last executing test programs: 13m24.172882121s ago: executing program 32 (id=18865): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000010c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x2}}, @TCA_RATE={0x6}]}, 0x38}}, 0x4000) 8m34.382332695s ago: executing program 3 (id=22872): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x32, &(0x7f0000000740)=ANY=[], 0x0) 8m34.007518816s ago: executing program 3 (id=22878): mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000280)='.\x00', 0x0, 0x109f087, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) getpid() 8m33.87444977s ago: executing program 3 (id=22882): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x4, 0xea, 0x440, 0x0, 0x10, 0x0, 0x8}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1) 8m33.078743389s ago: executing program 33 (id=22884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a310000000020000000000a03000000000000000000050000070900010073797a310000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c000180060001"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) 8m33.003533448s ago: executing program 3 (id=22888): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 8m32.553340798s ago: executing program 34 (id=22888): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) 8m3.441161025s ago: executing program 35 (id=23143): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2000, 0xe7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000d, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) 6m15.443198267s ago: executing program 36 (id=24092): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000480)={0x30}) 5m2.11926708s ago: executing program 9 (id=24880): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000b20000/0x400000)=nil) readv(r0, &(0x7f0000000780)=[{&(0x7f0000000700)=""/65, 0x41}], 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 5m1.86827187s ago: executing program 9 (id=24883): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 5m1.677349611s ago: executing program 9 (id=24885): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) timer_delete(0x0) 5m1.359249824s ago: executing program 9 (id=24890): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0) 5m1.209401597s ago: executing program 9 (id=24892): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) 5m0.140939743s ago: executing program 9 (id=24910): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(r2, 0x0, 0x51) 4m59.760213788s ago: executing program 37 (id=24910): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(r2, 0x0, 0x51) 4m31.482315664s ago: executing program 0 (id=25153): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x1, r2, 0x22, r0}, 0x10) 4m31.041259153s ago: executing program 0 (id=25160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de00000800034000000001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ffd7000008"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 4m30.550004471s ago: executing program 0 (id=25168): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) readv(r1, &(0x7f0000001580)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1) landlock_restrict_self(r0, 0x8) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0xf) 4m30.169096148s ago: executing program 0 (id=25171): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000100)='./file0/../file0\x00', 0x122) 4m29.91233287s ago: executing program 0 (id=25175): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$packet(0x11, 0x3, 0x300) 4m28.306907279s ago: executing program 0 (id=25192): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x1200c88, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 4m27.609124156s ago: executing program 38 (id=25192): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001540)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x1200c88, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m46.496993848s ago: executing program 7 (id=26249): timer_create(0x3, 0x0, &(0x7f0000000300)) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {r1, r2+60000000}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) 2m45.807664571s ago: executing program 7 (id=26254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0x8058000, 0x5, 0x6, 0xe387, 0x0, [{0x5, 0xc7, 0xc, '\x00', 0x1}, {0x2, 0xd, 0x1, '\x00', 0xdd}, {0x40, 0x7, 0xa, '\x00', 0x81}, {0x6, 0x4, 0x3, '\x00', 0x81}, {0xe4, 0x38, 0x5, '\x00', 0xea}, {0xc, 0xf, 0xe, '\x00', 0xc}, {0x5, 0x7, 0x6, '\x00', 0x7}, {0xff, 0x53, 0x6, '\x00', 0x81}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x9, 0x53, 0x0, '\x00', 0x80}, {0x5c, 0x81, 0x8, '\x00', 0x6}, {0x9, 0x3, 0x1, '\x00', 0x9}, {0x8, 0x0, 0x9, '\x00', 0xa}, {0xf, 0x5, 0x4e}, {0x9, 0xe, 0xdb, '\x00', 0xf8}, {0xc2, 0x5, 0x5, '\x00', 0xa}, {0x0, 0x8, 0x40, '\x00', 0x8}, {0x7f, 0x0, 0xb5, '\x00', 0x4}, {0x0, 0x4c, 0x8, '\x00', 0x5}, {0x8, 0x28, 0x14, '\x00', 0xe6}, {0x1, 0x0, 0x14, '\x00', 0x1}, {0x7f, 0x3, 0xa}, {0x40, 0x7, 0x5, '\x00', 0x81}, {0x5, 0xf8, 0x7, '\x00', 0x1}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m45.268134236s ago: executing program 7 (id=26257): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_set$pid(0x2, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, r1, 0x201, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40805}, 0x4008000) getgroups(0x0, 0x0) 2m45.038861538s ago: executing program 7 (id=26259): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x3010080, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000b40)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') 2m44.831141631s ago: executing program 7 (id=26263): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f0000d62000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ccf000/0x2000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2m44.571562177s ago: executing program 7 (id=26265): openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 2m44.33152975s ago: executing program 39 (id=26265): openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000000280)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x30925) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 2m23.113828802s ago: executing program 3 (id=26267): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@delqdisc={0x2c, 0x25, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x2}, {0x0, 0xb}, {0xfff1, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x8004) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2m22.906349738s ago: executing program 3 (id=26431): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2001, 0xa68d7c51bfc40bf1, 0xffbc, 0x6, 0x1, 0x7, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fdatasync(r2) 2m8.5109163s ago: executing program 40 (id=26431): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2001, 0xa68d7c51bfc40bf1, 0xffbc, 0x6, 0x1, 0x7, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fdatasync(r2) 1m18.346043315s ago: executing program 5 (id=26861): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f00000001c0), 0x0}, 0x20) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close(0x4) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="0000080211000001780211000000080211000000200000000000006118390064000201"], 0x36) 1m17.679259413s ago: executing program 5 (id=26870): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r2 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1m17.555729999s ago: executing program 5 (id=26872): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffc88, 0x140, 0x0, 0x0) 1m16.583064274s ago: executing program 5 (id=26878): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000080)='.\x00', 0x0, 0x897848, 0x0) 1m16.406730596s ago: executing program 5 (id=26879): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3e8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}]}}], 0x1, 0xc0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x2c}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.930995074s ago: executing program 5 (id=26896): socket$inet_udplite(0x2, 0x2, 0x88) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x2, "abac119ca94c63387526fa07558139ed01807a7c985331938800000200"}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 1m12.131585468s ago: executing program 41 (id=26896): socket$inet_udplite(0x2, 0x2, 0x88) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x2, "abac119ca94c63387526fa07558139ed01807a7c985331938800000200"}) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 16.222957388s ago: executing program 2 (id=27115): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r1 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x4) fcntl$setstatus(r1, 0x4, 0x42000) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet(r0, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{0x0}, {&(0x7f0000000580)='Z', 0x1}, {&(0x7f00000005c0)="2a74ba28e582982a8d2693cb3915d7568854507979a6d3b59703e10de827d6d7223276eb02729efbded94cfcd4a2ae81432b93b74f2e56fd593cb5df6fe3f8ff31df20aec21d5d82d75262b0be7566b12c11381a44d96e86c3994d450d4996252d1c1d912f50598f8cd0cd635204b4902fbf455f4f795bfc7c98421fe446509cd12a47f33f260183d1e2a094d977a7df7ebbe3c87e2e50b829acf4a1f028a2c56cf62fe73ca33ad468915023626032b70df22cf5060e6682ef49199cc624cd52d309d5f7ff8c5f1ab1023a56ea3e4115f8e2890e67cb8650", 0xd8}, {&(0x7f00000007c0)="11a8f106ad6759d49252faf50eac4f87eaec4149454b0f0dc34742aa00f095b57816251a0a0062eab269f8174083298a86bbcf91b1b0a11f080692adcb613fc43d3d21a9f135ba427a7a9bfc1037a4eff7591306a9827f13c44b0736bde916189a47e47ec195e182d4b8f1f29b4f5a9cefcbda886031af71d24120301b957306a66846ab69335a78f50755bda4a4dfe5efe1a626364c8eb335221ebfb5e746e89000a13730670af9831af2f293a10f248d22c792aee9e716162ece3c8ac70e80933701796d1da7", 0xc7}, {0x0}, {&(0x7f0000000a80)}], 0x6, &(0x7f0000000c00)}}, {{&(0x7f0000000cc0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000003500)=[{&(0x7f0000000d40)="30502673f47c529896cb65b9dc15c97748d7a915ee3686a9f8b9cac3684cae21919be42e1d0f755851c17a248954f9718c8b1d8e85ba58b496939f82f07d45ada7611bdaafd40f8badbb83d17a9278538ff2bfb362f306a3b13237ff0431f2dbec6034648772", 0x66}, {&(0x7f0000000e40)}, {&(0x7f0000000f40)="d27afafd7047906ac05cf95e2c647b8ac36c7c4f0ceeafc28250bfefd220498385b826397249216e0b40b1b0f223411956b83617c99dd3b094286cb792798f4ccb5e9ace4724df8234ea92704cbb5120082e742442a2279b561fae61fd77c5a9578f7a85ff", 0x65}, {&(0x7f0000002500)}], 0x4, &(0x7f0000003580)=[@ip_ttl={{0x14}}], 0x18}}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003680)="2d5609bd798200a7f7e486dc87f7b30204ccc37008c16d0138c40dd3ac8d1f26e25b56308698ba6fc0", 0x29}, {&(0x7f0000003780)}], 0x2, &(0x7f0000003940)=[@ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xf3, 0x1, 0x7, [{@multicast2, 0x8}]}, @timestamp={0x44, 0x4, 0x95, 0x0, 0xd}, @lsrr={0x83, 0x7, 0xe4, [@private=0xa010101]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x66a0}}], 0x48}}, {{&(0x7f0000006e80)={0x2, 0x4e21, @private=0xa010104}, 0x10, &(0x7f00000070c0)=[{&(0x7f0000006ec0)="4e4aa59634314d39", 0x8}, {0x0}], 0x2}}], 0x4, 0x4068884) 14.995143662s ago: executing program 2 (id=27118): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x1002, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x8) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000008400)={0x2020}, 0x2020) 13.759477549s ago: executing program 8 (id=27121): openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd708", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 12.344474681s ago: executing program 8 (id=27124): r0 = memfd_create(&(0x7f0000000000)='\x00\x0e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\xb5\xf5\xe8\x8a\xe5\xca\'\xfc>\x98\xaa\x8e\x02\xf6rY\xc4\xecB5\vX\'\xe7\xdd\x9d\x9e_\x00\xa1^Yx\x0eF\x98S\xdf\"\xa4\xc2T\xfa\x9f\xac|\xa0\xc5\x9d\xec\xa3\xe9c`j\xbf\x19\xc5\xc7c\xaer\x10\\BCo\x86\xe8X\x1c\x05E%\xb0\x85\xd0\x1e\xa7\xc9w\xa3D\xad<\xcc\x90`\xa8<1\xa1\x04\x0f\a\r\xe4H\x95\t\x00{\x1eJW\x8b\x93\x05\xa2\x85\x95\xdf\x87\xf6+\x0e\xff\xff\x00\x00\x00\x00\x00\x00\xff\xd6h\x8b\xc5\xb9\x10\xa4\x0e\xff\xfak\xf1{\xb7{\x94\xc5\x94\xadk\xef\xb9\xd0S\xeb\xff\x015^\xcf\nn\x1e\x12(\x88G\x8ee\xe2)\x12\\\xb1\xc1\xa9', 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(r0, 0x0) 12.088687843s ago: executing program 6 (id=27125): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000001000ffff29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300230a07002c0012800e00010069703667726574617000000018000280140007000002000000000000000000000000000108001f000800000008000d"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 11.806976159s ago: executing program 4 (id=27126): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYRESDEC], &(0x7f00002bf000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8}, 0x94) socket$kcm(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xc5) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 11.035251711s ago: executing program 8 (id=27127): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 9.651091196s ago: executing program 6 (id=27129): fadvise64(0xffffffffffffffff, 0x1, 0xc, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 9.580860016s ago: executing program 4 (id=27130): mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0xc, 0x1040}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="48010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000001eb900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c00120073657169762863636d28626c6f77666973682d61736d29290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000c0008"], 0x148}}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x28, 0x3e, 0xb235333, 0x1, 0x4, 0x4000001, 0x0, 0x0, 0x0, 0x40, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='trusted.overlay.upper\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x79}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 8.500899253s ago: executing program 4 (id=27132): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x4) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x7) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x8172}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') 7.703864688s ago: executing program 6 (id=27133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) 7.655490943s ago: executing program 8 (id=27134): socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) fremovexattr(r2, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x17}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x12, &(0x7f0000000580)=0x9, 0x4) 6.54846548s ago: executing program 6 (id=27136): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000004372a00000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000080)={0x0, 0x7, [0x5, 0x7ff, 0x1e1b, 0xa, 0x5, 0x3e]}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440), 0x109800, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8041, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x5) mount$9p_unix(&(0x7f00000021c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x818001, &(0x7f0000000080)) dup3(r2, r3, 0x80000) 6.531092303s ago: executing program 4 (id=27137): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) 5.203136855s ago: executing program 4 (id=27139): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7003f00) 5.166382045s ago: executing program 6 (id=27140): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x88, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x567}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x16f0443b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4000805) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2404c045) r1 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.138379371s ago: executing program 4 (id=27141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x101180, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xf401) 3.857272482s ago: executing program 6 (id=27143): socket$netlink(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4000845) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 3.7506487s ago: executing program 1 (id=27144): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3.524537383s ago: executing program 1 (id=27145): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[], &(0x7f0000000f40)=""/4089, 0x3f, 0xff9, 0x8}, 0x28) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x105}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d3", 0x20}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75", 0x12}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000dc0)="b5572ece7e3373e08dcb75b0e517da8a7cab2d5f573077b61674b3d044fe9638b573caa80b4324a2a935b2aafb92b1d3e977d8a8ce2e97684645cb58a88f795d7dcdcb12a91849af01cabac8da9fdda23185e0f975c4f5db7f5f0350d328b4172f520bcdca68148bbd3980b92bda71074da79ae9ce2ebabe5aadf09911483866836cf1953789a89886dce5ab31b7b99a3ae57d1e2da2c82f0baf66bdc6f55fd17b739c97c129b18f12a267c1f612161932650570fede3164c10dbe247458b76a18aeb8727d", 0xc5}], 0x1}}], 0x4, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.427800395s ago: executing program 2 (id=27146): socket$inet6_udplite(0xa, 0x2, 0x88) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0) tee(r1, r5, 0xf3a, 0x4) write$binfmt_elf64(r3, &(0x7f0000000380)=ANY=[], 0x18c6) 2.579351782s ago: executing program 1 (id=27147): socket(0x18, 0x0, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000ff00"], 0x48) socket(0x2c, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @local, @void, {@llc={0x4, {@snap={0x1, 0x1, "c8", "118190", 0x60}}}}}, 0x0) 2.049378923s ago: executing program 1 (id=27148): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1d, r3}, 0x10) 1.89215835s ago: executing program 2 (id=27149): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0xcf46, &(0x7f0000000080), &(0x7f00000000c0)=0x2}, {[0x5, 0x0, 0x0, 0x2]}, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', 0x0}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000d40)={{0xffffffffffffffff, &(0x7f0000000300)='skcipher\x00', 0x44000, 0x0, 0x3, &(0x7f0000000540)={@_ha_fsid}, 0x0}, 0x5, &(0x7f0000000e00)=[{0x1, 0x4caa, &(0x7f0000000700)='connmark\x00', &(0x7f0000000740), 0x0, 0x10}, {0x1, 0x4, &(0x7f0000000900)='connmar+\x00', 0x0, 0x0, 0x2}, {0x1, 0x870, &(0x7f0000000980)='\x00', &(0x7f00000009c0)="9515dde9a164bbe50de6f6d046c5f49efba9c621e80713bc2651c3ff043bdce51ea5f97c8a0488a59b00383f454e54a5c034a99082d54b10ae81624eb2f3bd23892ae9533b61cc6d5be0fad39f7d2ca574d26418ea4d537e1ac251177144ebfe2beb51f9510b95ee8837704bb908b7d9a526d1d2cacb7455e11cd6a694e0fd7d", 0x80, 0x20}, {0x2, 0x0, &(0x7f0000000b40)=',^^\xd9&&\x00', &(0x7f0000000b80)="04259e439e7a36b5d608631e376f97100b26723336d45c44fd927ae6e950a716363751b014753aad831b9e71ff402ce54d6eab607518bc7e57", 0x39, 0x32}, {0x1, 0x80000001, 0x0, &(0x7f0000000c40)="63602c4d881e675a0ad3e49e5044e8dc7dba90124e2ec2dc19478c8788a3d8fc8cfbc6676ab7f1c1728d038c75822918bf5e875b92187f1db89522bc1cbfd69866fbbad56ff82be5ca52bca254949b8d5a3813a667bddff8ed771d00fac02a47ea360b4fb9", 0x65, 0xa}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.569187942s ago: executing program 2 (id=27150): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c001) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0x2020) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080)={0xb, 0x0, 0x40000}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000000)=0x1) pipe2$watch_queue(0x0, 0x80) 1.498118253s ago: executing program 1 (id=27151): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xffffae1d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0xb, 0x32, 0x31, 0x38, 0x38, 0x64, 0x39, 0x31, 0x39, 0x65, 0x0, 0x64, 0x32, 0x35, 0x37]}, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f00000000c0)) readv(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)=""/106, 0x6a}], 0x1) 1.462394132s ago: executing program 8 (id=27152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e27, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xff}, 0x1c) 358.705939ms ago: executing program 8 (id=27153): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0x4, 0x0, &(0x7f0000000040)="976d9023", 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='P', 0x0, 0x8000}, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 253.437806ms ago: executing program 2 (id=27154): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000406810100000002000000b8c70000090500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x8855}, 0x2800) 0s ago: executing program 1 (id=27155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) kernel console output (not intermixed with test programs): binder: 11564:11570 ioctl c0306201 2000000001c0 returned -22 [ 1485.717660][T10767] veth0_macvtap: entered promiscuous mode [ 1485.799420][T10767] veth1_macvtap: entered promiscuous mode [ 1485.836650][ T6220] usb 5-1: USB disconnect, device number 93 [ 1485.939655][T10767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.039569][T10767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1486.197087][T11473] udevd[11473]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1486.237537][T30786] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.257257][T30786] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.287133][T30786] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.326502][T30786] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1486.849246][T11626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24304'. [ 1486.911921][T11626] netlink: 20 bytes leftover after parsing attributes in process `syz.4.24304'. [ 1487.202166][ T1300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.202186][ T1300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.413876][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 1487.413896][ T37] audit: type=1400 audit(2000002061.788:2564): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="%" object="_" requested=w pid=11657 comm="syz.6.24310" saddr=fc01::bf src=1 daddr=fe80::aa dest=16385 netif=wpan0 [ 1487.538190][ T2164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.538210][ T2164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.896528][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24322'. [ 1488.896553][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24322'. [ 1488.980034][ T1020] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.980163][T11717] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24322'. [ 1488.980182][T11717] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24322'. [ 1488.980408][ T1020] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.981135][ T1020] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1488.981177][ T1020] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1489.211812][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1490.833385][T11809] binder: 11808:11809 ioctl c0306201 0 returned -14 [ 1491.336553][ T6142] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1491.479132][ T6142] usb 5-1: Using ep0 maxpacket: 32 [ 1491.481152][ T6142] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1491.481177][ T6142] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1491.481197][ T6142] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1491.481218][ T6142] usb 5-1: config 1 has no interface number 0 [ 1491.481270][ T6142] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1491.481296][ T6142] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1491.481350][ T6142] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1491.481371][ T6142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.634410][ T6142] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1491.777124][ T6142] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1492.040992][ T6142] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1492.207551][ T6142] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1492.207584][ T6142] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1492.207658][ T6142] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1492.210428][ T6142] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1492.210522][ T6142] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.210546][ T6142] usb 10-1: Product: syz [ 1492.210563][ T6142] usb 10-1: Manufacturer: syz [ 1492.210579][ T6142] usb 10-1: SerialNumber: syz [ 1492.298651][T11858] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1492.298805][T11858] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1492.702192][ T810] usb 5-1: USB disconnect, device number 94 [ 1492.705355][ T810] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1492.829915][ T5417] IPVS: starting estimator thread 0... [ 1492.917480][T11892] IPVS: using max 9 ests per chain, 21600 per kthread [ 1493.223525][ T5417] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1493.282429][ T6142] (unnamed net_device) (uninitialized): Assigned a random MAC address: d2:7a:cd:45:e9:43 [ 1493.329944][ T6142] rtl8150 10-1:1.0: eth9: rtl8150 is detected [ 1493.351867][ T6142] usb 10-1: USB disconnect, device number 2 [ 1493.368555][ T5417] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1493.369769][ T5417] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1493.369814][ T5417] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1493.372186][ T5417] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1493.372210][ T5417] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.372229][ T5417] usb 5-1: Product: syz [ 1493.372243][ T5417] usb 5-1: Manufacturer: syz [ 1493.372256][ T5417] usb 5-1: SerialNumber: syz [ 1493.557048][T26196] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1493.885019][ T5417] usb 5-1: Can't get UAC3 power state for id 10 [ 1493.892048][ T5417] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 1493.919482][ T5417] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1494.075949][ T5417] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1494.153332][ T5417] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1494.225214][T11958] loop7: detected capacity change from 0 to 16384 [ 1494.300208][ T5417] usb 5-1: USB disconnect, device number 95 [ 1494.411407][T11966] loop7: detected capacity change from 16384 to 0 [ 1494.425182][ C0] blk_print_req_error: 10 callbacks suppressed [ 1494.425201][ C0] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 2 [ 1494.427671][ C1] I/O error, dev loop7, sector 16368 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 1494.533251][T11473] udevd[11473]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1495.044149][T12004] netlink: 27 bytes leftover after parsing attributes in process `syz.9.24384'. [ 1495.723380][T12039] netlink: 'syz.8.24396': attribute type 9 has an invalid length. [ 1495.723395][T12039] netlink: 'syz.8.24396': attribute type 11 has an invalid length. [ 1495.723404][T12039] netlink: 'syz.8.24396': attribute type 12 has an invalid length. [ 1495.723415][T12039] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.24396'. [ 1495.723500][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24396'. [ 1496.026567][T12058] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 1497.012125][T12082] netlink: 208 bytes leftover after parsing attributes in process `syz.8.24408'. [ 1497.012160][T12082] netlink: 208 bytes leftover after parsing attributes in process `syz.8.24408'. [ 1497.213148][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1497.783205][T12116] 9p: Bad value for 'wfdno' [ 1498.218290][T12133] input: syz1 as /devices/virtual/input/input181 [ 1498.436639][ T37] audit: type=1400 audit(2000002073.357:2565): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="%" object="_" requested=w pid=12145 comm="syz.6.24427" saddr=fc01::2 daddr=fe80::aa dest=16385 netif=wpan0 [ 1498.737439][T12165] netlink: 104 bytes leftover after parsing attributes in process `syz.7.24432'. [ 1499.505825][T12204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1499.991402][T12223] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24446'. [ 1499.991427][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24446'. [ 1500.343572][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24450'. [ 1500.401677][T26196] Bluetooth: hci5: unknown advertising packet type: 0x6b [ 1500.401704][T26196] Bluetooth: hci5: Dropping invalid advertising data [ 1500.401728][T26196] Bluetooth: hci5: Malformed LE Event: 0x02 [ 1500.637337][ T37] audit: type=1400 audit(2000002075.667:2566): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%" requested=w pid=12255 comm="syz.6.24456" daddr=fc00:: dest=19999 [ 1501.299727][ T5417] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1501.452376][ T5417] usb 9-1: Using ep0 maxpacket: 16 [ 1501.454731][ T5417] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1501.454765][ T5417] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1501.474611][ T5417] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1501.474652][ T5417] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.474674][ T5417] usb 9-1: Product: syz [ 1501.474689][ T5417] usb 9-1: Manufacturer: syz [ 1501.474703][ T5417] usb 9-1: SerialNumber: syz [ 1501.545539][ T5417] usb 9-1: config 0 descriptor?? [ 1501.680660][T12251] hfs: can't find a HFS filesystem on dev nullb0 [ 1501.831888][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1501.891419][ T5417] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input182 [ 1501.913011][ T5417] imon:send_packet: packet tx failed (-71) [ 1501.938281][ T5417] imon 9-1:0.0: panel buttons/knobs setup failed [ 1502.246088][ T5417] rc_core: IR keymap rc-imon-pad not found [ 1502.246111][ T5417] Registered IR keymap rc-empty [ 1502.246194][ T5417] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1502.246214][ T5417] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1502.246682][ T5417] imon:send_packet: packet tx failed (-71) [ 1502.280860][ T5417] imon 9-1:0.0: remote input dev register failed [ 1502.284841][ T5417] imon 9-1:0.0: imon_init_intf0: rc device setup failed [ 1502.634743][ T5417] imon 9-1:0.0: unable to initialize intf0, err 0 [ 1502.634767][ T5417] imon:imon_probe: failed to initialize context! [ 1502.634785][ T5417] imon 9-1:0.0: unable to register, err -19 [ 1502.677610][ T5417] usb 9-1: USB disconnect, device number 13 [ 1503.040405][T12335] syzkaller1: entered promiscuous mode [ 1503.040430][T12335] syzkaller1: entered allmulticast mode [ 1503.081077][ T5417] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1503.126233][T12339] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1503.246952][ T5417] usb 9-1: Using ep0 maxpacket: 16 [ 1503.262587][ T5417] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1503.262623][ T5417] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1503.298651][ T5417] usb 9-1: string descriptor 0 read error: -22 [ 1503.298805][ T5417] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 1503.298831][ T5417] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.331251][ T5417] usb 9-1: config 0 descriptor?? [ 1503.381590][ T5417] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input184 [ 1503.929962][ T5417] rc_core: IR keymap rc-imon-pad not found [ 1503.929987][ T5417] Registered IR keymap rc-empty [ 1503.930129][ T5417] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 1503.930150][ T5417] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1504.045811][ T5417] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1504.106655][ T5417] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input185 [ 1504.132999][ T5417] imon 9-1:0.0: iMON device (15c2:0041, intf0) on usb<9:14> initialized [ 1504.361932][ C1] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 1504.362458][ T6142] usb 9-1: USB disconnect, device number 14 [ 1505.662655][ T8110] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1505.843478][ T8110] usb 9-1: Using ep0 maxpacket: 32 [ 1505.851398][ T8110] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1505.851430][ T8110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1505.851457][ T8110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1505.851481][ T8110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 1505.851508][ T8110] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 1505.869102][ T8110] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1505.869132][ T8110] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.869153][ T8110] usb 9-1: Product: syz [ 1505.869168][ T8110] usb 9-1: Manufacturer: syz [ 1505.869183][ T8110] usb 9-1: SerialNumber: syz [ 1505.968904][ T8110] usb 9-1: config 0 descriptor?? [ 1506.245723][T12461] netlink: 'syz.9.24498': attribute type 1 has an invalid length. [ 1506.413731][T12461] bond1: entered promiscuous mode [ 1506.414163][T12461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1506.433949][ T8110] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1506.434007][ T8110] input input186: Device does not respond to id packet M [ 1506.435707][ T8110] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1506.435750][ T8110] input input186: Device does not respond to id packet P [ 1506.479816][ T8110] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 1506.479866][ T8110] input input186: Device does not respond to id packet B [ 1506.496665][ T8110] input input186: Limiting number of effects to 32 (device reports 85) [ 1506.613317][T12466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1506.622174][T12466] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1506.622199][T12466] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1506.673685][ T8110] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1506.674148][ T8110] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1506.674651][ T8110] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1506.675114][ T8110] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 1506.678799][ T8110] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input186 [ 1506.753417][ T8110] usb 9-1: USB disconnect, device number 15 [ 1506.766594][T12466] bond1: (slave wireguard0): making interface the new active one [ 1506.766618][T12466] wireguard0: entered promiscuous mode [ 1506.801078][T12466] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 1506.961975][T12501] bond1: option packets_per_slave: invalid value (18446744073709551615) [ 1506.962003][T12501] bond1: option packets_per_slave: allowed values 0 - 65535 [ 1507.004526][T12501] bond1 (unregistering): Released all slaves [ 1509.732015][ T6142] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1509.886803][ T6142] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.886841][ T6142] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1509.886864][ T6142] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1509.886908][ T6142] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1509.886937][ T6142] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.918430][ T6142] usb 10-1: config 0 descriptor?? [ 1510.447120][ T6142] plantronics 0003:047F:FFFF.0078: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1510.694226][T23618] usb 10-1: USB disconnect, device number 3 [ 1510.883398][T12704] fido_id[12704]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1511.321089][T12738] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1513.074082][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1518.676620][ T37] audit: type=1400 audit(2000002094.605:2567): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%" requested=w pid=12939 comm="syz.6.24595" daddr=fc01:: [ 1522.247338][T12926] netlink: 'syz.7.24592': attribute type 1 has an invalid length. [ 1522.469274][T26196] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 1523.129992][T13009] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1523.265013][T13021] netlink: 'syz.8.24616': attribute type 12 has an invalid length. [ 1523.265037][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24616'. [ 1523.284567][T13021] netlink: 'syz.8.24616': attribute type 12 has an invalid length. [ 1523.284589][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24616'. [ 1526.333570][T26196] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1526.333898][T26196] Bluetooth: hci4: Injecting HCI hardware error event [ 1526.342519][ T60] Bluetooth: hci4: hardware error 0x00 [ 1527.090579][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1528.063886][T13179] syz.9.24659 (13179) used greatest stack depth: 15816 bytes left [ 1528.141016][T30786] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 1528.468107][ T60] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1528.774608][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.9.24675'. [ 1528.789968][T13241] sit1: entered allmulticast mode [ 1529.060673][ T37] audit: type=1326 audit(2000002105.502:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.9.24677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f7e3c819 code=0x7ffc0000 [ 1529.061274][ T37] audit: type=1326 audit(2000002105.502:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.9.24677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f7e3c819 code=0x7ffc0000 [ 1529.070234][ T37] audit: type=1326 audit(2000002105.502:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.9.24677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f7e3c819 code=0x7ffc0000 [ 1529.127835][ T37] audit: type=1326 audit(2000002105.565:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.9.24677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f16f7e3c819 code=0x7ffc0000 [ 1529.127957][ T37] audit: type=1326 audit(2000002105.565:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.9.24677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f7e3c819 code=0x7ffc0000 [ 1529.128075][ T37] audit: type=1326 audit(2000002105.565:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.9.24677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f7e3c819 code=0x7ffc0000 [ 1529.157515][ T37] audit: type=1326 audit(2000002105.596:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.9.24677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f7e3c819 code=0x7ffc0000 [ 1529.157699][ T37] audit: type=1326 audit(2000002105.607:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.9.24677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f7e3c819 code=0x7ffc0000 [ 1529.157834][ T37] audit: type=1326 audit(2000002105.607:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.9.24677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f16f7e3c819 code=0x7ffc0000 [ 1529.157937][ T37] audit: type=1326 audit(2000002105.607:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13249 comm="syz.9.24677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16f7e3c819 code=0x7ffc0000 [ 1529.481887][T13264] overlayfs: failed to clone lowerpath [ 1530.516675][T13297] netlink: 16 bytes leftover after parsing attributes in process `syz.7.24692'. [ 1532.282326][T13348] loop5: detected capacity change from 0 to 7 [ 1532.300906][T13348] Dev loop5: unable to read RDB block 7 [ 1532.300933][T13348] loop5: AHDI p1 p2 p3 [ 1532.300959][T13348] loop5: partition table partially beyond EOD, truncated [ 1532.324844][T13348] loop5: p1 start 1818582900 is beyond EOD, truncated [ 1532.324868][T13348] loop5: p3 start 335544320 is beyond EOD, truncated [ 1532.405078][T13354] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24707'. [ 1532.469166][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24707'. [ 1532.469203][T13357] netlink: 20 bytes leftover after parsing attributes in process `syz.8.24707'. [ 1533.168561][T13369] fuse: Bad value for 'fd' [ 1534.788380][T13425] netlink: 12 bytes leftover after parsing attributes in process `syz.6.24727'. [ 1535.007231][T13425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1535.235051][T13429] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1535.506330][T13492] netlink: 180 bytes leftover after parsing attributes in process `syz.4.24732'. [ 1535.900069][T13510] fuse: Bad value for 'fd' [ 1536.031124][T13512] netlink: 8 bytes leftover after parsing attributes in process `syz.8.24741'. [ 1537.333859][T13575] netlink: 'syz.7.24758': attribute type 2 has an invalid length. [ 1537.374783][T13575] !: entered promiscuous mode [ 1540.271970][T13722] syz_tun: entered allmulticast mode [ 1540.277787][T13721] syz_tun: left allmulticast mode [ 1540.544652][T13727] netlink: 'syz.8.24802': attribute type 3 has an invalid length. [ 1541.592837][ T5417] Process accounting resumed [ 1541.653163][ T2557] Process accounting resumed [ 1541.692997][T13780] Process accounting resumed [ 1541.865321][T13813] netlink: 165 bytes leftover after parsing attributes in process `syz.4.24822'. [ 1542.975096][ T2557] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1543.117339][ T2557] usb 10-1: Using ep0 maxpacket: 32 [ 1543.119192][ T2557] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 1543.119212][ T2557] usb 10-1: config 0 has no interface number 0 [ 1543.119246][ T2557] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1543.124178][ T2557] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1543.124206][ T2557] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.124227][ T2557] usb 10-1: Product: syz [ 1543.124242][ T2557] usb 10-1: Manufacturer: syz [ 1543.124256][ T2557] usb 10-1: SerialNumber: syz [ 1543.185843][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24836'. [ 1543.186106][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.24836'. [ 1543.220229][ T2557] usb 10-1: config 0 descriptor?? [ 1543.837870][ T2557] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1543.837929][ T2557] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1543.837949][ T2557] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1543.838049][ T2557] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1543.889136][ T2557] usb 10-1: USB disconnect, device number 4 [ 1544.224670][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24851'. [ 1544.254379][T13944] sit2: entered allmulticast mode [ 1544.432613][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24854'. [ 1544.598933][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24856'. [ 1545.033451][T13990] fuse: Bad value for 'fd' [ 1546.134752][T14025] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 1546.250100][T14027] netlink: 'syz.4.24877': attribute type 1 has an invalid length. [ 1546.250163][T14027] netlink: 'syz.4.24877': attribute type 2 has an invalid length. [ 1546.250180][T14027] netlink: 'syz.4.24877': attribute type 1 has an invalid length. [ 1546.250195][T14027] netlink: 'syz.4.24877': attribute type 3 has an invalid length. [ 1546.250209][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.24877'. [ 1547.854004][T14078] netlink: 'syz.8.24894': attribute type 1 has an invalid length. [ 1547.854026][T14078] netlink: 60 bytes leftover after parsing attributes in process `syz.8.24894'. [ 1547.854041][T14078] nbd: illegal input index 327700 [ 1547.898414][T14081] 9pnet: p9_errstr2errno: server reported unknown error b0 [ 1549.435522][T14153] netlink: 'syz.8.24917': attribute type 9 has an invalid length. [ 1549.435544][T14153] netlink: 'syz.8.24917': attribute type 11 has an invalid length. [ 1549.435558][T14153] netlink: 'syz.8.24917': attribute type 12 has an invalid length. [ 1549.435574][T14153] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.24917'. [ 1549.435684][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.8.24917'. [ 1549.626137][T26196] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1549.671758][T26196] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1549.675973][T26196] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1549.692837][T26196] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1549.710388][T26196] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1549.743760][T20135] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.576687][T20135] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.171930][T20135] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.466883][T14261] netlink: 'syz.4.24937': attribute type 1 has an invalid length. [ 1551.466940][T14261] netlink: 188 bytes leftover after parsing attributes in process `syz.4.24937'. [ 1551.580018][T14264] overlayfs: failed to resolve './cgroup': -2 [ 1551.706875][T20135] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1551.776032][ T60] Bluetooth: hci2: command tx timeout [ 1551.939556][T14289] netlink: 'syz.8.24943': attribute type 3 has an invalid length. [ 1552.100574][T14156] chnl_net:caif_netlink_parms(): no params data found [ 1552.992242][T14156] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.992396][T14156] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.992610][T14156] bridge_slave_0: entered allmulticast mode [ 1553.017468][T14156] bridge_slave_0: entered promiscuous mode [ 1553.039216][T14156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.039344][T14156] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.039590][T14156] bridge_slave_1: entered allmulticast mode [ 1553.071015][T14156] bridge_slave_1: entered promiscuous mode [ 1553.352666][T20135] bridge_slave_1: left allmulticast mode [ 1553.352698][T20135] bridge_slave_1: left promiscuous mode [ 1553.354368][T20135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1553.532622][T20135] bridge_slave_0: left allmulticast mode [ 1553.532653][T20135] bridge_slave_0: left promiscuous mode [ 1553.533519][T20135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.757617][ T60] Bluetooth: hci2: command tx timeout [ 1555.369682][T20135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1555.443840][T20135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1555.486266][T20135] bond0 (unregistering): Released all slaves [ 1555.551675][T20135] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 1555.551704][T20135] wireguard0: left promiscuous mode [ 1555.668960][T20135] bond1 (unregistering): Released all slaves [ 1555.709699][T20135] bond2 (unregistering): Released all slaves [ 1555.748196][ T60] Bluetooth: hci2: command tx timeout [ 1555.847988][T14156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1555.901462][T14156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1556.083519][T14156] team0: Port device team_slave_0 added [ 1556.098823][T14156] team0: Port device team_slave_1 added [ 1556.595770][T14156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1556.595788][T14156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.595813][T14156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1556.663196][T14156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1556.663216][T14156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1556.663262][T14156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.987914][T14156] hsr_slave_0: entered promiscuous mode [ 1556.993360][T14156] hsr_slave_1: entered promiscuous mode [ 1556.994390][T14156] debugfs: 'hsr0' already exists in 'hsr' [ 1556.994416][T14156] Cannot create hsr debugfs directory [ 1557.721181][T26196] Bluetooth: hci2: command tx timeout [ 1557.920644][T20135] hsr_slave_0: left promiscuous mode [ 1557.958586][T20135] hsr_slave_1: left promiscuous mode [ 1557.960584][T20135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1557.974681][T20135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1558.058608][T20135] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1558.058636][T20135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1558.210573][T20135] veth1_macvtap: left promiscuous mode [ 1558.210693][T20135] veth0_macvtap: left promiscuous mode [ 1558.210961][T20135] veth1_vlan: left promiscuous mode [ 1558.211166][T20135] veth0_vlan: left promiscuous mode [ 1559.521076][T20135] team0 (unregistering): Port device team_slave_1 removed [ 1559.559132][T20135] team0 (unregistering): Port device team_slave_0 removed [ 1559.810439][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24989'. [ 1559.810487][T14617] netlink: 'syz.6.24989': attribute type 30 has an invalid length. [ 1559.897925][T14617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.24989'. [ 1559.897958][T14617] netlink: 'syz.6.24989': attribute type 30 has an invalid length. [ 1559.942360][ T4883] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1560.004052][ T4883] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1560.010298][ T4883] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1560.139451][ T4883] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1560.411486][T14722] 9p: Bad value for 'rfdno' [ 1561.283023][ T2557] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1561.458289][ T2557] usb 9-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1561.458326][ T2557] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1561.462568][ T2557] usb 9-1: string descriptor 0 read error: -22 [ 1561.462704][ T2557] usb 9-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 1561.462728][ T2557] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.103564][ T2557] lenovo 0003:17EF:6047.0079: unknown main item tag 0x0 [ 1562.103596][ T2557] lenovo 0003:17EF:6047.0079: unknown main item tag 0x0 [ 1562.103619][ T2557] lenovo 0003:17EF:6047.0079: unknown main item tag 0x0 [ 1562.103641][ T2557] lenovo 0003:17EF:6047.0079: unknown main item tag 0x0 [ 1562.103664][ T2557] lenovo 0003:17EF:6047.0079: unknown main item tag 0x0 [ 1562.103686][ T2557] lenovo 0003:17EF:6047.0079: unknown main item tag 0x0 [ 1562.103708][ T2557] lenovo 0003:17EF:6047.0079: unknown main item tag 0x0 [ 1562.103752][ T2557] lenovo 0003:17EF:6047.0079: unknown main item tag 0x0 [ 1562.103776][ T2557] lenovo 0003:17EF:6047.0079: unknown main item tag 0x0 [ 1562.103818][ T2557] lenovo 0003:17EF:6047.0079: unknown main item tag 0x0 [ 1562.322597][ T2557] lenovo 0003:17EF:6047.0079: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.8-1/input0 [ 1562.323808][ T2557] lenovo 0003:17EF:6047.0079: Failed to switch F7/9/11 mode: -71 [ 1562.324436][ T2557] lenovo 0003:17EF:6047.0079: Failed to switch middle button: -71 [ 1562.324969][ T2557] lenovo 0003:17EF:6047.0079: Fn-lock setting failed: -71 [ 1562.332093][ T2557] lenovo 0003:17EF:6047.0079: Sensitivity setting failed: -71 [ 1562.418671][ T2557] usb 9-1: USB disconnect, device number 16 [ 1562.589731][T14814] fido_id[14814]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1562.603756][T14822] netlink: 'syz.6.25025': attribute type 83 has an invalid length. [ 1563.274004][T14843] netlink: 'syz.8.25030': attribute type 21 has an invalid length. [ 1563.274023][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.8.25030'. [ 1563.274614][T14843] netlink: 'syz.8.25030': attribute type 21 has an invalid length. [ 1563.274627][T14843] netlink: 4 bytes leftover after parsing attributes in process `syz.8.25030'. [ 1563.545852][T14869] netlink: 28 bytes leftover after parsing attributes in process `syz.6.25037'. [ 1563.850137][T14156] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1563.919702][T14156] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1563.993757][T14156] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1564.022442][T14156] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1564.289422][T14156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.367605][T14156] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.409989][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.410173][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.453365][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.453504][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1565.381797][T14950] netlink: 28 bytes leftover after parsing attributes in process `syz.8.25054'. [ 1565.381823][T14950] netlink: 32 bytes leftover after parsing attributes in process `syz.8.25054'. [ 1565.381840][T14950] netlink: 28 bytes leftover after parsing attributes in process `syz.8.25054'. [ 1565.382072][T14950] netlink: 32 bytes leftover after parsing attributes in process `syz.8.25054'. [ 1565.874572][T14156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1566.188822][T14963] netlink: 'syz.8.25056': attribute type 1 has an invalid length. [ 1566.326514][T14963] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1566.547109][T14964] bond1: (slave gretap1): making interface the new active one [ 1566.577156][T14964] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1566.651193][T14156] veth0_vlan: entered promiscuous mode [ 1566.741784][T14156] veth1_vlan: entered promiscuous mode [ 1566.858742][T14156] veth0_macvtap: entered promiscuous mode [ 1566.921700][T14156] veth1_macvtap: entered promiscuous mode [ 1567.067645][T14156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1567.100744][T14156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1567.170326][ T995] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.171806][ T995] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.171847][ T995] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1567.171883][ T995] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1568.351360][T20135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1568.351380][T20135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1568.622030][T20135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1568.622053][T20135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1569.793451][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25075'. [ 1570.277827][T15093] tunl0: entered promiscuous mode [ 1570.278147][T15093] tunl0: left promiscuous mode [ 1570.711106][T15134] netlink: 'syz.8.25086': attribute type 39 has an invalid length. [ 1571.726844][T15167] netlink: 10 bytes leftover after parsing attributes in process `syz.7.25094'. [ 1576.384873][T15352] binder: 15350:15352 ioctl 4018620d 0 returned -22 [ 1576.524803][T15354] overlayfs: failed to resolve './cgroup': -2 [ 1576.915491][T15368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1576.917321][T15368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1576.917534][T15368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1576.917722][T15368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1576.921575][T15368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1576.921779][T15368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1576.921963][T15368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1576.922146][T15368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1576.932512][T15368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1576.937171][T15368] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 1578.076104][T15407] netlink: 208 bytes leftover after parsing attributes in process `syz.0.25160'. [ 1578.076134][T15407] netlink: 208 bytes leftover after parsing attributes in process `syz.0.25160'. [ 1578.114469][T15408] netlink: 28 bytes leftover after parsing attributes in process `syz.7.25161'. [ 1578.119489][T15410] overlayfs: conflicting lowerdir path [ 1578.174638][T15411] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1580.392316][T15501] fuse: Bad value for 'fd' [ 1580.624458][T15513] fuse: Bad value for 'fd' [ 1580.734598][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 1581.492438][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.706046][T15544] netlink: 'syz.6.25203': attribute type 3 has an invalid length. [ 1581.984705][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1581.987846][T15551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25206'. [ 1581.989375][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1582.011840][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1582.018393][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1582.034079][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1582.068643][T15562] overlayfs: failed to clone upperpath [ 1582.245516][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.813503][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.426190][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.541407][T15637] netlink: 'syz.8.25224': attribute type 1 has an invalid length. [ 1583.710860][T15637] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1583.952110][T15641] bond2: (slave gretap2): making interface the new active one [ 1583.965237][T15641] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1584.087989][T26196] Bluetooth: hci2: command tx timeout [ 1584.793397][ T13] bridge_slave_1: left allmulticast mode [ 1584.793436][ T13] bridge_slave_1: left promiscuous mode [ 1584.810345][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1584.950370][ T13] bridge_slave_0: left allmulticast mode [ 1584.950397][ T13] bridge_slave_0: left promiscuous mode [ 1584.950596][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1585.501569][T15778] overlayfs: failed to resolve './bus': -2 [ 1585.640949][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1586.068976][T26196] Bluetooth: hci2: command tx timeout [ 1586.110927][T15794] input: syz1 as /devices/virtual/input/input187 [ 1586.832329][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1586.865732][T15826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1586.953963][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1587.020748][ T13] bond0 (unregistering): Released all slaves [ 1587.199197][T15844] fuse: Bad value for 'fd' [ 1587.809036][T15552] chnl_net:caif_netlink_parms(): no params data found [ 1588.066007][T26196] Bluetooth: hci2: command tx timeout [ 1588.622267][T15940] netlink: 25 bytes leftover after parsing attributes in process `syz.4.25267'. [ 1589.003563][ T13] hsr_slave_0: left promiscuous mode [ 1589.042313][ T13] hsr_slave_1: left promiscuous mode [ 1589.043480][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1589.043505][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1589.103648][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1589.103673][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1589.193677][ T13] veth1_macvtap: left promiscuous mode [ 1589.193804][ T13] veth0_macvtap: left promiscuous mode [ 1589.194047][ T13] veth1_vlan: left promiscuous mode [ 1589.194209][ T13] veth0_vlan: left promiscuous mode [ 1589.747685][T15986] netlink: 68 bytes leftover after parsing attributes in process `syz.4.25280'. [ 1590.030582][ T60] Bluetooth: hci2: command tx timeout [ 1590.150243][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1590.205309][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1590.603504][T15552] bridge0: port 1(bridge_slave_0) entered blocking state [ 1590.603776][T15552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.603964][T15552] bridge_slave_0: entered allmulticast mode [ 1590.606783][T15552] bridge_slave_0: entered promiscuous mode [ 1590.610163][T15552] bridge0: port 2(bridge_slave_1) entered blocking state [ 1590.610272][T15552] bridge0: port 2(bridge_slave_1) entered disabled state [ 1590.610467][T15552] bridge_slave_1: entered allmulticast mode [ 1590.670108][T15552] bridge_slave_1: entered promiscuous mode [ 1590.730494][T15552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1590.734105][T15552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1590.813332][T15552] team0: Port device team_slave_0 added [ 1590.816633][T15552] team0: Port device team_slave_1 added [ 1590.914036][T15552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1590.914051][T15552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1590.914075][T15552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1590.916431][T15552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1590.916445][T15552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1590.916471][T15552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1591.125316][T15552] hsr_slave_0: entered promiscuous mode [ 1591.141450][T15552] hsr_slave_1: entered promiscuous mode [ 1591.142436][T15552] debugfs: 'hsr0' already exists in 'hsr' [ 1591.142458][T15552] Cannot create hsr debugfs directory [ 1591.318098][T16108] overlayfs: failed to clone lowerpath [ 1591.332875][T26196] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 1591.368871][T16126] overlayfs: failed to clone lowerpath [ 1593.206108][T15552] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.902961][T15552] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1594.021445][T16269] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.25322'. [ 1594.505197][T15552] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.128951][T15552] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1595.954876][T15552] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1595.996383][T15552] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1596.054915][T15552] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1596.149434][T15552] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1596.191873][ T37] kauditd_printk_skb: 19 callbacks suppressed [ 1596.191888][ T37] audit: type=1800 audit(2000002175.975:2597): pid=16355 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.25341" name=20202020202020203B206672616D65313A2052313D307832303230323030303235373832303230205231303D6670302066702D383D3078323032303230303032353738323032300A31333A2028626629207231203D207231302020202020202020202020202020202020202020203B206672616D65313A2052313D667030205231303D6670300A31343A2028303729207231202B3D202D382020202020202020202020202020202020202020203B206672616D65313A2052313D66702D380A3135 dev="tmpfs" ino=2353 res=0 errno=0 [ 1596.606473][T16377] overlayfs: failed to clone upperpath [ 1596.840558][T15552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.955036][T15552] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.017588][ T2164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.030827][ T2164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.056673][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.057405][ T3508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.884215][T15552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1598.334262][T16458] netlink: 67 bytes leftover after parsing attributes in process `syz.8.25366'. [ 1598.523961][T15552] veth0_vlan: entered promiscuous mode [ 1598.582789][T15552] veth1_vlan: entered promiscuous mode [ 1598.754317][T15552] veth0_macvtap: entered promiscuous mode [ 1598.770014][T15552] veth1_macvtap: entered promiscuous mode [ 1598.896392][T15552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1598.923408][T15552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1598.978169][ T2164] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.978353][ T2164] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.978527][ T2164] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.017892][ T2164] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.554605][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.554642][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.737815][ T2164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.737834][ T2164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.334916][T16545] input: syz0 as /devices/virtual/input/input188 [ 1600.558822][ T37] audit: type=1326 audit(2000002180.563:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16557 comm="syz.4.25390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84f48ec819 code=0x0 [ 1600.826135][T30775] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1601.194989][ T5416] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1601.278647][T30775] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1601.362276][ T5416] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.362301][ T5416] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1601.364341][ T5416] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1601.364367][ T5416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1601.364385][ T5416] usb 6-1: SerialNumber: syz [ 1601.654833][ T5416] usb 6-1: 0:2 : does not exist [ 1601.654914][ T5416] usb 6-1: unit 1 not found! [ 1601.712878][ T5416] usb 6-1: USB disconnect, device number 31 [ 1601.754186][T30775] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1601.883401][T12966] udevd[12966]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1602.086143][ T37] audit: type=1400 audit(2000002182.169:2599): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%" requested=w pid=16619 comm="syz.8.25401" daddr=fc01:: [ 1602.122568][T30775] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1602.536738][T16635] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.25405'. [ 1602.973936][T30775] bridge_slave_1: left allmulticast mode [ 1602.973962][T30775] bridge_slave_1: left promiscuous mode [ 1602.974184][T30775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.056925][T30775] ¾x9ÿ: left allmulticast mode [ 1603.056950][T30775] ¾x9ÿ: left promiscuous mode [ 1603.057153][T30775] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1605.092136][T30775] gretap0 (unregistering): left allmulticast mode [ 1605.092161][T30775] gretap0 (unregistering): left promiscuous mode [ 1606.389297][T16812] netlink: 'syz.7.25455': attribute type 9 has an invalid length. [ 1606.389318][T16812] netlink: 212332 bytes leftover after parsing attributes in process `syz.7.25455'. [ 1607.271389][T30775] bond1 (unregistering): Released all slaves [ 1607.426572][T30775] bond0 (unregistering): Released all slaves [ 1607.450138][T30775] bond2 (unregistering): Released all slaves [ 1607.473031][T30775] bond3 (unregistering): Released all slaves [ 1607.494651][T30775] bond4 (unregistering): Released all slaves [ 1607.515705][T30775] bond5 (unregistering): Released all slaves [ 1607.538739][T30775] bond6 (unregistering): Released all slaves [ 1607.863891][T30775] m1Ie5nè‹Ò: left promiscuous mode [ 1608.183188][T30775] : left promiscuous mode [ 1608.453788][T30775] tipc: Disabling bearer [ 1608.588894][T30775] tipc: Left network mode [ 1609.742309][ T8110] libceph: connect (1)[c::]:6789 error -101 [ 1609.743419][ T8110] libceph: mon0 (1)[c::]:6789 connect error [ 1609.801981][ T8110] libceph: connect (1)[c::]:6789 error -101 [ 1609.809152][ T8110] libceph: mon0 (1)[c::]:6789 connect error [ 1609.854475][T16926] ceph: No mds server is up or the cluster is laggy [ 1609.881621][T16938] netlink: 'syz.8.25489': attribute type 4 has an invalid length. [ 1610.074310][ T5416] libceph: connect (1)[c::]:6789 error -101 [ 1610.074904][ T5416] libceph: mon0 (1)[c::]:6789 connect error [ 1610.540966][T16968] netlink: 4 bytes leftover after parsing attributes in process `syz.8.25496'. [ 1611.081706][T16968] nbd: socks must be embedded in a SOCK_ITEM attr [ 1611.975089][T17036] ref_ctr_offset mismatch. inode: 0xb4 offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 1612.122857][T17034] netlink: 'syz.4.25513': attribute type 1 has an invalid length. [ 1612.122879][T17034] netlink: 'syz.4.25513': attribute type 2 has an invalid length. [ 1612.920842][T15428] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1613.063846][T15428] usb 6-1: Using ep0 maxpacket: 8 [ 1613.068057][T15428] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1613.069341][T15428] usb 6-1: config 4 has an invalid interface number: 7 but max is 1 [ 1613.069363][T15428] usb 6-1: config 4 has an invalid interface number: 163 but max is 1 [ 1613.069382][T15428] usb 6-1: config 4 has no interface number 0 [ 1613.069396][T15428] usb 6-1: config 4 has no interface number 1 [ 1613.069446][T15428] usb 6-1: config 4 interface 7 has no altsetting 0 [ 1613.071617][T15428] usb 6-1: New USB device found, idVendor=05c6, idProduct=904c, bcdDevice=93.62 [ 1613.071641][T15428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.071660][T15428] usb 6-1: Product: syz [ 1613.071674][T15428] usb 6-1: Manufacturer: syz [ 1613.071688][T15428] usb 6-1: SerialNumber: syz [ 1613.442799][T15428] usb 6-1: bad CDC descriptors [ 1613.462364][T15428] usb 6-1: USB disconnect, device number 32 [ 1614.642455][T17167] KVM: debugfs: duplicate directory 17167-4 [ 1614.880025][T30775] hsr_slave_0: left promiscuous mode [ 1614.916136][T30775] hsr_slave_1: left promiscuous mode [ 1614.951447][T30775] batadv_slave_1: left promiscuous mode [ 1616.989841][T17227] netlink: 61967 bytes leftover after parsing attributes in process `syz.8.25560'. [ 1617.531665][T17258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25569'. [ 1618.413610][T17295] overlayfs: failed to clone upperpath [ 1618.473487][T17295] overlayfs: failed to clone upperpath [ 1618.688958][T30775] IPVS: stop unused estimator thread 0... [ 1619.513335][T17344] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.25594'. [ 1621.089367][T17422] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 1622.074930][ T6142] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1622.220433][ T6142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1622.220466][ T6142] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.220504][ T6142] usb 6-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 1622.220579][ T6142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.270883][ T6142] usb 6-1: config 0 descriptor?? [ 1622.753405][T17476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1622.753928][T17476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1622.796161][ T6142] hid-generic 0003:0925:8066.007A: unbalanced collection at end of report description [ 1622.797055][ T6142] hid-generic 0003:0925:8066.007A: probe with driver hid-generic failed with error -22 [ 1622.996917][ T8110] usb 6-1: USB disconnect, device number 33 [ 1624.244223][T17582] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1624.294940][T17582] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1625.049138][T17621] netlink: 'syz.5.25669': attribute type 5 has an invalid length. [ 1625.254379][T17628] net_ratelimit: 758 callbacks suppressed [ 1625.254398][T17628] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1629.681869][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25729'. [ 1629.681892][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25729'. [ 1629.681918][T17827] netlink: 'syz.5.25729': attribute type 7 has an invalid length. [ 1629.740974][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1629.741100][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.5.25729'. [ 1629.741117][T17827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.25729'. [ 1629.741141][T17827] netlink: 'syz.5.25729': attribute type 7 has an invalid length. [ 1629.806285][T17831] overlayfs: failed to resolve './cgroup': -2 [ 1629.816958][ T4883] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1629.816993][ T4883] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1629.817020][ T4883] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1630.275007][T17848] netlink: 33 bytes leftover after parsing attributes in process `syz.4.25734'. [ 1630.275031][T17848] netlink: 140 bytes leftover after parsing attributes in process `syz.4.25734'. [ 1630.275052][T17848] netlink: 33 bytes leftover after parsing attributes in process `syz.4.25734'. [ 1630.816707][T17869] netlink: 'syz.8.25740': attribute type 4 has an invalid length. [ 1630.817865][T17869] netlink: 'syz.8.25740': attribute type 4 has an invalid length. [ 1630.924446][T17868] netlink: 16 bytes leftover after parsing attributes in process `syz.6.25741'. [ 1631.576385][T17902] overlayfs: failed to clone upperpath [ 1631.793556][T17910] netlink: 'syz.6.25754': attribute type 10 has an invalid length. [ 1632.405564][T17910] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1632.938713][T17955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1634.390977][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25787'. [ 1634.421667][T18028] binder: 18027:18028 ioctl c0306201 2000000003c0 returned -14 [ 1635.022376][T18047] netlink: 20 bytes leftover after parsing attributes in process `syz.8.25794'. [ 1635.022400][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.8.25794'. [ 1636.153739][T18096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.25812'. [ 1637.030314][T18137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25819'. [ 1639.285384][T30349] kworker/1:1 (30349) used greatest stack depth: 15264 bytes left [ 1639.678751][T18259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1639.681585][T18259] bond1: (slave bond0): making interface the new active one [ 1639.682142][T18259] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1640.853491][T18314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.25855'. [ 1643.665108][T18415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.25879'. [ 1643.835811][T18415] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1644.145485][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1644.170664][T18467] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1644.279768][T18473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.25883'. [ 1644.997372][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25894'. [ 1646.518792][T18545] netlink: 76 bytes leftover after parsing attributes in process `syz.8.25911'. [ 1649.082733][T18647] netlink: 36 bytes leftover after parsing attributes in process `syz.7.25927'. [ 1649.333223][T18663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25933'. [ 1649.438038][T18663] bond6: entered promiscuous mode [ 1649.438438][T18663] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1651.049845][T18787] overlayfs: failed to clone upperpath [ 1651.255966][ T37] audit: type=1326 audit(2000002233.787:2600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.6.25964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1651.256128][ T37] audit: type=1326 audit(2000002233.787:2601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.6.25964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1651.257044][ T37] audit: type=1326 audit(2000002233.787:2602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.6.25964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1651.257098][ T37] audit: type=1326 audit(2000002233.787:2604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.6.25964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1651.257147][ T37] audit: type=1326 audit(2000002233.787:2603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.6.25964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1651.347154][ T37] audit: type=1326 audit(2000002233.850:2605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.6.25964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1fd2add04e code=0x7ffc0000 [ 1651.347221][ T37] audit: type=1326 audit(2000002233.850:2606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.6.25964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1fd2add04e code=0x7ffc0000 [ 1651.347708][ T37] audit: type=1326 audit(2000002233.861:2607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.6.25964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1fd2add04e code=0x7ffc0000 [ 1651.347833][ T37] audit: type=1326 audit(2000002233.871:2608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.6.25964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1fd2add04e code=0x7ffc0000 [ 1651.347948][ T37] audit: type=1326 audit(2000002233.871:2609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18792 comm="syz.6.25964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1fd2add04e code=0x7ffc0000 [ 1653.223824][T18853] binder: 18852:18853 ioctl c0306201 2000000003c0 returned -14 [ 1653.933447][T18876] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1653.986657][T18871] kvm: kvm [18869]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0xffffff [ 1654.660939][T18906] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off. [ 1654.718076][T18908] netlink: 20 bytes leftover after parsing attributes in process `syz.8.25992'. [ 1654.722121][T18908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1654.722159][T18908] IPv6: NLM_F_CREATE should be set when creating new route [ 1654.722960][T18908] netlink: 20 bytes leftover after parsing attributes in process `syz.8.25992'. [ 1656.349029][T18966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26012'. [ 1656.565310][T18970] netlink: 'syz.4.26013': attribute type 1 has an invalid length. [ 1656.565331][T18970] netlink: 'syz.4.26013': attribute type 4 has an invalid length. [ 1656.565344][T18970] netlink: 15334 bytes leftover after parsing attributes in process `syz.4.26013'. [ 1657.417678][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26024'. [ 1657.417719][T18998] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26024'. [ 1657.977716][T19007] netlink: 'syz.5.26028': attribute type 12 has an invalid length. [ 1658.640390][T19023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1659.033786][T19023] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1659.077714][T19023] overlayfs: failed to look up (tracing) for ino (-66) [ 1659.139397][T19015] 9p: Bad value for 'rfdno' [ 1660.194894][T19059] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26043'. [ 1660.271973][T19059] vlan3: entered promiscuous mode [ 1660.271992][T19059] gretap0: entered promiscuous mode [ 1660.766680][ T37] kauditd_printk_skb: 127 callbacks suppressed [ 1660.766698][ T37] audit: type=1326 audit(2000002243.771:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19075 comm="syz.5.26048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406e96c819 code=0x7fc00000 [ 1660.799634][ T37] audit: type=1326 audit(2000002243.803:2738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19075 comm="syz.5.26048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f406e96c819 code=0x7fc00000 [ 1660.801500][ T37] audit: type=1326 audit(2000002243.803:2739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19075 comm="syz.5.26048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f406e96c819 code=0x7fc00000 [ 1662.073095][T15428] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1662.217945][T15428] usb 6-1: Using ep0 maxpacket: 16 [ 1662.219890][T15428] usb 6-1: config index 0 descriptor too short (expected 64548, got 36) [ 1662.219915][T15428] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 1662.219934][T15428] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1662.219978][T15428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.220004][T15428] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1662.220042][T15428] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 1662.220063][T15428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.240885][T15428] usb 6-1: config 0 descriptor?? [ 1663.323545][T15428] hid_parser_main: 4007 callbacks suppressed [ 1663.323568][T15428] samsung 0003:0419:0600.007B: unknown main item tag 0x0 [ 1663.323596][T15428] samsung 0003:0419:0600.007B: unknown main item tag 0x0 [ 1663.323620][T15428] samsung 0003:0419:0600.007B: unknown main item tag 0x0 [ 1663.323899][T15428] samsung 0003:0419:0600.007B: unknown main item tag 0x0 [ 1663.323925][T15428] samsung 0003:0419:0600.007B: unknown main item tag 0x0 [ 1663.323949][T15428] samsung 0003:0419:0600.007B: unknown main item tag 0x0 [ 1663.323973][T15428] samsung 0003:0419:0600.007B: unknown main item tag 0x0 [ 1663.323994][T15428] samsung 0003:0419:0600.007B: unknown main item tag 0x0 [ 1663.324027][T15428] samsung 0003:0419:0600.007B: unknown main item tag 0x0 [ 1663.324050][T15428] samsung 0003:0419:0600.007B: unknown main item tag 0x0 [ 1663.334308][T15428] samsung 0003:0419:0600.007B: hidraw0: USB HID v0.0b Device [HID 0419:0600] on usb-dummy_hcd.5-1/input0 [ 1663.524237][ T5417] usb 6-1: USB disconnect, device number 34 [ 1663.956730][T19196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.26082'. [ 1664.064376][T19198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.26082'. [ 1664.068580][T19198] nbd: nbd64 already in use [ 1664.355001][T12966] udevd[12966]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1665.722214][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26094'. [ 1666.960720][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26104'. [ 1667.039813][T19298] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26104'. [ 1667.650677][T19306] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26106'. [ 1668.073346][T19319] overlayfs: maximum fs stacking depth exceeded [ 1668.112439][ T6142] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1668.255474][ T6142] usb 6-1: Using ep0 maxpacket: 32 [ 1668.259137][ T6142] usb 6-1: config 2 has an invalid interface number: 88 but max is 0 [ 1668.259165][ T6142] usb 6-1: config 2 has no interface number 0 [ 1668.259213][ T6142] usb 6-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1668.259242][ T6142] usb 6-1: config 2 interface 88 has no altsetting 0 [ 1668.321697][ T6142] usb 6-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1668.321730][ T6142] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1668.321753][ T6142] usb 6-1: Product: syz [ 1668.321769][ T6142] usb 6-1: Manufacturer: syz [ 1668.321784][ T6142] usb 6-1: SerialNumber: syz [ 1668.444968][T19314] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1668.536421][T19329] netlink: 'syz.7.26111': attribute type 1 has an invalid length. [ 1668.653582][T19314] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1668.740199][T19338] netlink: 'syz.6.26112': attribute type 10 has an invalid length. [ 1668.790495][T19364] netlink: 'syz.6.26112': attribute type 10 has an invalid length. [ 1668.962499][T19329] bond2: entered promiscuous mode [ 1668.962533][T19329] bond2: entered allmulticast mode [ 1668.963059][T19329] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1669.056829][T19333] erspan1: entered allmulticast mode [ 1669.063949][T19333] bond2: (slave erspan1): making interface the new active one [ 1669.063973][T19333] erspan1: entered promiscuous mode [ 1669.156804][T19333] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 1669.519158][ T37] audit: type=1326 audit(2000002252.957:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19376 comm="syz.8.26115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1669.519501][ T37] audit: type=1326 audit(2000002252.957:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19376 comm="syz.8.26115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1669.571231][ T37] audit: type=1326 audit(2000002253.020:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19376 comm="syz.8.26115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1669.572097][ T37] audit: type=1326 audit(2000002253.020:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19376 comm="syz.8.26115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1669.574901][ T37] audit: type=1326 audit(2000002253.020:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19376 comm="syz.8.26115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1669.575050][ T37] audit: type=1326 audit(2000002253.020:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19376 comm="syz.8.26115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1669.577127][ T37] audit: type=1326 audit(2000002253.020:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19376 comm="syz.8.26115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1669.577651][ T37] audit: type=1326 audit(2000002253.020:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19376 comm="syz.8.26115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1669.577785][ T37] audit: type=1326 audit(2000002253.020:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19376 comm="syz.8.26115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1669.578443][ T37] audit: type=1326 audit(2000002253.020:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19376 comm="syz.8.26115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1669.659542][ T6142] asix 6-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1669.659800][ T6142] asix 6-1:2.88: probe with driver asix failed with error -71 [ 1669.785739][ T6142] usb 6-1: USB disconnect, device number 35 [ 1670.038175][T19394] netlink: 12 bytes leftover after parsing attributes in process `syz.8.26119'. [ 1673.387410][T19486] gretap0: entered promiscuous mode [ 1673.951770][ T5417] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 1674.096718][ T5417] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 1674.096748][ T5417] usb 6-1: config 0 has no interface number 0 [ 1674.096795][ T5417] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1674.102622][ T5417] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 1674.102648][ T5417] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.102667][ T5417] usb 6-1: Product: syz [ 1674.102681][ T5417] usb 6-1: Manufacturer: syz [ 1674.102694][ T5417] usb 6-1: SerialNumber: syz [ 1674.195631][ T5417] usb 6-1: config 0 descriptor?? [ 1674.270939][ T5417] kobil_sct 6-1:0.148: KOBIL USB smart card terminal converter detected [ 1674.317093][ T5417] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1674.459226][T19540] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1674.607861][ T5416] usb 6-1: USB disconnect, device number 36 [ 1674.671323][ T5416] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1674.672164][ T5416] kobil_sct 6-1:0.148: device disconnected [ 1674.980792][T19550] netlink: 'syz.6.26168': attribute type 5 has an invalid length. [ 1675.564902][T19584] syz_tun: entered allmulticast mode [ 1675.586408][T19583] syz_tun: left allmulticast mode [ 1676.201917][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26186'. [ 1676.202101][T19612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1676.304716][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 1676.304733][ T37] audit: type=1400 audit(2000002260.085:2773): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%" requested=w pid=19614 comm="syz.5.26187" daddr=fc02::1 dest=20003 [ 1676.356756][T19612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1676.681230][T19593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1676.953477][T19644] fuse: root generation should be zero [ 1677.193023][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26199'. [ 1677.193049][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.7.26199'. [ 1678.106371][T19701] tipc: Failed to remove unknown binding: 66,1,1/0:336796907/336796909 [ 1678.106411][T19701] tipc: Failed to remove unknown binding: 66,1,1/0:336796907/336796909 [ 1678.488467][T19718] netlink: 'syz.6.26218': attribute type 2 has an invalid length. [ 1678.488491][T19718] netlink: 'syz.6.26218': attribute type 2 has an invalid length. [ 1678.757227][T19724] netlink: 4 bytes leftover after parsing attributes in process `syz.8.26221'. [ 1678.818180][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.26219'. [ 1682.541948][T19793] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.321238][T19793] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.760274][T19793] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.148779][T19793] .`: (slave netdevsim0): Releasing backup interface [ 1684.148795][T19793] .`: (slave netdevsim0): the permanent HWaddr of slave - b6:1c:e7:46:35:df - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1684.803428][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1684.825794][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1684.827639][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1684.828633][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1684.856718][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1685.106157][T19888] kvm_intel: kvm [19887]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xc2 [ 1685.937099][T13828] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1685.937148][T13828] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.821873][ T60] Bluetooth: hci4: command tx timeout [ 1686.914457][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26283'. [ 1686.914479][T19944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26283'. [ 1686.952179][T13828] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1686.952212][T13828] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.237789][T13828] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.237829][T13828] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.459947][T19997] bond0: (slave bond_slave_1): Releasing backup interface [ 1688.740386][T13828] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1688.740422][T13828] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1688.805466][ T60] Bluetooth: hci4: command tx timeout [ 1689.095897][T19880] chnl_net:caif_netlink_parms(): no params data found [ 1689.195627][ T37] audit: type=1400 audit(2000002529.621:2774): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%" requested=w pid=20068 comm="syz.4.26307" daddr=fc01::1 dest=20001 [ 1689.743729][T20124] netlink: 'syz.6.26314': attribute type 4 has an invalid length. [ 1689.744150][T13828] bridge_slave_1: left allmulticast mode [ 1689.744173][T13828] bridge_slave_1: left promiscuous mode [ 1689.744389][T13828] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.842530][T13828] bridge_slave_0: left allmulticast mode [ 1689.842558][T13828] bridge_slave_0: left promiscuous mode [ 1689.843049][T13828] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.756710][T13828] bond2 (unregistering): (slave erspan1): Releasing active interface [ 1690.756742][T13828] erspan1 (unregistering): left promiscuous mode [ 1690.780406][ T60] Bluetooth: hci4: command tx timeout [ 1691.023931][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26328'. [ 1691.023949][T20182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26328'. [ 1691.049512][T13828] bond1 (unregistering): (slave bond0): Releasing backup interface [ 1691.117635][T13828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.197241][T13828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.249321][T13828] bond0 (unregistering): Released all slaves [ 1691.276401][T13828] bond1 (unregistering): Released all slaves [ 1691.304763][T13828] bond2 (unregistering): Released all slaves [ 1691.484533][T19880] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.484649][T19880] bridge0: port 1(bridge_slave_0) entered disabled state [ 1691.484882][T19880] bridge_slave_0: entered allmulticast mode [ 1691.487446][T19880] bridge_slave_0: entered promiscuous mode [ 1691.489940][T13828] !: left promiscuous mode [ 1691.663128][T19880] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.663259][T19880] bridge0: port 2(bridge_slave_1) entered disabled state [ 1691.663487][T19880] bridge_slave_1: entered allmulticast mode [ 1691.667904][T19880] bridge_slave_1: entered promiscuous mode [ 1692.251362][T19880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1692.276837][T19880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1692.379662][ T37] audit: type=1326 audit(2000002532.959:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20234 comm="syz.6.26338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1692.379827][ T37] audit: type=1326 audit(2000002532.959:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20234 comm="syz.6.26338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1692.433209][ T37] audit: type=1326 audit(2000002533.012:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20234 comm="syz.6.26338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1692.433339][ T37] audit: type=1326 audit(2000002533.012:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20234 comm="syz.6.26338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1692.433493][ T37] audit: type=1326 audit(2000002533.012:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20234 comm="syz.6.26338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1692.456212][ T37] audit: type=1326 audit(2000002533.033:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20234 comm="syz.6.26338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd2b1c4ab code=0x7ffc0000 [ 1692.460028][ T37] audit: type=1326 audit(2000002533.033:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20234 comm="syz.6.26338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1692.460078][ T37] audit: type=1326 audit(2000002533.033:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20234 comm="syz.6.26338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1692.462692][ T37] audit: type=1326 audit(2000002533.043:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20234 comm="syz.6.26338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1fd2b1c819 code=0x7ffc0000 [ 1692.757795][ T60] Bluetooth: hci4: command tx timeout [ 1693.118806][T20260] netlink: 'syz.4.26345': attribute type 12 has an invalid length. [ 1693.181205][T19880] team0: Port device team_slave_0 added [ 1693.198180][T19880] team0: Port device team_slave_1 added [ 1693.252956][T20271] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 1693.270700][T20271] kvm: pic: level sensitive irq not supported [ 1693.270817][T20271] kvm: pic: level sensitive irq not supported [ 1693.357979][T20287] overlayfs: failed to clone upperpath [ 1693.820697][T19880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1693.820715][T19880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1693.820741][T19880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1694.082874][T19880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1694.082891][T19880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1694.082917][T19880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.136295][T20314] loop2: detected capacity change from 0 to 7 [ 1694.145063][T20314] Dev loop2: unable to read RDB block 7 [ 1694.145229][T20314] loop2: unable to read partition table [ 1694.145432][T20314] loop2: partition table beyond EOD, truncated [ 1694.170608][T20314] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1694.403429][T13828] hsr_slave_0: left promiscuous mode [ 1694.455304][T13828] hsr_slave_1: left promiscuous mode [ 1694.456274][T13828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1694.456300][T13828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1694.504982][T13828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1694.505006][T13828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.637980][T13828] veth1_macvtap: left promiscuous mode [ 1694.638079][T13828] veth0_macvtap: left promiscuous mode [ 1694.638308][T13828] veth1_vlan: left promiscuous mode [ 1694.638377][T13828] veth0_vlan: left promiscuous mode [ 1696.147898][T20381] input: syz1 as /devices/virtual/input/input189 [ 1696.163275][T13828] team0 (unregistering): Port device team_slave_1 removed [ 1696.239180][T13828] team0 (unregistering): Port device team_slave_0 removed [ 1696.806192][T19880] hsr_slave_0: entered promiscuous mode [ 1696.807542][T19880] hsr_slave_1: entered promiscuous mode [ 1696.808438][T19880] debugfs: 'hsr0' already exists in 'hsr' [ 1696.808460][T19880] Cannot create hsr debugfs directory [ 1697.365531][ T5416] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1697.542459][ T5416] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1697.542503][ T5416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1697.542522][ T5416] usb 6-1: Product: syz [ 1697.542535][ T5416] usb 6-1: Manufacturer: syz [ 1697.542549][ T5416] usb 6-1: SerialNumber: syz [ 1697.957863][ T5416] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1697.957919][ T5416] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1698.526976][T19880] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1698.527014][T19880] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1698.559775][ T5416] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1698.559827][ T5416] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1698.560780][ T5416] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1698.698781][ T5416] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 1698.862238][ T5416] usb 6-1: USB disconnect, device number 37 [ 1699.494909][T13828] IPVS: stop unused estimator thread 0... [ 1699.766811][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 1700.037345][T19880] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1700.037381][T19880] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.415478][T19880] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1700.415513][T19880] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.641431][T19880] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1700.641465][T19880] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.936004][T20577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.26395'. [ 1702.041359][T20618] netlink: 24 bytes leftover after parsing attributes in process `syz.5.26401'. [ 1702.408206][T19880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1702.472813][T19880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1702.591932][T19880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1702.629442][T19880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1702.666577][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1703.003928][T19880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1703.057573][T19880] 8021q: adding VLAN 0 to HW filter on device team0 [ 1703.074126][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.074819][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1703.114780][ T2164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.114904][ T2164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1703.974928][T19880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.327983][T19880] veth0_vlan: entered promiscuous mode [ 1704.388528][T19880] veth1_vlan: entered promiscuous mode [ 1704.566021][T19880] veth0_macvtap: entered promiscuous mode [ 1704.589599][T19880] veth1_macvtap: entered promiscuous mode [ 1704.712809][T19880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1704.740616][T19880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1704.775952][ T995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.786338][ T995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.790113][ T995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1704.790150][ T995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1705.001997][T20719] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1705.437055][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.437076][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1705.566472][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1705.566493][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.316027][T20793] netlink: 4 bytes leftover after parsing attributes in process `syz.8.26435'. [ 1707.317162][T20784] syzkaller0: entered promiscuous mode [ 1710.586673][T20903] bond6: entered allmulticast mode [ 1710.605325][T20901] bond6: left allmulticast mode [ 1710.754425][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.8.26468'. [ 1710.805287][T20907] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1710.827933][T20907] netlink: 'syz.8.26468': attribute type 1 has an invalid length. [ 1711.144347][T20952] netlink: 4 bytes leftover after parsing attributes in process `syz.8.26473'. [ 1711.783964][T20973] overlayfs: failed to clone upperpath [ 1712.052245][T20978] netlink: 28 bytes leftover after parsing attributes in process `syz.6.26480'. [ 1712.416819][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1712.950659][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 1712.950673][ T37] audit: type=1326 audit(2000002554.553:2795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21004 comm="syz.4.26490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84f48ec819 code=0x0 [ 1713.637093][T21030] netlink: 'syz.6.26496': attribute type 5 has an invalid length. [ 1713.694628][ T37] audit: type=1400 audit(2000002555.341:2796): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="%" requested=w pid=21032 comm="syz.6.26497" daddr=fc00::1 dest=20003 [ 1713.697167][T21033] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26497'. [ 1714.108255][T21045] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 1714.544175][T21068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26508'. [ 1714.544368][T21068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1715.429387][T21068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1715.657279][T21086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.26514'. [ 1715.679347][T21086] xfrm1: entered promiscuous mode [ 1715.679374][T21086] xfrm1: entered allmulticast mode [ 1715.679993][T21086] netlink: 12 bytes leftover after parsing attributes in process `syz.8.26514'. [ 1717.118742][T21125] netlink: 'syz.5.26522': attribute type 4 has an invalid length. [ 1717.170757][T21128] netlink: 'syz.5.26522': attribute type 4 has an invalid length. [ 1719.531752][ T6142] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1719.655971][T21188] overlayfs: failed to clone upperpath [ 1719.686077][ T6142] usb 6-1: config 0 has no interfaces? [ 1719.686117][ T6142] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1719.686144][ T6142] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1719.760308][ T6142] usb 6-1: config 0 descriptor?? [ 1719.968389][ T2557] usb 6-1: USB disconnect, device number 38 [ 1720.911343][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1720.945990][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1720.974999][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1720.993528][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1720.994327][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1721.163189][T21258] netlink: 76 bytes leftover after parsing attributes in process `syz.4.26551'. [ 1722.390396][T21243] chnl_net:caif_netlink_parms(): no params data found [ 1723.036999][T26196] Bluetooth: hci5: command tx timeout [ 1723.643459][T21243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1723.643588][T21243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.643921][T21243] bridge_slave_0: entered allmulticast mode [ 1723.676357][T21243] bridge_slave_0: entered promiscuous mode [ 1723.695541][T21243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1723.695705][T21243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1723.695907][T21243] bridge_slave_1: entered allmulticast mode [ 1723.698527][T21243] bridge_slave_1: entered promiscuous mode [ 1723.774876][T21243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1723.778505][T21243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1723.836696][T21243] team0: Port device team_slave_0 added [ 1723.847712][T21243] team0: Port device team_slave_1 added [ 1723.892254][T21243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1723.892269][T21243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.892294][T21243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1723.940067][T21243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1723.940082][T21243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1723.940105][T21243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1724.072740][T21243] hsr_slave_0: entered promiscuous mode [ 1724.075382][T21243] hsr_slave_1: entered promiscuous mode [ 1724.076167][T21243] debugfs: 'hsr0' already exists in 'hsr' [ 1724.076191][T21243] Cannot create hsr debugfs directory [ 1724.713577][T21556] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26571'. [ 1724.791799][T21556] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26571'. [ 1724.989216][T21577] netlink: 14 bytes leftover after parsing attributes in process `syz.5.26573'. [ 1724.990103][T26196] Bluetooth: hci5: command tx timeout [ 1726.971326][T26196] Bluetooth: hci5: command tx timeout [ 1727.644050][T21612] 8021q: adding VLAN 0 to HW filter on device .` [ 1727.645006][T21612] team0: left promiscuous mode [ 1727.645932][T21612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1727.752570][T21751] netlink: 'syz.6.26584': attribute type 1 has an invalid length. [ 1727.781690][T21612] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1727.929981][T21751] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1728.060696][T21804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26587'. [ 1728.361383][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26589'. [ 1728.413681][T21832] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26589'. [ 1728.477646][T21739] bond3: (slave ip6erspan0): making interface the new active one [ 1728.484398][T21739] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1728.741210][T21845] loop2: detected capacity change from 0 to 7 [ 1728.742516][T21845] loop2: [ 1728.742545][T21845] loop2: partition table partially beyond EOD, truncated [ 1728.964281][T26196] Bluetooth: hci5: command tx timeout [ 1731.645047][T21243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1731.740508][T21243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1731.784799][T21243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1731.878614][T21243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1733.077733][T21970] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1733.165740][T21243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1733.259430][T21243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1733.265204][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.265470][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1733.323745][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.323999][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1734.104566][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26615'. [ 1734.110232][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26615'. [ 1734.129292][T22000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26615'. [ 1734.482329][T22009] netlink: 'syz.6.26617': attribute type 2 has an invalid length. [ 1734.482351][T22009] tipc: Started in network mode [ 1734.482366][T22009] tipc: Node identity 1340008, cluster identity 4711 [ 1734.482377][T22009] tipc: Node number set to 20185096 [ 1734.548214][T22012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1734.652390][T21243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1735.020722][T21243] veth0_vlan: entered promiscuous mode [ 1735.095705][T21243] veth1_vlan: entered promiscuous mode [ 1735.466907][T22073] netlink: 'syz.4.26628': attribute type 3 has an invalid length. [ 1735.662275][T21243] veth0_macvtap: entered promiscuous mode [ 1735.666770][T21243] veth1_macvtap: entered promiscuous mode [ 1735.863639][T21243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1736.015846][T21243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1736.043669][T30786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.043925][T30786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.044136][T30786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.044367][T30786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1736.883046][ T1300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.883066][ T1300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.138360][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.138381][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.477324][T22130] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1737.753050][T22139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.26643'. [ 1737.851509][T22142] bridge2: port 1(erspan0) entered blocking state [ 1737.851588][T22142] bridge2: port 1(erspan0) entered disabled state [ 1737.851705][T22142] erspan0: entered allmulticast mode [ 1737.853366][T22142] erspan0: entered promiscuous mode [ 1737.854148][T22142] bridge2: port 1(erspan0) entered blocking state [ 1737.854229][T22142] bridge2: port 1(erspan0) entered forwarding state [ 1738.135342][ T37] audit: type=1800 audit(2000068117.979:2797): pid=22153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.26645" name="SYSV798dd826" dev="tmpfs" ino=0 res=0 errno=0 [ 1738.687393][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1740.716561][ T2557] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1740.843588][ T2557] usb 6-1: device descriptor read/64, error -71 [ 1741.097851][ T2557] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1741.231200][ T2557] usb 6-1: device descriptor read/64, error -71 [ 1741.335897][ T2557] usb usb6-port1: attempt power cycle [ 1741.745125][ T2557] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1741.765140][ T2557] usb 6-1: device descriptor read/8, error -71 [ 1742.004070][ T2557] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1742.045801][ T2557] usb 6-1: device descriptor read/8, error -71 [ 1742.150394][ T2557] usb usb6-port1: unable to enumerate USB device [ 1743.019661][T22288] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26675'. [ 1743.501434][ T6142] kernel write not supported for file /snd/seq (pid: 6142 comm: kworker/0:4) [ 1744.141999][T22329] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 1744.212581][ T8110] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1744.356101][ T8110] usb 6-1: Using ep0 maxpacket: 16 [ 1744.358287][ T8110] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1744.358309][ T8110] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1744.363037][ T8110] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1744.363055][ T8110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1744.363068][ T8110] usb 6-1: Product: syz [ 1744.363077][ T8110] usb 6-1: Manufacturer: syz [ 1744.363088][ T8110] usb 6-1: SerialNumber: syz [ 1744.643734][ T8110] usb 6-1: 0:2 : does not exist [ 1744.657747][ T8110] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1744.754271][ T8110] usb 6-1: USB disconnect, device number 43 [ 1744.892087][T12966] udevd[12966]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1745.472679][ T9277] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1745.643313][ T9277] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1745.645740][ T9277] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1745.645767][ T9277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1745.645787][ T9277] usb 2-1: Product: syz [ 1745.645800][ T9277] usb 2-1: Manufacturer: syz [ 1745.645814][ T9277] usb 2-1: SerialNumber: syz [ 1745.818416][T22391] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.26692'. [ 1745.818444][T22391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26692'. [ 1745.990263][ T9277] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 75 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1746.840500][T22402] overlayfs: failed to clone upperpath [ 1747.350542][T22411] /dev/nullb0: Can't lookup blockdev [ 1747.478116][T22415] syz_tun: entered allmulticast mode [ 1747.504830][T22415] syz_tun: left allmulticast mode [ 1751.569809][T22481] overlayfs: failed to clone upperpath [ 1751.643664][T22481] overlayfs: failed to clone lowerpath [ 1752.213976][T22492] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1752.741231][ T2557] usb 2-1: USB disconnect, device number 75 [ 1752.748758][ T2557] usblp0: removed [ 1755.257663][T22624] overlayfs: failed to clone upperpath [ 1755.994942][T22654] kvm: emulating exchange as write [ 1756.209088][T22674] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1756.414340][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26758'. [ 1756.688388][T22689] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1757.205204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1757.285626][T22705] binder: 22704:22705 ioctl c0306201 2000000004c0 returned -14 [ 1758.114246][T22728] sctp: [Deprecated]: syz.6.26771 (pid 22728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1758.114246][T22728] Use struct sctp_sack_info instead [ 1758.114371][T22728] sctp: [Deprecated]: syz.6.26771 (pid 22728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1758.114371][T22728] Use struct sctp_sack_info instead [ 1758.504305][ T37] audit: type=1804 audit(2000068139.374:2798): pid=22732 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.26772" name="/newroot/267/file0" dev="tmpfs" ino=1432 res=1 errno=0 [ 1758.644494][T22742] netlink: 20 bytes leftover after parsing attributes in process `syz.4.26775'. [ 1760.377304][T22767] kAFS: unable to lookup cell '(' [ 1761.759112][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1763.196498][T22812] io-wq is not configured for unbound workers [ 1763.452401][ T37] audit: type=1326 audit(2000068144.571:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22829 comm="syz.5.26803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f406e96c819 code=0x0 [ 1763.580619][T15428] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1763.723144][T15428] usb 2-1: Using ep0 maxpacket: 32 [ 1763.728603][T15428] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1763.728629][T15428] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1763.728648][T15428] usb 2-1: Product: syz [ 1763.728669][T15428] usb 2-1: Manufacturer: syz [ 1763.728683][T15428] usb 2-1: SerialNumber: syz [ 1763.776229][T15428] usb 2-1: config 0 descriptor?? [ 1763.811910][T15428] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1764.423654][T22822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1764.424165][T22822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1765.606246][T15428] gspca_ov534_9: reg_w failed -71 [ 1765.764879][T22884] binder_alloc: 22882: binder_alloc_buf size 4088 failed, no address space [ 1765.765008][T22884] binder_alloc: allocated: 48 (num: 1 largest: 48), free: 4048 (num: 1 largest: 4048) [ 1765.825905][T15428] gspca_ov534_9: Unknown sensor 0000 [ 1765.825971][T15428] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 1765.830916][T15428] usb 2-1: USB disconnect, device number 76 [ 1766.008374][T26196] Bluetooth: hci2: Ignoring connect complete event for invalid link type [ 1766.321507][ T2557] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1766.468962][ T2557] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.475194][ T2557] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1766.475271][ T2557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.475317][ T2557] usb 6-1: Product: syz [ 1766.475330][ T2557] usb 6-1: Manufacturer: syz [ 1766.475343][ T2557] usb 6-1: SerialNumber: syz [ 1766.527039][ T2557] usb 6-1: config 0 descriptor?? [ 1766.553235][ T2557] ims_pcu 6-1:0.0: Zero length descriptor [ 1766.553288][ T2557] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 1766.630448][T22909] input: syz0 as /devices/virtual/input/input190 [ 1766.739166][T23618] usb 6-1: USB disconnect, device number 44 [ 1768.411040][T22949] tipc: Failed to remove unknown binding: 66,0,0/20185096:861972003/861972004 [ 1768.411519][T22949] tipc: Failed to remove unknown binding: 66,0,0/20185096:861972003/861972004 [ 1770.041089][T23006] binder: 23005:23006 ioctl c0306201 2000000003c0 returned -14 [ 1770.683380][T23042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1771.408555][T23618] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1771.556195][T23618] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1771.556224][T23618] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1771.556243][T23618] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1771.556291][T23618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1771.556317][T23618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1771.637128][T23618] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1771.637157][T23618] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1771.637177][T23618] usb 2-1: Product: syz [ 1771.637191][T23618] usb 2-1: Manufacturer: syz [ 1771.744636][T23618] cdc_wdm 2-1:1.0: skipping garbage [ 1771.744666][T23618] cdc_wdm 2-1:1.0: skipping garbage [ 1771.749536][T23618] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1771.749556][T23618] cdc_wdm 2-1:1.0: Unknown control protocol [ 1772.207254][T23087] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (das16m1) [ 1772.667163][ T2557] usb 2-1: USB disconnect, device number 77 [ 1773.608045][ T37] audit: type=1326 audit(2000068155.226:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23110 comm="syz.1.26882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c448c819 code=0x7fc00000 [ 1773.608103][ T37] audit: type=1326 audit(2000068155.226:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23110 comm="syz.1.26882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f16c448c819 code=0x7fc00000 [ 1775.873380][T23158] bridge0: port 3(syz_tun) entered blocking state [ 1775.873610][T23158] bridge0: port 3(syz_tun) entered disabled state [ 1775.897468][T23158] syz_tun: entered allmulticast mode [ 1775.900831][T23158] syz_tun: entered promiscuous mode [ 1775.949812][T23158] bridge0: port 3(syz_tun) entered blocking state [ 1775.950243][T23158] bridge0: port 3(syz_tun) entered forwarding state [ 1777.544701][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.8.26904'. [ 1777.575375][T23179] xfrm0: entered promiscuous mode [ 1777.575400][T23179] xfrm0: entered allmulticast mode [ 1777.740271][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1777.777091][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1777.792815][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1777.798492][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1777.826342][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1777.990438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1778.365647][T23219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26907'. [ 1779.051320][T23176] chnl_net:caif_netlink_parms(): no params data found [ 1779.901265][ T60] Bluetooth: hci2: command tx timeout [ 1780.105931][T23176] bridge0: port 1(bridge_slave_0) entered blocking state [ 1780.116000][T23176] bridge0: port 1(bridge_slave_0) entered disabled state [ 1780.116215][T23176] bridge_slave_0: entered allmulticast mode [ 1780.118604][T23176] bridge_slave_0: entered promiscuous mode [ 1780.155535][T23176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1780.155664][T23176] bridge0: port 2(bridge_slave_1) entered disabled state [ 1780.155872][T23176] bridge_slave_1: entered allmulticast mode [ 1780.159386][T23176] bridge_slave_1: entered promiscuous mode [ 1780.221977][T23360] overlayfs: failed to clone lowerpath [ 1780.253089][T23360] overlayfs: failed to clone upperpath [ 1781.613677][T23176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1781.627445][T23176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1781.838918][ T60] Bluetooth: hci2: command tx timeout [ 1781.865764][T23176] team0: Port device team_slave_0 added [ 1781.879154][T23176] team0: Port device team_slave_1 added [ 1782.071646][T23176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1782.071664][T23176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.071689][T23176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1782.148253][T23176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1782.148270][T23176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1782.148296][T23176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1783.419633][T23176] hsr_slave_0: entered promiscuous mode [ 1783.451774][T23176] hsr_slave_1: entered promiscuous mode [ 1783.452681][T23176] debugfs: 'hsr0' already exists in 'hsr' [ 1783.452705][T23176] Cannot create hsr debugfs directory [ 1783.820656][ T60] Bluetooth: hci2: command tx timeout [ 1786.858800][ T60] Bluetooth: hci2: command tx timeout [ 1788.616720][T23625] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1788.616877][T23625] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1788.616939][T23625] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1788.812927][T23625] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1788.813010][T23625] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1788.972273][T23625] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1789.259848][T23649] netlink: 'syz.1.26958': attribute type 4 has an invalid length. [ 1789.294575][T23625] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1789.294731][T23625] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1789.354836][T23625] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1789.826368][T23625] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1789.826424][T23625] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1789.986564][T23625] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1790.525830][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 1791.291410][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 1791.291617][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 1791.659076][T23689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26965'. [ 1791.778949][T26196] Bluetooth: hci2: command 0x0c1a tx timeout [ 1792.507804][T26196] Bluetooth: hci1: command 0x0406 tx timeout [ 1792.861783][T23698] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1793.271781][T26196] Bluetooth: hci4: command 0x0c1a tx timeout [ 1793.271816][T26196] Bluetooth: hci5: command 0x0c1a tx timeout [ 1793.385445][ T9277] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1793.560495][ T9277] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1793.560525][ T9277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.560544][ T9277] usb 2-1: Product: syz [ 1793.560558][ T9277] usb 2-1: Manufacturer: syz [ 1793.560571][ T9277] usb 2-1: SerialNumber: syz [ 1793.735967][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 1794.087149][ T9277] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1794.087214][ T9277] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1794.267601][ T37] audit: type=1326 audit(2000068432.915:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23758 comm="syz.4.26975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f48ec819 code=0x7ffc0000 [ 1794.267710][ T37] audit: type=1326 audit(2000068432.915:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23758 comm="syz.4.26975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f48ec819 code=0x7ffc0000 [ 1794.270573][ T37] audit: type=1326 audit(2000068432.926:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23758 comm="syz.4.26975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f84f48ec819 code=0x7ffc0000 [ 1794.275492][ T37] audit: type=1326 audit(2000068432.926:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23758 comm="syz.4.26975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f48ec819 code=0x7ffc0000 [ 1794.319386][ T37] audit: type=1326 audit(2000068432.968:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23758 comm="syz.4.26975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f48ec819 code=0x7ffc0000 [ 1795.347482][ T60] Bluetooth: hci5: command 0x0c1a tx timeout [ 1795.347510][ T60] Bluetooth: hci4: command 0x0c1a tx timeout [ 1795.507574][T23176] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1795.569974][T23176] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1795.618478][ T9277] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1795.645364][T23176] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1795.708635][T23774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26979'. [ 1795.708662][T23774] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1795.711841][T23176] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1795.719451][T26196] Bluetooth: hci2: command 0x0c1a tx timeout [ 1795.811178][ T9277] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO [ 1795.811625][ T9277] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1795.811673][ T9277] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1795.812403][ T9277] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1795.914308][ T9277] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1795.999936][ T9277] usb 2-1: USB disconnect, device number 78 [ 1796.196275][T23176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1796.229052][T23176] 8021q: adding VLAN 0 to HW filter on device team0 [ 1796.247483][T13828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.249319][T13828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1796.277485][T23806] netlink: 'syz.8.26985': attribute type 1 has an invalid length. [ 1796.297389][T13828] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.301911][T13828] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1796.449266][T23810] gretap3: entered allmulticast mode [ 1796.499192][T23810] bond4: (slave gretap3): making interface the new active one [ 1796.502259][T23810] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 1796.681337][T23848] netlink: 'syz.1.26986': attribute type 4 has an invalid length. [ 1796.713101][T23848] netlink: 'syz.1.26986': attribute type 4 has an invalid length. [ 1799.411254][T23176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1799.911484][T23176] veth0_vlan: entered promiscuous mode [ 1800.035219][T23176] veth1_vlan: entered promiscuous mode [ 1800.295849][T23176] veth0_macvtap: entered promiscuous mode [ 1800.398026][T23176] veth1_macvtap: entered promiscuous mode [ 1800.485890][T23176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1800.516422][T23176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1800.594229][ T3508] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.611675][ T3508] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.623842][ T3508] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.626774][ T3508] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.603329][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.603350][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.657245][ T810] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1803.352624][T23929] netlink: 'syz.4.27002': attribute type 1 has an invalid length. [ 1803.403418][T23930] netlink: 'syz.4.27002': attribute type 1 has an invalid length. [ 1803.552677][ T810] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1803.552708][ T810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.552727][ T810] usb 2-1: Product: syz [ 1803.552741][ T810] usb 2-1: Manufacturer: syz [ 1803.552754][ T810] usb 2-1: SerialNumber: syz [ 1803.627810][ T810] usb 2-1: config 0 descriptor?? [ 1803.663565][ T810] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1803.690713][T23929] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1804.125633][T23975] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1804.186424][T30786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.186444][T30786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1804.514938][T23986] overlayfs: failed to get inode (-116) [ 1804.533066][T23986] overlayfs: failed to get inode (-116) [ 1806.426429][ T810] gspca_stk1135: reg_w 0xf err -71 [ 1806.427481][ T810] gspca_stk1135: serial bus timeout: status=0x00 [ 1806.427492][ T810] gspca_stk1135: Sensor write failed [ 1806.427527][ T810] gspca_stk1135: serial bus timeout: status=0x00 [ 1806.427543][ T810] gspca_stk1135: Sensor write failed [ 1806.427575][ T810] gspca_stk1135: serial bus timeout: status=0x00 [ 1806.427584][ T810] gspca_stk1135: Sensor read failed [ 1806.427618][ T810] gspca_stk1135: serial bus timeout: status=0x00 [ 1806.427628][ T810] gspca_stk1135: Sensor read failed [ 1806.427636][ T810] gspca_stk1135: Detected sensor type unknown (0x0) [ 1806.427671][ T810] gspca_stk1135: serial bus timeout: status=0x00 [ 1806.427680][ T810] gspca_stk1135: Sensor read failed [ 1806.427712][ T810] gspca_stk1135: serial bus timeout: status=0x00 [ 1806.427722][ T810] gspca_stk1135: Sensor read failed [ 1806.427754][ T810] gspca_stk1135: serial bus timeout: status=0x00 [ 1806.427763][ T810] gspca_stk1135: Sensor write failed [ 1806.427796][ T810] gspca_stk1135: serial bus timeout: status=0x00 [ 1806.427805][ T810] gspca_stk1135: Sensor write failed [ 1806.428206][ T810] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1806.433387][ T810] usb 2-1: USB disconnect, device number 79 [ 1809.455559][T24052] bond6: entered allmulticast mode [ 1809.457585][T24051] bond6: left allmulticast mode [ 1813.164539][T24128] netlink: 'syz.1.27038': attribute type 1 has an invalid length. [ 1813.284393][T24128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.27038'. [ 1813.377725][T24132] bond1: (slave geneve2): making interface the new active one [ 1813.381544][T24132] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1813.412735][T24128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1813.413483][T24042] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1813.413864][T24042] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1813.413901][T24042] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1813.413935][T24042] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1817.019725][ T37] audit: type=1326 audit(2000068456.808:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24217 comm="syz.8.27052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1817.024663][ T37] audit: type=1326 audit(2000068456.808:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24217 comm="syz.8.27052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0279c819 code=0x7ffc0000 [ 1817.025154][ T37] audit: type=1326 audit(2000068456.808:2809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24217 comm="syz.8.27052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0279c4ab code=0x7ffc0000 [ 1817.025339][ T37] audit: type=1326 audit(2000068456.808:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24217 comm="syz.8.27052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0279c4ab code=0x7ffc0000 [ 1817.025749][ T37] audit: type=1326 audit(2000068456.808:2811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24217 comm="syz.8.27052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0279c4ab code=0x7ffc0000 [ 1817.026098][ T37] audit: type=1326 audit(2000068456.808:2812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24217 comm="syz.8.27052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0279c4ab code=0x7ffc0000 [ 1817.183734][ T37] audit: type=1326 audit(2000068456.808:2813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24217 comm="syz.8.27052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0279c4ab code=0x7ffc0000 [ 1817.183780][ T37] audit: type=1326 audit(2000068456.966:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24217 comm="syz.8.27052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0279c4ab code=0x7ffc0000 [ 1817.183811][ T37] audit: type=1326 audit(2000068456.966:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24217 comm="syz.8.27052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0279c4ab code=0x7ffc0000 [ 1817.183844][ T37] audit: type=1326 audit(2000068456.966:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24217 comm="syz.8.27052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e0279c4ab code=0x7ffc0000 [ 1819.719132][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1820.541382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1820.560441][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1820.569958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1821.360592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1821.370109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1821.379631][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1821.389159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 1821.935206][T24276] overlayfs: failed to clone upperpath [ 1824.178892][T24341] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27085'. [ 1826.841936][ T810] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1826.980883][ T810] usb 2-1: Using ep0 maxpacket: 32 [ 1826.982686][ T810] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 38, changing to 9 [ 1826.982716][ T810] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x2 has an invalid bInterval 17, changing to 8 [ 1826.982741][ T810] usb 2-1: config 0 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 1826.982765][ T810] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1826.982803][ T810] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1826.982824][ T810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.096615][ T810] usb 2-1: config 0 descriptor?? [ 1827.608457][ T810] usbhid 2-1:0.0: can't add hid device: -71 [ 1827.608618][ T810] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1827.652428][ T810] usb 2-1: USB disconnect, device number 80 [ 1832.811387][T24472] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1839.061444][T24525] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1847.833758][T24637] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 1849.162557][ T38] INFO: task syz.3.26431:20758 blocked for more than 143 seconds. [ 1849.162649][ T38] Tainted: G L syzkaller #0 [ 1849.162691][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1849.162748][ T38] task:syz.3.26431 state:D stack:23144 pid:20758 tgid:20758 ppid:19880 task_flags:0x400040 flags:0x00080003 [ 1849.163249][ T38] Call Trace: [ 1849.163286][ T38] [ 1849.163378][ T38] __schedule+0x1553/0x5240 [ 1849.163522][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1849.163632][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1849.163782][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1849.163897][ T38] ? __pfx___schedule+0x10/0x10 [ 1849.164057][ T38] ? schedule+0x90/0x360 [ 1849.164159][ T38] schedule+0x164/0x360 [ 1849.164413][ T38] __fuse_simple_request+0x121f/0x1c60 [ 1849.164588][ T38] ? __pfx___fuse_simple_request+0x10/0x10 [ 1849.164664][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1849.164834][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1849.164984][ T38] fuse_flush+0x673/0x8b0 [ 1849.165036][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1849.165101][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1849.165151][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1849.165719][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1849.165826][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1849.165859][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1849.165934][ T38] ? __pfx_fuse_flush+0x10/0x10 [ 1849.165985][ T38] filp_flush+0xc0/0x190 [ 1849.166058][ T38] filp_close+0x1d/0x40 [ 1849.166127][ T38] __se_sys_close_range+0x3d7/0x900 [ 1849.166295][ T38] ? __pfx___se_sys_close_range+0x10/0x10 [ 1849.166585][ T38] do_syscall_64+0x14d/0xf80 [ 1849.166633][ T38] ? trace_irq_disable+0x3b/0x150 [ 1849.166684][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.166730][ T38] ? clear_bhb_loop+0x40/0x90 [ 1849.166825][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.166872][ T38] RIP: 0033:0x7f2f84a9c819 [ 1849.166916][ T38] RSP: 002b:00007ffcec529d08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1849.166986][ T38] RAX: ffffffffffffffda RBX: 00007f2f84d17da0 RCX: 00007f2f84a9c819 [ 1849.167025][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1849.167071][ T38] RBP: 00007f2f84d17da0 R08: 0000000000000006 R09: 0000000000000000 [ 1849.167118][ T38] R10: 00007f2f84d17cb0 R11: 0000000000000246 R12: 00000000001a771a [ 1849.167166][ T38] R13: 00007f2f84d15fac R14: 00000000001a74ae R15: 00007ffcec529e10 [ 1849.167344][ T38] [ 1849.167835][ T38] [ 1849.167835][ T38] Showing all locks held in the system: [ 1849.167913][ T38] 1 lock held by khungtaskd/38: [ 1849.167946][ T38] #0: ffffffff8ddcb9c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1849.168182][ T38] 3 locks held by kworker/u8:7/170: [ 1849.168432][ T38] 1 lock held by udevd/5164: [ 1849.168465][ T38] #0: ffff888038796a08 (&ep->lock){+.+.}-{3:3}, at: do_epoll_wait+0x851/0xbd0 [ 1849.176279][ T38] 2 locks held by getty/5551: [ 1849.176329][ T38] #0: ffff88803654f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1849.176560][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1849.176777][ T38] 2 locks held by syz-executor/5782: [ 1849.176843][ T38] 3 locks held by kworker/1:6/8110: [ 1849.177154][ T38] 7 locks held by syz-executor/21243: [ 1849.177438][ T38] 9 locks held by syz-executor/23176: [ 1849.177549][ T38] 4 locks held by kworker/u8:18/24041: [ 1849.177607][ T38] 2 locks held by kworker/u8:19/24042: [ 1849.177653][ T38] 1 lock held by syz.4.27141/24592: [ 1849.177693][ T38] 2 locks held by syz.6.27143/24604: [ 1849.177733][ T38] 5 locks held by syz.8.27153/24641: [ 1849.177774][ T38] [ 1849.177816][ T38] ============================================= [ 1849.177816][ T38] [ 1849.177888][ T38] NMI backtrace for cpu 1 [ 1849.177910][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1849.177940][ T38] Tainted: [L]=SOFTLOCKUP [ 1849.177949][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1849.177963][ T38] Call Trace: [ 1849.177972][ T38] [ 1849.177982][ T38] dump_stack_lvl+0xe8/0x150 [ 1849.178019][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1849.178053][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1849.178087][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1849.178122][ T38] sys_info+0x135/0x170 [ 1849.178150][ T38] watchdog+0xfd9/0x1030 [ 1849.178185][ T38] ? watchdog+0x21a/0x1030 [ 1849.178222][ T38] kthread+0x388/0x470 [ 1849.178247][ T38] ? __pfx_watchdog+0x10/0x10 [ 1849.178274][ T38] ? __pfx_kthread+0x10/0x10 [ 1849.178299][ T38] ret_from_fork+0x51e/0xb90 [ 1849.178336][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1849.178372][ T38] ? __switch_to+0xc7d/0x1450 [ 1849.178410][ T38] ? __pfx_kthread+0x10/0x10 [ 1849.178437][ T38] ret_from_fork_asm+0x1a/0x30 [ 1849.178483][ T38] [ 1849.178510][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1849.178537][ C0] NMI backtrace for cpu 0 [ 1849.178554][ C0] CPU: 0 UID: 0 PID: 24641 Comm: syz.8.27153 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1849.178582][ C0] Tainted: [L]=SOFTLOCKUP [ 1849.178589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1849.178601][ C0] RIP: 0010:rcu_is_watching+0x5a/0xb0 [ 1849.178625][ C0] Code: f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 cc 27 81 00 48 c7 c3 18 ee 4f 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 <84> c0 75 34 8b 03 65 ff 0d 89 2d a5 10 74 11 83 e0 04 c1 e8 02 5b [ 1849.178642][ C0] RSP: 0018:ffffc900110df5c0 EFLAGS: 00000a06 [ 1849.178660][ C0] RAX: 0000000000000000 RBX: ffff8880b8833e18 RCX: 0000000080000001 [ 1849.178674][ C0] RDX: 0000000011cc2284 RSI: ffffffff8ba679e0 RDI: ffffffff8ba679a0 [ 1849.178689][ C0] RBP: ffffc900110df6a0 R08: ffffffff8b2671d0 R09: ffffffff8ddcb9c0 [ 1849.178715][ C0] R10: dffffc0000000000 R11: fffffbfff1ed4e37 R12: ffff88802785bd00 [ 1849.178730][ C0] R13: dffffc0000000000 R14: ffffffff8d807790 R15: dffffc0000000000 [ 1849.178756][ C0] FS: 00007f5e009cd6c0(0000) GS:ffff888126335000(0000) knlGS:0000000000000000 [ 1849.178771][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1849.178783][ C0] CR2: 000055555ffe4a28 CR3: 000000007b870000 CR4: 00000000003526f0 [ 1849.178799][ C0] Call Trace: [ 1849.178806][ C0] [ 1849.178814][ C0] rt_spin_lock+0x20e/0x400 [ 1849.178841][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1849.178868][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1849.178890][ C0] __skb_try_recv_datagram+0x89/0x1b0 [ 1849.178914][ C0] __unix_dgram_recvmsg+0x2e3/0xd60 [ 1849.178943][ C0] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1849.178969][ C0] ? trace_sched_exit_tp+0x3a/0x150 [ 1849.178989][ C0] ? __schedule+0x1569/0x5240 [ 1849.179010][ C0] ? unix_dgram_recvmsg+0xb1/0xd0 [ 1849.179027][ C0] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1849.179044][ C0] sock_recvmsg_nosec+0x10c/0x140 [ 1849.179071][ C0] ____sys_recvmsg+0x3ef/0x4b0 [ 1849.179095][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1849.179124][ C0] ? import_iovec+0x73/0xa0 [ 1849.179142][ C0] ___sys_recvmsg+0x215/0x590 [ 1849.179187][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1849.179205][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 1849.179228][ C0] ? irqentry_exit+0x59e/0x620 [ 1849.179262][ C0] do_recvmmsg+0x33a/0x800 [ 1849.179285][ C0] ? file_init_path+0x3b/0x5b0 [ 1849.179307][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 1849.179326][ C0] ? __asan_memcpy+0x40/0x70 [ 1849.179354][ C0] ? __pfx_do_futex+0x10/0x10 [ 1849.179379][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 1849.179402][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1849.179430][ C0] do_syscall_64+0x14d/0xf80 [ 1849.179448][ C0] ? trace_irq_disable+0x3b/0x150 [ 1849.179469][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.179486][ C0] ? clear_bhb_loop+0x40/0x90 [ 1849.179506][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.179523][ C0] RIP: 0033:0x7f5e0279c819 [ 1849.179538][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.179552][ C0] RSP: 002b:00007f5e009cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1849.179569][ C0] RAX: ffffffffffffffda RBX: 00007f5e02a16090 RCX: 00007f5e0279c819 [ 1849.179582][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1849.179593][ C0] RBP: 00007f5e02832c91 R08: 0000000000000000 R09: 0000000000000000 [ 1849.179604][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1849.179615][ C0] R13: 00007f5e02a16128 R14: 00007f5e02a16090 R15: 00007fff40a87b08 [ 1849.179648][ C0] [ 1849.180717][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1849.180738][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1849.180765][ T38] Tainted: [L]=SOFTLOCKUP [ 1849.180774][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1849.180787][ T38] Call Trace: [ 1849.180795][ T38] [ 1849.180804][ T38] vpanic+0x56c/0xa60 [ 1849.180839][ T38] ? __pfx_vpanic+0x10/0x10 [ 1849.180871][ T38] ? irqentry_exit+0x59e/0x620 [ 1849.180899][ T38] panic+0xc5/0xd0 [ 1849.180929][ T38] ? __pfx_panic+0x10/0x10 [ 1849.180976][ T38] watchdog+0x1023/0x1030 [ 1849.181006][ T38] ? watchdog+0x21a/0x1030 [ 1849.181046][ T38] kthread+0x388/0x470 [ 1849.181087][ T38] ? __pfx_watchdog+0x10/0x10 [ 1849.181129][ T38] ? __pfx_kthread+0x10/0x10 [ 1849.181155][ T38] ret_from_fork+0x51e/0xb90 [ 1849.181190][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1849.181220][ T38] ? __switch_to+0xc7d/0x1450 [ 1849.181252][ T38] ? __pfx_kthread+0x10/0x10 [ 1849.181278][ T38] ret_from_fork_asm+0x1a/0x30 [ 1849.181318][ T38] [ 1849.182001][ T38] Kernel Offset: disabled