881] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1060.678786][ T5813] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 1060.732130][T19879] macvlan3: entered promiscuous mode [ 1060.732146][T19879] macvlan3: entered allmulticast mode [ 1060.732683][T19879] bond1: entered promiscuous mode [ 1060.732695][T19879] bridge2: entered promiscuous mode [ 1060.734384][T19879] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1060.734914][T19879] bond1: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1060.735070][T19879] bond1: left promiscuous mode [ 1060.735079][T19879] bridge2: left promiscuous mode [ 1061.581516][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1062.700485][T19895] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4458'. [ 1063.002338][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1063.387325][T19898] Process accounting resumed [ 1063.767353][T19909] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1064.196524][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1065.034196][ T5813] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1065.034357][ T5813] Bluetooth: hci0: Injecting HCI hardware error event [ 1065.038050][T16493] Bluetooth: hci0: hardware error 0x00 [ 1065.700289][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1066.820855][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1066.945313][ T808] usb 10-1: new low-speed USB device number 34 using dummy_hcd [ 1067.968790][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1069.044343][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1071.348207][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1071.580428][T16493] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1072.632219][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1073.929894][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1076.118154][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1077.600140][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1078.924569][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1080.074340][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1081.699453][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1083.463112][T20044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.558738][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1085.683362][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1087.189140][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1088.483036][T20062] Device name cannot be null; rc = [-22] [ 1089.118158][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1090.245176][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1091.487114][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1091.866129][T20079] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4506'. [ 1093.415505][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1095.242325][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1096.313909][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1097.505530][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1099.020412][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1100.161576][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1101.282438][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1102.054501][ T31] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1102.393874][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 1102.426665][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1102.468172][ T31] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e [ 1102.468201][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.468219][ T31] usb 7-1: Product: syz [ 1102.472464][ T31] usb 7-1: Manufacturer: syz [ 1102.472480][ T31] usb 7-1: SerialNumber: syz [ 1102.492653][ T31] usb 7-1: config 0 descriptor?? [ 1105.098493][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1105.799424][T20167] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1105.885119][T20172] cgroup: Unknown subsys name '(-)%.' [ 1106.188538][T13151] usb 7-1: USB disconnect, device number 30 [ 1106.229615][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1107.099219][T20181] netlink: 'syz.7.4531': attribute type 10 has an invalid length. [ 1107.104483][T20181] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1107.340932][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1108.542030][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1110.243351][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1111.358229][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1112.761304][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1112.962258][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1112.962398][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1114.450085][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1115.593608][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1115.909482][T20230] overlayfs: missing 'lowerdir' [ 1116.417370][T16493] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1116.417468][T16493] CPU: 1 UID: 0 PID: 16493 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1116.417538][T16493] Tainted: [L]=SOFTLOCKUP [ 1116.417554][T16493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1116.417586][T16493] Workqueue: hci2 hci_rx_work [ 1116.417620][T16493] Call Trace: [ 1116.417632][T16493] [ 1116.417642][T16493] dump_stack_lvl+0xe8/0x150 [ 1116.417673][T16493] sysfs_create_dir_ns+0x271/0x2a0 [ 1116.417695][T16493] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1116.417717][T16493] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1116.417747][T16493] ? rt_spin_unlock+0x160/0x200 [ 1116.417769][T16493] kobject_add_internal+0x631/0xd10 [ 1116.417804][T16493] kobject_add+0x163/0x240 [ 1116.417835][T16493] ? __pfx_kobject_add+0x10/0x10 [ 1116.417869][T16493] ? get_device_parent+0x370/0x3a0 [ 1116.417898][T16493] device_add+0x408/0xb80 [ 1116.417927][T16493] hci_conn_add_sysfs+0xd5/0x210 [ 1116.417952][T16493] le_conn_complete_evt+0xf1d/0x1430 [ 1116.417978][T16493] ? irqentry_exit+0x59e/0x620 [ 1116.418008][T16493] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1116.418042][T16493] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1116.418072][T16493] hci_le_conn_complete_evt+0x187/0x470 [ 1116.418106][T16493] hci_event_packet+0x7af/0x12c0 [ 1116.418133][T16493] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1116.418165][T16493] ? __pfx_hci_event_packet+0x10/0x10 [ 1116.418186][T16493] ? rt_spin_unlock+0x14f/0x200 [ 1116.418215][T16493] ? hci_send_to_monitor+0xe2/0x590 [ 1116.418245][T16493] hci_rx_work+0x3ee/0x1030 [ 1116.418273][T16493] ? process_scheduled_works+0xa25/0x1830 [ 1116.418303][T16493] process_scheduled_works+0xb02/0x1830 [ 1116.418357][T16493] ? __pfx_process_scheduled_works+0x10/0x10 [ 1116.418390][T16493] ? assign_work+0x3d5/0x5e0 [ 1116.418420][T16493] worker_thread+0xa50/0xfc0 [ 1116.418474][T16493] kthread+0x388/0x470 [ 1116.418495][T16493] ? __pfx_worker_thread+0x10/0x10 [ 1116.418517][T16493] ? __pfx_kthread+0x10/0x10 [ 1116.418538][T16493] ret_from_fork+0x51e/0xb90 [ 1116.418566][T16493] ? __pfx_ret_from_fork+0x10/0x10 [ 1116.418589][T16493] ? __switch_to+0xc7d/0x1450 [ 1116.418615][T16493] ? __pfx_kthread+0x10/0x10 [ 1116.418636][T16493] ret_from_fork_asm+0x1a/0x30 [ 1116.418672][T16493] [ 1116.418804][T16493] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1116.419041][T16493] Bluetooth: hci2: failed to register connection device [ 1116.743490][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1116.980046][T20237] ieee802154 phy0 wpan0: encryption failed: -22 [ 1118.382117][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1120.268997][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1121.359270][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1122.470525][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1123.560394][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 1123.582171][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1124.696608][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1125.326764][T20275] hub 9-0:1.0: USB hub found [ 1125.437789][T20275] hub 9-0:1.0: 1 port detected [ 1126.827629][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1128.108588][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1129.224138][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1130.335656][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1131.779940][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1132.899165][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1134.010277][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1134.685058][T20331] overlayfs: failed to resolve '/': -2 [ 1135.121667][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1136.232738][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1139.789231][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1140.144600][T20368] /dev/nullb0: Can't open blockdev [ 1140.366681][T16493] Bluetooth: hci2: unexpected event for opcode 0x202a [ 1141.321008][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1143.626822][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1143.872805][T20416] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1143.872830][T20416] CIFS mount error: No usable UNC path provided in device string! [ 1143.872830][T20416] [ 1143.873117][T20416] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1143.999195][T16493] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 1144.780986][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1145.659435][T20445] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4597'. [ 1145.692988][T20446] netlink: 'syz.7.4608': attribute type 21 has an invalid length. [ 1145.903344][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1147.360729][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1149.729882][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1150.888398][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1153.187064][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1155.609263][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1155.680566][T12423] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1157.392554][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1158.017392][T12423] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1158.017419][T12423] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.017437][T12423] usb 10-1: config 1 has 0 interfaces, different from the descriptor's value: 66 [ 1158.048637][T12423] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1158.048654][T12423] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1158.048664][T12423] usb 10-1: Product: syz [ 1158.048671][T12423] usb 10-1: Manufacturer: syz [ 1158.565544][ T31] usb 10-1: USB disconnect, device number 35 [ 1160.173498][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1162.293396][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1162.759103][T20545] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4641'. [ 1162.759130][T20545] netlink: 72 bytes leftover after parsing attributes in process `syz.7.4641'. [ 1163.469109][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1165.322304][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1166.406843][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1167.518101][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1168.629278][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1168.838541][T20594] netlink: 'syz.6.4656': attribute type 1 has an invalid length. [ 1170.305899][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1171.450277][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1173.562146][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1174.335482][T20636] hub 9-0:1.0: USB hub found [ 1175.061648][T20636] hub 9-0:1.0: 1 port detected [ 1177.404608][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1178.321207][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.321270][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.387104][T20652] netlink: 'syz.4.4676': attribute type 7 has an invalid length. [ 1178.544942][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1179.656263][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1182.231881][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1184.052470][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1184.231289][T20734] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1185.126866][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1185.972457][T20744] random: crng reseeded on system resumption [ 1186.237993][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1186.462157][T20762] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4724'. [ 1186.475632][T20762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4724'. [ 1187.349558][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1187.943127][T20793] Invalid/unusable pipe [ 1188.107906][ T9] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1188.268151][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 1188.290199][ T9] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1188.290226][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.290244][ T9] usb 10-1: Product: syz [ 1188.290264][ T9] usb 10-1: Manufacturer: syz [ 1188.290276][ T9] usb 10-1: SerialNumber: syz [ 1188.299133][ T9] usb 10-1: config 0 descriptor?? [ 1188.351419][ T9] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 1188.365383][ T808] libceph: connect (1)[c::]:6789 error -101 [ 1188.365553][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 1188.482115][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1188.533009][ T808] usb 10-1: USB disconnect, device number 36 [ 1188.642800][T19704] libceph: connect (1)[c::]:6789 error -101 [ 1188.642927][T19704] libceph: mon0 (1)[c::]:6789 connect error [ 1188.770531][T13151] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1188.924467][T20809] ceph: No mds server is up or the cluster is laggy [ 1188.932631][T13151] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1188.932658][T13151] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1188.940283][T13151] usb 7-1: config 0 descriptor?? [ 1189.206985][T13151] ath6kl: Failed to submit usb control message: -71 [ 1189.207036][T13151] ath6kl: unable to send the bmi data to the device: -71 [ 1189.207049][T13151] ath6kl: Unable to send get target info: -71 [ 1189.209527][T13151] ath6kl: Failed to init ath6kl core: -71 [ 1189.211194][T13151] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1189.226218][T13151] usb 7-1: USB disconnect, device number 31 [ 1189.412857][T20845] IPVS: length: 218 != 24 [ 1189.571809][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1189.611927][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4760'. [ 1189.636360][T13151] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 1189.736489][T20856] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1189.737180][T20856] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4762'. [ 1189.809484][T13151] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1189.809515][T13151] usb 10-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1189.809538][T13151] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1189.809566][T13151] usb 10-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1189.809586][T13151] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.830950][T13151] usb 10-1: config 0 descriptor?? [ 1190.063216][T15720] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1190.092468][T15720] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1190.162476][T19704] libceph: connect (1)[c::]:6789 error -101 [ 1190.162713][T19704] libceph: mon0 (1)[c::]:6789 connect error [ 1190.259328][T20865] fido_id[20865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1190.355309][T13151] holtek 0003:1241:5015.001F: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.9-1/input0 [ 1190.355355][T13151] holtek 0003:1241:5015.001F: no inputs found [ 1190.437858][T13151] libceph: connect (1)[c::]:6789 error -101 [ 1190.438032][T13151] libceph: mon0 (1)[c::]:6789 connect error [ 1190.439021][T20877] sch_tbf: burst 9 is lower than device lo mtu (65550) ! [ 1190.805725][T20863] ceph: No mds server is up or the cluster is laggy [ 1191.506724][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1191.507225][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1191.507409][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1191.519978][ T808] usb 10-1: USB disconnect, device number 37 [ 1193.214074][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1193.649290][T13151] libceph: connect (1)[c::]:6789 error -101 [ 1193.649401][T13151] libceph: mon0 (1)[c::]:6789 connect error [ 1193.920860][T13151] libceph: connect (1)[c::]:6789 error -101 [ 1193.920975][T13151] libceph: mon0 (1)[c::]:6789 connect error [ 1194.183102][T13151] kernel write not supported for file /uinput (pid: 13151 comm: kworker/1:1) [ 1194.247903][T20915] ceph: No mds server is up or the cluster is laggy [ 1194.487206][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1195.640988][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1197.310105][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1199.022025][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1199.685480][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1199.685497][ T37] audit: type=1326 audit(2000001327.357:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20960 comm="syz.1.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 1199.685806][ T37] audit: type=1326 audit(2000001327.357:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20960 comm="syz.1.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 1199.688569][ T37] audit: type=1326 audit(2000001327.357:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20960 comm="syz.1.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 1199.688983][ T37] audit: type=1326 audit(2000001327.357:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20960 comm="syz.1.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 1199.689243][ T37] audit: type=1326 audit(2000001327.357:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20960 comm="syz.1.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 1199.689978][ T37] audit: type=1326 audit(2000001327.357:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20960 comm="syz.1.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 1199.833885][ T37] audit: type=1326 audit(2000001327.498:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20960 comm="syz.1.4803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2bc957c629 code=0x7ffc0000 [ 1200.222901][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1200.313089][T13151] libceph: connect (1)[c::]:6789 error -101 [ 1200.313279][T13151] libceph: mon0 (1)[c::]:6789 connect error [ 1200.595044][T13151] libceph: connect (1)[c::]:6789 error -101 [ 1200.595171][T13151] libceph: mon0 (1)[c::]:6789 connect error [ 1200.792750][T20966] ceph: No mds server is up or the cluster is laggy [ 1201.301293][ T9] IPVS: starting estimator thread 0... [ 1201.368018][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1201.409790][T21001] IPVS: using max 9 ests per chain, 21600 per kthread [ 1201.632415][T21012] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1202.085051][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1202.085223][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1202.179214][T21034] cgroup: noprefix used incorrectly [ 1202.361898][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1202.362082][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1202.479201][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1202.540799][T21024] ceph: No mds server is up or the cluster is laggy [ 1202.587426][ T43] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.587474][ T43] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.587506][ T43] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.587538][ T43] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1202.775538][ T37] audit: type=1326 audit(2000001330.249:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21060 comm="syz.4.4842" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x0 [ 1204.872842][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1205.955447][ T808] libceph: connect (1)[c::]:6789 error -101 [ 1205.955628][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 1205.983786][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1206.008307][T21104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1206.229823][T13151] libceph: connect (1)[c::]:6789 error -101 [ 1206.229931][T13151] libceph: mon0 (1)[c::]:6789 connect error [ 1206.262832][T21115] netlink: zone id is out of range [ 1206.262843][T21115] netlink: zone id is out of range [ 1206.262847][T21115] netlink: zone id is out of range [ 1206.262851][T21115] netlink: zone id is out of range [ 1206.262855][T21115] netlink: zone id is out of range [ 1206.262859][T21115] netlink: zone id is out of range [ 1206.264036][T21115] netlink: zone id is out of range [ 1206.458917][T21098] ceph: No mds server is up or the cluster is laggy [ 1209.292074][T15720] libceph: connect (1)[c::]:6789 error -101 [ 1209.292196][T15720] libceph: mon0 (1)[c::]:6789 connect error [ 1209.432449][ T37] audit: type=1326 audit(2000001336.473:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21153 comm="syz.7.4880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a4733c629 code=0x0 [ 1209.574366][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1209.574507][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1209.663087][T21150] ceph: No mds server is up or the cluster is laggy [ 1211.245242][ C0] net_ratelimit: 35 callbacks suppressed [ 1211.245263][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1212.345830][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1212.346017][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1212.394927][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1212.620670][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1212.620783][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1212.970787][T21194] ceph: No mds server is up or the cluster is laggy [ 1213.643308][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1213.809912][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1213.810080][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1215.390516][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1215.831214][T13151] libceph: connect (1)[c::]:6789 error -101 [ 1215.831401][T13151] libceph: mon0 (1)[c::]:6789 connect error [ 1216.665274][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1216.666285][T13151] libceph: connect (1)[c::]:6789 error -101 [ 1216.666469][T13151] libceph: mon0 (1)[c::]:6789 connect error [ 1216.680150][T21228] ceph: No mds server is up or the cluster is laggy [ 1217.680904][T15720] libceph: connect (1)[c::]:6789 error -101 [ 1217.681015][T15720] libceph: mon0 (1)[c::]:6789 connect error [ 1217.721624][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4912'. [ 1217.787231][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1217.980441][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 1217.980556][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 1218.286462][T21239] ceph: No mds server is up or the cluster is laggy [ 1219.431496][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1220.116661][T21254] netlink: 'syz.7.4916': attribute type 11 has an invalid length. [ 1220.515299][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1220.840095][T21275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4926'. [ 1223.392309][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1226.338679][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1226.949728][T21327] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4946'. [ 1227.439105][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1228.322347][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4968'. [ 1229.765717][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1229.926731][T21390] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4976'. [ 1229.926891][T21390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4976'. [ 1230.982769][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1232.054898][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1232.319220][T21444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4996'. [ 1232.319239][T21444] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4996'. [ 1232.319264][T21444] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4996'. [ 1232.707141][ T808] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1232.866996][ T808] usb 10-1: Using ep0 maxpacket: 16 [ 1232.885411][ T808] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1232.885441][ T808] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1232.885460][ T808] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1232.885491][ T808] usb 10-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1232.885513][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.901414][ T808] usb 10-1: config 0 descriptor?? [ 1232.920567][T19704] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1233.166106][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1233.246892][T19704] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1233.248302][T19704] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1233.248334][T19704] usb 7-1: can't read configurations, error -71 [ 1234.903634][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1235.720193][ T808] usbhid 10-1:0.0: can't add hid device: -71 [ 1235.722384][ T808] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1235.726310][ T808] usb 10-1: USB disconnect, device number 38 [ 1235.986998][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1236.264877][T15720] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 1236.355597][T21515] input: syz0 as /devices/virtual/input/input43 [ 1236.426052][T15720] usb 10-1: Using ep0 maxpacket: 32 [ 1236.428565][T15720] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1236.449784][T15720] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1236.449869][T15720] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.449888][T15720] usb 10-1: Product: syz [ 1236.449900][T15720] usb 10-1: Manufacturer: syz [ 1236.449913][T15720] usb 10-1: SerialNumber: syz [ 1236.478091][T15720] usb 10-1: config 0 descriptor?? [ 1236.936593][T15720] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1236.997911][T21531] netlink: 'syz.7.5035': attribute type 1 has an invalid length. [ 1237.098268][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1237.367232][T15720] gs_usb 10-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1237.433821][T15720] usb 10-1: USB disconnect, device number 39 [ 1238.012780][ T37] audit: type=1326 audit(2000001363.230:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.4.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1238.012828][ T37] audit: type=1326 audit(2000001363.230:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.4.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1238.012863][ T37] audit: type=1326 audit(2000001363.230:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.4.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1238.014372][ T37] audit: type=1326 audit(2000001363.230:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.4.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1238.014414][ T37] audit: type=1326 audit(2000001363.230:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.4.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1238.014450][ T37] audit: type=1326 audit(2000001363.230:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.4.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1238.014485][ T37] audit: type=1326 audit(2000001363.230:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.4.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1238.014519][ T37] audit: type=1326 audit(2000001363.230:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.4.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1238.058383][ T37] audit: type=1326 audit(2000001363.268:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.4.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1238.058430][ T37] audit: type=1326 audit(2000001363.268:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21549 comm="syz.4.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cee10c629 code=0x7ffc0000 [ 1238.058648][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5044'. [ 1238.065998][T21553] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5044'. [ 1238.209469][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1238.220098][ T5879] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1238.402728][ T5879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1238.402769][ T5879] usb 7-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 1238.402789][ T5879] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.407832][ T5879] usb 7-1: config 0 descriptor?? [ 1238.900930][ T5879] evision 0003:320F:5041.0020: hidraw0: USB HID vff.fe Device [HID 320f:5041] on usb-dummy_hcd.6-1/input0 [ 1239.181091][ T808] usb 7-1: USB disconnect, device number 34 [ 1239.320791][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1240.432385][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1241.543189][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1241.963113][T21627] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1241.963591][T21627] macsec1: entered allmulticast mode [ 1241.963991][T21627] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1243.171810][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1243.175994][T19704] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1243.360079][T19704] usb 10-1: Using ep0 maxpacket: 32 [ 1243.362446][T19704] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.362474][T19704] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.362508][T19704] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1243.362528][T19704] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.368831][T19704] usb 10-1: config 0 descriptor?? [ 1243.856059][T19704] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 1243.856097][T19704] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 1243.928463][T21654] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5089'. [ 1244.003953][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.004015][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.041362][T19704] ft260 0003:0403:6030.0021: failed to retrieve chip version [ 1244.041726][T19704] ft260 0003:0403:6030.0021: probe with driver ft260 failed with error -71 [ 1244.099617][T19704] usb 10-1: USB disconnect, device number 40 [ 1244.278534][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1244.337804][T21660] overlayfs: failed to clone lowerpath [ 1244.486474][T21668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5096'. [ 1245.462228][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1246.729258][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1247.868607][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1249.246688][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1250.347777][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1251.761841][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1252.911964][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1253.025067][T15720] libceph: connect (1)[c::]:6789 error -101 [ 1253.025251][T15720] libceph: mon0 (1)[c::]:6789 connect error [ 1253.045674][T15720] libceph: connect (1)[c::]:6789 error -101 [ 1253.045862][T15720] libceph: mon0 (1)[c::]:6789 connect error [ 1253.167301][T21728] ceph: No mds server is up or the cluster is laggy [ 1253.318295][ T5879] libceph: connect (1)[c::]:6789 error -101 [ 1253.318477][ T5879] libceph: mon0 (1)[c::]:6789 connect error [ 1253.556937][T21738] program syz.9.5123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1254.023163][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1254.210110][T21749] lo speed is unknown, defaulting to 1000 [ 1255.761214][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1257.554487][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1258.638907][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1258.696027][T21776] 9p: Bad value for 'rfdno' [ 1259.795836][T21789] sd 0:0:1:0: device reset [ 1260.420446][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1261.626436][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1263.302792][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1265.439413][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1266.588598][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1267.984423][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1269.067522][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1270.189452][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1270.322120][T21893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5182'. [ 1271.001360][ T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1271.163827][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1271.166332][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1271.166470][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1271.166492][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1271.166514][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1271.166535][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1271.166572][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1271.166592][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.292210][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1272.424491][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1272.806897][T21936] usbtmc 7-1:16.0: simple usb_control_msg failed -32 [ 1272.816495][ T9] usb 7-1: USB disconnect, device number 35 [ 1273.512395][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1274.627031][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1275.951370][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1276.195118][T22002] ceph: No mds server is up or the cluster is laggy [ 1276.215754][T19704] libceph: connect (1)[c::]:6789 error -101 [ 1276.215940][T19704] libceph: mon0 (1)[c::]:6789 connect error [ 1276.640644][T22016] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5233'. [ 1277.519620][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1281.327795][T19704] libceph: connect (1)[c::]:6789 error -101 [ 1281.328005][T19704] libceph: mon0 (1)[c::]:6789 connect error [ 1281.437804][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1281.461954][T22050] ceph: No mds server is up or the cluster is laggy [ 1282.219137][T19704] libceph: connect (1)[c::]:6789 error -101 [ 1282.219309][T19704] libceph: mon0 (1)[c::]:6789 connect error [ 1282.220525][ T5813] Bluetooth: hci2: command 0x0405 tx timeout [ 1282.583845][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1282.722903][T22075] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1282.722903][T22075] The task syz.6.5251 (22075) triggered the difference, watch for misbehavior. [ 1282.733449][ T808] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1284.197255][ T808] usb 10-1: Using ep0 maxpacket: 16 [ 1284.200071][ T808] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1284.200106][ T808] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1284.200128][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.295049][ T808] usb 10-1: config 0 descriptor?? [ 1284.371668][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1285.268833][ T808] hid (null): nested delimiters [ 1285.268856][ T808] hid (null): unknown global tag 0xd [ 1285.268864][ T808] hid (null): nested delimiters [ 1285.419217][T12423] usb 10-1: USB disconnect, device number 41 [ 1285.479374][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1286.590650][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1286.899385][T22104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5264'. [ 1287.092831][ T5904] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1288.146712][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1288.166547][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.166577][ T5904] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.166597][ T5904] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1288.166635][ T5904] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1288.166656][ T5904] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.182503][ T5904] usb 7-1: config 0 descriptor?? [ 1289.538502][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1289.573335][T22122] batman_adv: batadv0: Adding interface: dummy0 [ 1289.573354][T22122] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1289.573385][T22122] batman_adv: batadv0: Interface activated: dummy0 [ 1290.153343][ T5904] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 1290.181707][ T5904] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1290.387369][T12423] usb 7-1: USB disconnect, device number 36 [ 1290.602982][T22133] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5276'. [ 1290.608308][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1291.048171][T22147] kAFS: No cell specified [ 1293.402269][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1294.894321][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1295.053149][ T808] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 1295.215750][ T808] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1295.215812][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.216930][ T808] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1295.216953][ T808] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1295.216971][ T808] usb 10-1: Manufacturer: syz [ 1295.232871][ T808] usb 10-1: config 0 descriptor?? [ 1295.469778][ T808] rc_core: IR keymap rc-hauppauge not found [ 1295.469799][ T808] Registered IR keymap rc-empty [ 1295.477833][ T808] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1295.528325][ T808] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input45 [ 1295.986022][ T9] usb 10-1: USB disconnect, device number 42 [ 1295.993484][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1296.167984][T22198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5301'. [ 1296.209954][T22200] netlink: 428 bytes leftover after parsing attributes in process `syz.7.5302'. [ 1296.209989][T22200] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5302'. [ 1297.333903][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1297.974897][T22224] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1299.128409][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1299.130759][T22236] ceph: No mds server is up or the cluster is laggy [ 1299.190236][ T5904] libceph: connect (1)[c::]:6789 error -101 [ 1299.190436][ T5904] libceph: mon0 (1)[c::]:6789 connect error [ 1300.267409][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1301.341886][T22272] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5328'. [ 1301.378670][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1301.611489][T22278] overlayfs: failed to clone upperpath [ 1301.942619][T22281] lo speed is unknown, defaulting to 1000 [ 1302.506357][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1302.532764][T22300] loop6: detected capacity change from 0 to 7 [ 1302.542335][T22194] Dev loop6: unable to read RDB block 7 [ 1302.542363][T22194] loop6: unable to read partition table [ 1302.542503][T22194] loop6: partition table beyond EOD, truncated [ 1302.573439][T22300] Dev loop6: unable to read RDB block 7 [ 1302.573483][T22300] loop6: unable to read partition table [ 1302.573675][T22300] loop6: partition table beyond EOD, truncated [ 1302.573692][T22300] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1303.601143][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1304.712436][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1305.823562][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1305.869821][T12423] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1306.031297][T12423] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1306.031334][T12423] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1306.031355][T12423] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1306.034853][T12423] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1306.034884][T12423] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.034903][T12423] usb 10-1: Product: syz [ 1306.034916][T12423] usb 10-1: Manufacturer: syz [ 1306.034930][T12423] usb 10-1: SerialNumber: syz [ 1306.108133][T12423] usb 10-1: config 0 descriptor?? [ 1306.108909][T22334] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1306.109016][T22334] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1306.135158][T12423] usb 10-1: ucan: probing device on interface #0 [ 1306.791679][T12423] ucan 10-1:0.0: probe with driver ucan failed with error -22 [ 1306.927440][T22350] IPv6: NLM_F_CREATE should be specified when creating new route [ 1306.934835][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1307.138386][T19704] usb 10-1: USB disconnect, device number 43 [ 1307.362810][T22356] loop8: detected capacity change from 0 to 7 [ 1307.410531][T22194] Dev loop8: unable to read RDB block 7 [ 1307.410578][T22194] loop8: unable to read partition table [ 1307.410785][T22194] loop8: partition table beyond EOD, truncated [ 1307.805070][T22356] Dev loop8: unable to read RDB block 7 [ 1307.805121][T22356] loop8: unable to read partition table [ 1307.805311][T22356] loop8: partition table beyond EOD, truncated [ 1307.805340][T22356] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1308.045995][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1308.740450][T22359] Dev loop8: unable to read RDB block 7 [ 1308.740501][T22359] loop8: unable to read partition table [ 1308.740709][T22359] loop8: partition table beyond EOD, truncated [ 1308.740744][T22359] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1309.157137][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1309.590935][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1309.591002][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1310.279060][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1311.126305][T22391] batadv_slave_1: entered promiscuous mode [ 1311.225364][T22388] batadv_slave_1: left promiscuous mode [ 1311.390310][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1312.696862][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1312.704670][T22405] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1313.772997][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1313.949328][T22425] netlink: 'syz.4.5387': attribute type 9 has an invalid length. [ 1313.949342][T22425] netlink: 'syz.4.5387': attribute type 11 has an invalid length. [ 1313.949350][T22425] netlink: 'syz.4.5387': attribute type 12 has an invalid length. [ 1313.949358][T22425] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.5387'. [ 1313.949506][T22425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5387'. [ 1315.385474][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1316.326978][T22438] netlink: 'syz.4.5393': attribute type 1 has an invalid length. [ 1316.519129][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1317.622583][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1317.973228][T22484] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5413'. [ 1319.165778][ T808] libceph: connect (1)[c::]:6789 error -101 [ 1319.206922][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1319.220760][T22505] ceph: No mds server is up or the cluster is laggy [ 1319.240726][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 1320.621625][ T808] libceph: connect (1)[c::]:6789 error -101 [ 1320.802819][ T808] libceph: mon0 (1)[c::]:6789 connect error [ 1321.053708][T22554] ceph: No mds server is up or the cluster is laggy [ 1321.062066][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1321.477195][T22568] overlayfs: failed to clone upperpath [ 1322.160748][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1322.867935][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5456'. [ 1322.868047][T22595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1322.947127][T22595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.264561][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1324.372505][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1324.558646][T22646] netlink: 67 bytes leftover after parsing attributes in process `syz.1.5478'. [ 1325.493453][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1325.926317][T22680] netlink: 'syz.4.5493': attribute type 3 has an invalid length. [ 1326.594876][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1327.530245][T22722] overlayfs: failed to clone lowerpath [ 1327.706131][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1328.528910][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1328.528926][ T37] audit: type=1326 audit(2000001447.939:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22760 comm="syz.6.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56230c629 code=0x7ffc0000 [ 1328.534573][ T37] audit: type=1326 audit(2000001447.948:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22760 comm="syz.6.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56230c629 code=0x7ffc0000 [ 1328.539652][T12423] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1328.541394][ T37] audit: type=1326 audit(2000001447.948:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22760 comm="syz.6.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe56230c629 code=0x7ffc0000 [ 1328.541437][ T37] audit: type=1326 audit(2000001447.957:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22760 comm="syz.6.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56230c629 code=0x7ffc0000 [ 1328.541473][ T37] audit: type=1326 audit(2000001447.957:1714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22760 comm="syz.6.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56230c629 code=0x7ffc0000 [ 1328.541700][ T37] audit: type=1326 audit(2000001447.957:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22760 comm="syz.6.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe56230c629 code=0x7ffc0000 [ 1328.542078][ T37] audit: type=1326 audit(2000001447.957:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22760 comm="syz.6.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56230c629 code=0x7ffc0000 [ 1328.542674][ T37] audit: type=1326 audit(2000001447.957:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22760 comm="syz.6.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe56230c629 code=0x7ffc0000 [ 1328.542712][ T37] audit: type=1326 audit(2000001447.957:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22760 comm="syz.6.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56230c629 code=0x7ffc0000 [ 1328.542747][ T37] audit: type=1326 audit(2000001447.957:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22760 comm="syz.6.5525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56230c629 code=0x7ffc0000 [ 1328.721625][T12423] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1328.721654][T12423] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.792353][T12423] usb 10-1: config 0 descriptor?? [ 1328.795746][T12423] cp210x 10-1:0.0: cp210x converter detected [ 1328.828017][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1329.098842][T22776] overlayfs: failed to clone upperpath [ 1329.448007][T12423] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1329.448059][T12423] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 1329.484154][T12423] usb 10-1: cp210x converter now attached to ttyUSB0 [ 1329.511939][T12423] usb 10-1: USB disconnect, device number 44 [ 1329.530973][T12423] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1329.531642][T12423] cp210x 10-1:0.0: device disconnected [ 1329.928601][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1331.039783][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1332.151113][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1332.516987][T22857] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5567'. [ 1332.517018][T22857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5567'. [ 1333.191950][T15720] libceph: connect (1)[c::]:6789 error -101 [ 1333.192142][T15720] libceph: mon0 (1)[c::]:6789 connect error [ 1333.262249][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1333.333376][T22869] ceph: No mds server is up or the cluster is laggy [ 1333.994750][T22893] netlink: 27 bytes leftover after parsing attributes in process `syz.9.5579'. [ 1334.124255][T22900] netlink: 'syz.4.5582': attribute type 11 has an invalid length. [ 1334.124276][T22900] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5582'. [ 1334.125983][T22900] netlink: 'syz.4.5582': attribute type 11 has an invalid length. [ 1334.126000][T22900] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5582'. [ 1334.126377][T22900] netlink: 'syz.4.5582': attribute type 11 has an invalid length. [ 1334.126391][T22900] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5582'. [ 1334.373522][ C0] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1334.580009][T22925] ================================================================== [ 1334.580021][T22925] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x4e/0x130 [ 1334.580041][T22925] Read of size 8 at addr ffff88802b6be980 by task syz.7.5593/22925 [ 1334.580051][T22925] [ 1334.580060][T22925] CPU: 1 UID: 0 PID: 22925 Comm: syz.7.5593 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1334.580078][T22925] Tainted: [L]=SOFTLOCKUP [ 1334.580082][T22925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1334.580091][T22925] Call Trace: [ 1334.580098][T22925] [ 1334.580107][T22925] dump_stack_lvl+0xe8/0x150 [ 1334.580132][T22925] print_report+0xba/0x230 [ 1334.580145][T22925] ? __list_add_valid_or_report+0x4e/0x130 [ 1334.580161][T22925] kasan_report+0x117/0x150 [ 1334.580185][T22925] ? __list_add_valid_or_report+0x4e/0x130 [ 1334.580210][T22925] __list_add_valid_or_report+0x4e/0x130 [ 1334.580234][T22925] clone_mnt+0x447/0x9a0 [ 1334.580260][T22925] copy_tree+0xde/0x930 [ 1334.580275][T22925] ? rwbase_write_lock+0x568/0x730 [ 1334.580293][T22925] copy_mnt_ns+0x24d/0x990 [ 1334.580303][T22925] ? kmem_cache_alloc_noprof+0x388/0x680 [ 1334.580316][T22925] ? create_new_namespaces+0x33/0x6a0 [ 1334.580331][T22925] create_new_namespaces+0xcf/0x6a0 [ 1334.580343][T22925] ? bpf_lsm_capable+0x9/0x20 [ 1334.580353][T22925] ? security_capable+0x7e/0x2c0 [ 1334.580368][T22925] unshare_nsproxy_namespaces+0x11a/0x160 [ 1334.580381][T22925] ksys_unshare+0x4f4/0x900 [ 1334.580392][T22925] ? __pfx_ksys_unshare+0x10/0x10 [ 1334.580401][T22925] ? __pfx_kcov_ioctl+0x10/0x10 [ 1334.580413][T22925] __x64_sys_unshare+0x38/0x50 [ 1334.580422][T22925] do_syscall_64+0x14d/0xf80 [ 1334.580433][T22925] ? trace_irq_disable+0x3b/0x150 [ 1334.580443][T22925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.580453][T22925] ? clear_bhb_loop+0x40/0x90 [ 1334.580463][T22925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.580472][T22925] RIP: 0033:0x7f5a4733c629 [ 1334.580482][T22925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.580491][T22925] RSP: 002b:00007f5a4558e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1334.580502][T22925] RAX: ffffffffffffffda RBX: 00007f5a475b5fa0 RCX: 00007f5a4733c629 [ 1334.580509][T22925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 1334.580516][T22925] RBP: 00007f5a473d2b39 R08: 0000000000000000 R09: 0000000000000000 [ 1334.580522][T22925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1334.580528][T22925] R13: 00007f5a475b6038 R14: 00007f5a475b5fa0 R15: 00007ffe96009ce8 [ 1334.580539][T22925] [ 1334.580543][T22925] [ 1334.580545][T22925] Allocated by task 21908: [ 1334.580550][T22925] kasan_save_track+0x3e/0x80 [ 1334.580562][T22925] __kasan_slab_alloc+0x6c/0x80 [ 1334.580573][T22925] kmem_cache_alloc_noprof+0x33b/0x680 [ 1334.580584][T22925] alloc_vfsmnt+0x23/0x420 [ 1334.580595][T22925] clone_mnt+0x4b/0x9a0 [ 1334.580606][T22925] vfs_open_tree+0x507/0x1040 [ 1334.580617][T22925] __x64_sys_open_tree+0x96/0x110 [ 1334.580625][T22925] do_syscall_64+0x14d/0xf80 [ 1334.580637][T22925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.580646][T22925] [ 1334.580649][T22925] Freed by task 20: [ 1334.580653][T22925] kasan_save_track+0x3e/0x80 [ 1334.580663][T22925] kasan_save_free_info+0x46/0x50 [ 1334.580672][T22925] __kasan_slab_free+0x5c/0x80 [ 1334.580682][T22925] kmem_cache_free+0x185/0x6b0 [ 1334.580693][T22925] rcu_cpu_kthread+0x99e/0x1470 [ 1334.580701][T22925] smpboot_thread_fn+0x541/0xa50 [ 1334.580713][T22925] kthread+0x388/0x470 [ 1334.580721][T22925] ret_from_fork+0x51e/0xb90 [ 1334.580732][T22925] ret_from_fork_asm+0x1a/0x30 [ 1334.580739][T22925] [ 1334.580742][T22925] Last potentially related work creation: [ 1334.580745][T22925] kasan_save_stack+0x3e/0x60 [ 1334.580756][T22925] kasan_record_aux_stack+0xbd/0xd0 [ 1334.580764][T22925] call_rcu+0xee/0x890 [ 1334.580773][T22925] task_work_run+0x1d9/0x270 [ 1334.580782][T22925] exit_to_user_mode_loop+0xed/0x480 [ 1334.580793][T22925] do_syscall_64+0x32d/0xf80 [ 1334.580803][T22925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.580812][T22925] [ 1334.580814][T22925] Second to last potentially related work creation: [ 1334.580818][T22925] kasan_save_stack+0x3e/0x60 [ 1334.580828][T22925] kasan_record_aux_stack+0xbd/0xd0 [ 1334.580838][T22925] task_work_add+0xb6/0x440 [ 1334.580846][T22925] mntput_no_expire_slowpath+0x70c/0xbd0 [ 1334.580857][T22925] vfs_open_tree+0xe17/0x1040 [ 1334.580868][T22925] __x64_sys_open_tree+0x96/0x110 [ 1334.580876][T22925] do_syscall_64+0x14d/0xf80 [ 1334.580886][T22925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.580894][T22925] [ 1334.580896][T22925] The buggy address belongs to the object at ffff88802b6be8c0 [ 1334.580896][T22925] which belongs to the cache mnt_cache of size 352 [ 1334.580904][T22925] The buggy address is located 192 bytes inside of [ 1334.580904][T22925] freed 352-byte region [ffff88802b6be8c0, ffff88802b6bea20) [ 1334.580914][T22925] [ 1334.580917][T22925] The buggy address belongs to the physical page: [ 1334.580929][T22925] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b6be000 pfn:0x2b6be [ 1334.580940][T22925] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1334.580948][T22925] memcg:ffff88802b6be171 [ 1334.580952][T22925] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 1334.580966][T22925] page_type: f5(slab) [ 1334.580982][T22925] raw: 0080000000000240 ffff88801b2a0780 ffffea00006cba10 ffffea0000af7f10 [ 1334.580990][T22925] raw: ffff88802b6be000 000001c000120006 00000000f5000000 ffff88802b6be171 [ 1334.580999][T22925] head: 0080000000000240 ffff88801b2a0780 ffffea00006cba10 ffffea0000af7f10 [ 1334.581008][T22925] head: ffff88802b6be000 000001c000120006 00000000f5000000 ffff88802b6be171 [ 1334.581016][T22925] head: 0080000000000001 ffffea0000adaf81 00000000ffffffff 00000000ffffffff [ 1334.581024][T22925] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 1334.581029][T22925] page dumped because: kasan: bad access detected [ 1334.581034][T22925] page_owner tracks the page as allocated [ 1334.581038][T22925] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5796, tgid 5796 (syz-executor), ts 81404137104, free_ts 81055427943 [ 1334.581055][T22925] post_alloc_hook+0x231/0x280 [ 1334.581067][T22925] get_page_from_freelist+0x28bb/0x2950 [ 1334.581075][T22925] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1334.581083][T22925] allocate_slab+0x77/0x660 [ 1334.581093][T22925] refill_objects+0x334/0x3c0 [ 1334.581101][T22925] __pcs_replace_empty_main+0x328/0x5f0 [ 1334.581111][T22925] kmem_cache_alloc_noprof+0x433/0x680 [ 1334.581122][T22925] alloc_vfsmnt+0x23/0x420 [ 1334.581133][T22925] clone_mnt+0x4b/0x9a0 [ 1334.581145][T22925] copy_tree+0x3d4/0x930 [ 1334.581151][T22925] do_loopback+0x386/0x6c0 [ 1334.581160][T22925] __se_sys_mount+0x31d/0x420 [ 1334.581168][T22925] do_syscall_64+0x14d/0xf80 [ 1334.581178][T22925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.581186][T22925] page last free pid 28 tgid 28 stack trace: [ 1334.581191][T22925] __free_frozen_pages+0xfe3/0x1170 [ 1334.581202][T22925] rcu_cpu_kthread+0x99e/0x1470 [ 1334.581209][T22925] smpboot_thread_fn+0x541/0xa50 [ 1334.581222][T22925] kthread+0x388/0x470 [ 1334.581231][T22925] ret_from_fork+0x51e/0xb90 [ 1334.581241][T22925] ret_from_fork_asm+0x1a/0x30 [ 1334.581248][T22925] [ 1334.581251][T22925] Memory state around the buggy address: [ 1334.581256][T22925] ffff88802b6be880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1334.581262][T22925] ffff88802b6be900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1334.581267][T22925] >ffff88802b6be980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1334.581272][T22925] ^ [ 1334.581276][T22925] ffff88802b6bea00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 1334.581282][T22925] ffff88802b6bea80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1334.581286][T22925] ================================================================== [ 1334.581408][T22925] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1334.581424][T22925] CPU: 1 UID: 0 PID: 22925 Comm: syz.7.5593 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1334.581453][T22925] Tainted: [L]=SOFTLOCKUP [ 1334.581459][T22925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1334.581470][T22925] Call Trace: [ 1334.581476][T22925] [ 1334.581484][T22925] vpanic+0x56c/0xa60 [ 1334.581501][T22925] ? __pfx_vpanic+0x10/0x10 [ 1334.581514][T22925] ? __pfx___schedule+0x10/0x10 [ 1334.581527][T22925] panic+0xc5/0xd0 [ 1334.581540][T22925] ? __pfx_panic+0x10/0x10 [ 1334.581554][T22925] ? preempt_schedule_common+0x82/0xd0 [ 1334.581567][T22925] ? __list_add_valid_or_report+0x4e/0x130 [ 1334.581581][T22925] check_panic_on_warn+0x89/0xb0 [ 1334.581591][T22925] ? __list_add_valid_or_report+0x4e/0x130 [ 1334.581603][T22925] end_report+0x73/0x180 [ 1334.581617][T22925] ? __list_add_valid_or_report+0x4e/0x130 [ 1334.581629][T22925] kasan_report+0x128/0x150 [ 1334.581641][T22925] ? __list_add_valid_or_report+0x4e/0x130 [ 1334.581656][T22925] __list_add_valid_or_report+0x4e/0x130 [ 1334.581669][T22925] clone_mnt+0x447/0x9a0 [ 1334.581684][T22925] copy_tree+0xde/0x930 [ 1334.581692][T22925] ? rwbase_write_lock+0x568/0x730 [ 1334.581707][T22925] copy_mnt_ns+0x24d/0x990 [ 1334.581717][T22925] ? kmem_cache_alloc_noprof+0x388/0x680 [ 1334.581729][T22925] ? create_new_namespaces+0x33/0x6a0 [ 1334.581742][T22925] create_new_namespaces+0xcf/0x6a0 [ 1334.581754][T22925] ? bpf_lsm_capable+0x9/0x20 [ 1334.581764][T22925] ? security_capable+0x7e/0x2c0 [ 1334.581779][T22925] unshare_nsproxy_namespaces+0x11a/0x160 [ 1334.581792][T22925] ksys_unshare+0x4f4/0x900 [ 1334.581803][T22925] ? __pfx_ksys_unshare+0x10/0x10 [ 1334.581812][T22925] ? __pfx_kcov_ioctl+0x10/0x10 [ 1334.581826][T22925] __x64_sys_unshare+0x38/0x50 [ 1334.581834][T22925] do_syscall_64+0x14d/0xf80 [ 1334.581846][T22925] ? trace_irq_disable+0x3b/0x150 [ 1334.581856][T22925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.581866][T22925] ? clear_bhb_loop+0x40/0x90 [ 1334.581876][T22925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1334.581886][T22925] RIP: 0033:0x7f5a4733c629 [ 1334.581894][T22925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1334.581903][T22925] RSP: 002b:00007f5a4558e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1334.581914][T22925] RAX: ffffffffffffffda RBX: 00007f5a475b5fa0 RCX: 00007f5a4733c629 [ 1334.581921][T22925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020400 [ 1334.581927][T22925] RBP: 00007f5a473d2b39 R08: 0000000000000000 R09: 0000000000000000 [ 1334.581933][T22925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1334.581939][T22925] R13: 00007f5a475b6038 R14: 00007f5a475b5fa0 R15: 00007ffe96009ce8 [ 1334.581950][T22925] [ 1334.582304][T22925] Kernel Offset: disabled