last executing test programs: 17m49.881928353s ago: executing program 32 (id=431): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = io_uring_setup(0xfc6, &(0x7f0000000180)={0x0, 0x0, 0x100, 0xfffffffc}) close_range(r0, 0xffffffffffffffff, 0x0) 17m8.509483166s ago: executing program 33 (id=777): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 17m1.968825876s ago: executing program 34 (id=837): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2bb24ef6697070000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f00000063c0)=""/4056, 0xfd8}, {0x0}], 0x3}, 0x0) 15m16.032342259s ago: executing program 3 (id=1672): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 15m15.961195118s ago: executing program 3 (id=1673): quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 15m15.764969795s ago: executing program 3 (id=1677): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) 15m15.639524908s ago: executing program 3 (id=1679): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r0, &(0x7f00000045c0)={0x2020}, 0x2020) 15m15.352826476s ago: executing program 35 (id=1678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000070000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 15m15.33668544s ago: executing program 3 (id=1683): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x408007}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 15m14.124350846s ago: executing program 3 (id=1691): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) unshare(0x20000400) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 15m14.000579444s ago: executing program 36 (id=1691): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) unshare(0x20000400) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 11m17.994823393s ago: executing program 1 (id=2498): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1451c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r4, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 11m10.376320343s ago: executing program 1 (id=2512): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) openat$6lowpan_enable(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$proc_mixer(0xffffffffffffffff, 0x0, 0x86) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) 11m8.98790535s ago: executing program 1 (id=2513): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) memfd_create(0x0, 0x0) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f0000000580)=[{}], 0x1, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 11m7.600903742s ago: executing program 1 (id=2516): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x7, &(0x7f0000000140)=[{0x3, 0xb, 0xa, 0x9}, {0x4, 0x4, 0x83, 0x7}, {0x0, 0x9, 0xab, 0x7}, {0x7, 0x1, 0xff, 0xb}, {0x8faf, 0x9, 0x8, 0x400}, {0x100, 0x3, 0x5, 0x5}, {0x5, 0x40, 0x2e, 0x1}]}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xc, 0x4) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0xf}, 0x20, 0x20000000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f00000002c0)=ANY=[], 0xfe37, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000700)=[{0x0}], 0x1) keyctl$assume_authority(0x10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f0000000100)=0x8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 11m4.574728742s ago: executing program 1 (id=2522): socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x8, 0x39) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x97f, @loopback}, 0x1c) r0 = getpgrp(0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) kcmp(r0, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) 11m0.902320536s ago: executing program 1 (id=2526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x6, {0x4, 0x5, 0x3}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f", 0x7e, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) getsockname(r0, 0x0, &(0x7f0000000040)) socketpair(0x2b, 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 10m45.745627028s ago: executing program 37 (id=2526): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x6, {0x4, 0x5, 0x3}}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f", 0x7e, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) getsockname(r0, 0x0, &(0x7f0000000040)) socketpair(0x2b, 0x1, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 9m24.148973247s ago: executing program 2 (id=2673): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000240)={"6d7ab6d2b02c779e26e4e086c9f8d7e858124aaed223cd5307433f1ef91ef034", r3}) memfd_secret(0x0) pipe2$9p(&(0x7f0000000140), 0x80000) r6 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x2b, @empty, @empty, 0x0, 0x1, 0x8c31162}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[@ANYRES64=r9], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r10, 0x0, r0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9m21.363227801s ago: executing program 2 (id=2679): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x248b42, 0x0) r1 = signalfd(r0, &(0x7f0000000080)={[0x6]}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x7f, 0x2}, &(0x7f00000001c0)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2020, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f0000000300)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)={0x140, 0x1c8, 0x1}, 0x18) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60000000000000000000000000bbfe8a00000000000000000000000000aa00004001", @ANYRES32=0x41424344], 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x702, 0xe, 0x0, &(0x7f0000000580)="e460334470d8d400eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x406f413, 0x0) ioctl$TIOCPKT(r0, 0x5420, 0x0) 9m18.745201169s ago: executing program 2 (id=2681): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRESDEC], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0xc0cc810) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000840}, 0x40) 9m16.013800346s ago: executing program 2 (id=2684): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 9m14.444161728s ago: executing program 2 (id=2687): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x5, &(0x7f0000000040)=[{0xe3, 0x6, 0x3, 0x8}, {0x3, 0x1f, 0x5, 0x3}, {0x7, 0xff, 0x86, 0x10001}, {0x1, 0x5, 0x7, 0x1}, {0x8, 0x6, 0x8, 0x1}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, r5, 0x1, 0x80000, 0x1, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x54}}, 0x0) 9m11.152296088s ago: executing program 2 (id=2690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000001c0)=0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0x25}, 0x20) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b5000000000800000000000000000101"], 0xb8}}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r5, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 8m55.387607456s ago: executing program 38 (id=2690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f00000001c0)=0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback, 0xffffffffffffffff, 0x25}, 0x20) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000fffffffffeffffff0000800000200000fcffffffffffffff0000000000000000000a000000000000040000000000000002e3b5000000000800000000000000000101"], 0xb8}}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet6(r5, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) 8m35.951324837s ago: executing program 0 (id=2733): r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x80480, 0xcd) getdents64(r4, &(0x7f0000000580)=""/166, 0xfe) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) close_range(r0, 0xffffffffffffffff, 0x0) 8m31.609443087s ago: executing program 0 (id=2739): syz_open_dev$vcsu(&(0x7f0000000100), 0x101, 0x204c1) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d40)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYRES32=r4], 0x28}}, 0x802) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc9, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m26.631404345s ago: executing program 0 (id=2747): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1ab341, 0x114) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4b2dfe21770f7447, 0x8031, 0xffffffffffffffff, 0x7b258000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000080)='./file1\x00', 0x182) ioctl$TIOCVHANGUP(r0, 0x5437, 0x8000000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 8m23.385177231s ago: executing program 0 (id=2753): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xc, 0x3, 0x7, 0xc1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r4}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r5, 0x0, 0xaf2, 0x0) 8m21.471612586s ago: executing program 0 (id=2756): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="190026bd7000ffdbdf25250000000c002d000201aaaaaaaaaaaa05002e00bd00000005002b0003000000060006000200000008000200", @ANYRES32=r5, @ANYBLOB="060004000000000005002a"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x44004094) 8m18.720818277s ago: executing program 0 (id=2758): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) request_key(0x0, &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='%#\xbb\x00', 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c050}, 0x20000044) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 8m2.557152268s ago: executing program 39 (id=2758): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) request_key(0x0, &(0x7f0000000480)={'syz', 0x3}, &(0x7f0000000500)='%#\xbb\x00', 0xfffffffffffffffb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c050}, 0x20000044) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x0) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 7m47.904622548s ago: executing program 9 (id=2795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x800400, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r3, 0xee01) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x0, 0x0, 0x0) 7m46.648946729s ago: executing program 9 (id=2797): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() mount(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000180)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r5, 0xd48a, 0x0) 7m44.803765377s ago: executing program 9 (id=2798): r0 = fsopen(&(0x7f00000001c0)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f70000"], 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) readv(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 7m43.543001564s ago: executing program 9 (id=2800): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xc, 0x3, 0x7, 0xc1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080), 0x1c) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 7m41.14723951s ago: executing program 9 (id=2802): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x240040c0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 7m39.776956774s ago: executing program 9 (id=2803): socket$nl_generic(0x10, 0x3, 0x10) msgget$private(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 7m24.742645661s ago: executing program 40 (id=2803): socket$nl_generic(0x10, 0x3, 0x10) msgget$private(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 12.855777147s ago: executing program 8 (id=4605): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, &(0x7f0000001100)) 12.675585857s ago: executing program 8 (id=4608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e22, @empty}}, [0x4, 0x0, 0xffffffffffff0000, 0x2, 0x9, 0x100000000, 0xef, 0x9, 0x8, 0x1ff, 0x10000, 0x2, 0x9, 0x7, 0x6]}, &(0x7f0000000240)=0x100) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 10.273606239s ago: executing program 8 (id=4614): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) 8.119997942s ago: executing program 5 (id=4633): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, &(0x7f0000000380)={"b8e50a31a002b94fcd8fc4db3056309d", 0x0, 0x0, {0x7, 0x100}, {0x0, 0x5}, 0x51, [0x7, 0x3, 0xe, 0x2, 0x9, 0xab0, 0xd8e, 0x7fc0000, 0x5, 0x0, 0x6, 0x3, 0x5, 0x49, 0xfffffffffffffffe, 0xc]}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 6.120358363s ago: executing program 5 (id=4637): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d2, 0x0) 6.036903545s ago: executing program 5 (id=4638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r3 = fsmount(r2, 0x0, 0x80) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='net/softnet_stat\x00') preadv(r6, &(0x7f00000008c0)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1ef, 0x0) statx(r6, &(0x7f0000000040)='./file0\x00', 0x2000, 0x7ff, &(0x7f0000000440)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_emit_ethernet(0xae, 0x0, 0x0) 2.286562854s ago: executing program 6 (id=4670): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2.091502567s ago: executing program 6 (id=4672): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xe000003, 0x0, 0x0, 0x1, 0x6}) 1.905425235s ago: executing program 6 (id=4676): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80000}]}}) 1.80745295s ago: executing program 7 (id=4678): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000080), 0x100000) 1.806405375s ago: executing program 5 (id=4679): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_int(r0, 0x1, 0x10, 0x0, &(0x7f00000002c0)) 1.750290535s ago: executing program 8 (id=4680): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x8, 0x3a, '\x00', 0x3a, '^:/)+\'', 0x3a, './file0'}, 0x2e) 1.714821342s ago: executing program 4 (id=4681): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) 1.603660936s ago: executing program 7 (id=4682): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) 1.600218788s ago: executing program 4 (id=4683): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x0) lseek(r0, 0xffffffffffffffff, 0x3) 1.583193692s ago: executing program 5 (id=4684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'dummy0\x00', &(0x7f0000000540)=@ethtool_rxnfc={0x2e, 0x3, 0xf, {0x9, @usr_ip6_spec={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, 0xe, 0x1, 0x8}, {0x0, @broadcast, 0x4, 0x4, [0x18e, 0x5]}, @tcp_ip6_spec={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, @dev={0xfe, 0x80, '\x00', 0x19}, 0x4e21, 0x4e21, 0xed}, {0x0, @multicast, 0x5, 0x5, [0xfffffd96, 0xfffffffe]}, 0x2, 0xffff0000}}}) 1.577327224s ago: executing program 8 (id=4685): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x11, 0x0, 0x0) 1.439545493s ago: executing program 6 (id=4686): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000001300)={{0x3, 0x2, 0x1, 0x1, 0xfffffffc}, 0x4000000000000, 0x80000000, 0x6}) 1.439266404s ago: executing program 7 (id=4687): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000240)) r6 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.413772757s ago: executing program 5 (id=4688): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) 1.402682649s ago: executing program 4 (id=4689): pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r0, 0x5421, 0x110e22fff7) 1.391390216s ago: executing program 8 (id=4690): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) io_getevents(0x0, 0x6, 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) 1.281111835s ago: executing program 7 (id=4691): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)={0x14, 0x48, 0x1, 0x1, 0x25dfdbfb, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x4008000) 1.280070138s ago: executing program 6 (id=4692): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1, 0x0, 0x80) 1.224226427s ago: executing program 4 (id=4693): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x1, 0x3, 0x14, 0x3}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) 1.11371869s ago: executing program 4 (id=4694): r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x4, 0x0, &(0x7f0000000100)) 1.110444305s ago: executing program 6 (id=4695): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e22, 0x2, 0xa, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {}, 0x70bd2d, 0x3500, 0xa, 0x1, 0x0, 0x50}}, 0xf0}}, 0x0) 935.922606ms ago: executing program 7 (id=4696): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) shmdt(0x0) 24.676201ms ago: executing program 4 (id=4697): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'dummy0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4c}}) 0s ago: executing program 7 (id=4698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) kernel console output (not intermixed with test programs): xx failed with error -71 [ 318.678992][ T5782] usb 10-1: USB disconnect, device number 4 [ 319.163101][ T5782] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 319.326745][ T5782] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.326832][ T5782] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.326870][ T5782] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.326892][ T5782] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.388509][T11473] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 319.419954][ T5782] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 320.093628][ T1230] gspca_sonixj: i2c_w8 err -71 [ 320.153164][ T1230] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 320.161437][ T1230] usb 1-1: USB disconnect, device number 21 [ 320.420968][ T1230] usb 10-1: USB disconnect, device number 5 [ 323.114152][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1959'. [ 323.395943][T11570] netlink: 'syz.9.1965': attribute type 4 has an invalid length. [ 323.509045][T11576] binder: BINDER_SET_CONTEXT_MGR already set [ 323.509061][T11576] binder: 11575:11576 ioctl 4018620d 200000000040 returned -16 [ 323.595999][T11579] tipc: Failed to remove unknown binding: 66,0,0/0:313222566/313222567 [ 323.596553][T11579] tipc: Failed to remove unknown binding: 66,0,0/0:313222566/313222567 [ 324.744663][T11608] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1980'. [ 324.745185][T11608] unsupported nlmsg_type 40 [ 325.529923][T11628] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 325.759011][T11635] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1988'. [ 325.963125][ T809] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 326.151823][ T809] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.151849][ T809] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 326.174251][ T809] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 326.174282][ T809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 326.174301][ T809] usb 10-1: SerialNumber: syz [ 326.531725][ T809] usb 10-1: 0:2 : does not exist [ 326.624990][T11649] binder: BINDER_SET_CONTEXT_MGR already set [ 326.625000][T11649] binder: 11647:11649 ioctl 4018620d 200000000040 returned -16 [ 326.625175][T11649] binder: 11647:11649 ioctl c0306201 2000000003c0 returned -14 [ 326.724552][ T809] usb 10-1: USB disconnect, device number 6 [ 326.797729][T11652] netlink: 'syz.8.1995': attribute type 20 has an invalid length. [ 326.797743][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1995'. [ 326.837133][ T5978] udevd[5978]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.980976][T11652] netlink: 'syz.8.1995': attribute type 20 has an invalid length. [ 326.980998][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1995'. [ 326.982194][ T83] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.994719][ T83] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.994766][ T83] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.994798][ T83] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.892905][T11685] tipc: Started in network mode [ 328.892934][T11685] tipc: Node identity 6207888fa025, cluster identity 4711 [ 328.898065][T11685] tipc: Enabled bearer , priority 0 [ 328.900594][T11693] tipc: Resetting bearer [ 328.983973][T11682] tipc: Disabling bearer [ 331.242058][T11721] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 331.321279][T11723] tipc: Cannot configure node identity twice [ 333.058143][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2024'. [ 335.003209][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 335.156125][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.156152][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.156186][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 335.156209][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.165787][ T9] usb 9-1: config 0 descriptor?? [ 335.388883][ T809] usb 9-1: USB disconnect, device number 4 [ 337.683727][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2045'. [ 337.716560][T11801] vlan2: entered promiscuous mode [ 337.716574][T11801] ip6gretap0: entered promiscuous mode [ 337.719055][T11801] bridge0: port 3(vlan2) entered blocking state [ 337.721869][T11801] bridge0: port 3(vlan2) entered disabled state [ 337.722032][T11801] vlan2: entered allmulticast mode [ 337.722042][T11801] ip6gretap0: entered allmulticast mode [ 337.727945][T11801] bridge0: port 3(vlan2) entered blocking state [ 337.728104][T11801] bridge0: port 3(vlan2) entered forwarding state [ 338.381831][T11808] netlink: 41 bytes leftover after parsing attributes in process `syz.6.2047'. [ 338.381846][T11808] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2047'. [ 338.381858][T11808] netlink: 41 bytes leftover after parsing attributes in process `syz.6.2047'. [ 338.707126][T11814] macvlan2: entered promiscuous mode [ 338.707142][T11814] macvlan2: entered allmulticast mode [ 338.707870][T11814] bond1: entered promiscuous mode [ 338.718777][T11814] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 338.837066][T11814] bond1: left promiscuous mode [ 339.666512][T11831] sctp: [Deprecated]: syz.1.2055 (pid 11831) Use of struct sctp_assoc_value in delayed_ack socket option. [ 339.666512][T11831] Use struct sctp_sack_info instead [ 339.771320][T11833] lo: entered allmulticast mode [ 339.846701][T11837] overlayfs: failed to clone upperpath [ 339.900777][T11842] netlink: 'syz.9.2060': attribute type 12 has an invalid length. [ 340.029137][T11846] overlayfs: failed to clone upperpath [ 340.609520][ T809] libceph: connect (1)[c::]:6789 error -101 [ 340.610179][ T809] libceph: mon0 (1)[c::]:6789 connect error [ 340.660716][ T809] libceph: connect (1)[c::]:6789 error -101 [ 340.660900][ T809] libceph: mon0 (1)[c::]:6789 connect error [ 340.698584][T11854] ceph: No mds server is up or the cluster is laggy [ 340.926002][ T809] libceph: connect (1)[c::]:6789 error -101 [ 340.926179][ T809] libceph: mon0 (1)[c::]:6789 connect error [ 341.021978][T11869] overlayfs: failed to clone upperpath [ 347.306376][T11947] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 347.306376][T11947] The task syz.9.2094 (11947) triggered the difference, watch for misbehavior. [ 347.326240][T11944] netlink: 'syz.0.2096': attribute type 4 has an invalid length. [ 347.377754][T11944] netlink: 'syz.0.2096': attribute type 4 has an invalid length. [ 349.273778][ T5782] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 349.443192][ T5782] usb 9-1: Using ep0 maxpacket: 16 [ 349.446446][ T5782] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.446476][ T5782] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.446512][ T5782] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 349.446528][ T5782] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.497834][ T5782] usb 9-1: config 0 descriptor?? [ 349.916601][T11977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.917257][T11977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.917771][ T5805] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 349.917807][ T5805] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 350.076710][ T5782] corsair 0003:1B1C:1B02.000D: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0 [ 350.364048][ T5782] corsair 0003:1B1C:1B02.000D: Failed to get K90 initial state (error -71). [ 350.424099][ T5782] usb 9-1: USB disconnect, device number 5 [ 350.618413][T11987] fido_id[11987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 358.954412][T12078] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 359.016132][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2140'. [ 359.415796][T12077] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 362.723159][ T5782] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 362.873138][ T5782] usb 10-1: Using ep0 maxpacket: 8 [ 362.877433][ T5782] usb 10-1: config 0 has no interfaces? [ 362.877480][ T5782] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.877502][ T5782] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.920422][ T5782] usb 10-1: config 0 descriptor?? [ 363.111887][T12177] loop5: detected capacity change from 0 to 7 [ 363.129851][T12177] Dev loop5: unable to read RDB block 7 [ 363.129893][T12177] loop5: AHDI p1 p2 p3 [ 363.129923][T12177] loop5: partition table partially beyond EOD, truncated [ 363.130187][T12177] loop5: p1 start 1601398130 is beyond EOD, truncated [ 363.130206][T12177] loop5: p2 start 1702059890 is beyond EOD, truncated [ 364.080827][T12165] bond_slave_0: entered promiscuous mode [ 364.080888][T12165] bond_slave_1: entered promiscuous mode [ 364.081067][T12165] vlan2: entered promiscuous mode [ 364.081080][T12165] bond0: entered promiscuous mode [ 365.854664][ T36] usb 10-1: USB disconnect, device number 7 [ 365.956999][ T37] audit: type=1800 audit(1772320059.989:15): pid=12219 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.2174" name="bus" dev="overlay" ino=430 res=0 errno=0 [ 366.276684][T12226] bond0: (slave team0): Releasing backup interface [ 366.659127][T12239] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2181'. [ 368.920800][T12271] kernel profiling enabled (shift: 1) [ 371.034958][T12305] netlink: zone id is out of range [ 371.035507][T12305] netlink: zone id is out of range [ 371.035584][T12305] netlink: zone id is out of range [ 371.036100][T12305] netlink: zone id is out of range [ 371.036140][T12305] netlink: zone id is out of range [ 371.036322][T12305] netlink: zone id is out of range [ 371.036821][T12305] netlink: zone id is out of range [ 371.404303][T12305] netlink: set zone limit has 4 unknown bytes [ 372.312703][T12329] io-wq is not configured for unbound workers [ 372.688794][T12344] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2214'. [ 373.321012][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2218'. [ 373.321043][T12349] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 373.970257][T12356] syzkaller0: entered promiscuous mode [ 373.970273][T12356] syzkaller0: entered allmulticast mode [ 374.126011][T12357] tipc: Started in network mode [ 374.126061][T12357] tipc: Node identity 0af55de06f2e, cluster identity 4711 [ 374.130479][T12357] tipc: Enabled bearer , priority 0 [ 374.248912][T12355] tipc: Resetting bearer [ 375.508404][T12355] tipc: Disabling bearer [ 376.271626][ T1230] tipc: Node number set to 1708875232 [ 378.783077][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.783145][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.812202][T12409] binder: 12399:12409 ioctl c0306201 2000000003c0 returned -14 [ 380.760219][T12414] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 382.732333][T12439] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2241'. [ 388.399809][T12481] vlan0: entered promiscuous mode [ 388.399978][T12481] vlan0: entered allmulticast mode [ 388.399989][T12481] hsr_slave_1: entered allmulticast mode [ 388.449402][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2257'. [ 389.343791][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2264'. [ 392.136234][ T3032] bridge_slave_1: left allmulticast mode [ 392.136271][ T3032] bridge_slave_1: left promiscuous mode [ 392.136492][ T3032] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.267862][ T3032] bridge_slave_0: left allmulticast mode [ 392.267890][ T3032] bridge_slave_0: left promiscuous mode [ 392.268146][ T3032] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.458370][ T5907] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 392.623244][ T5907] usb 1-1: Using ep0 maxpacket: 32 [ 392.629292][ T5907] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 392.629321][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.629339][ T5907] usb 1-1: Product: syz [ 392.629353][ T5907] usb 1-1: Manufacturer: syz [ 392.629367][ T5907] usb 1-1: SerialNumber: syz [ 392.641150][ T5907] usb 1-1: config 0 descriptor?? [ 393.059408][ T5907] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 022 [ 394.717582][T12520] i2c i2c-1: failure reading status [ 399.043717][ T3032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.593091][ T3032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.925893][ T3032] bond0 (unregistering): Released all slaves [ 401.537331][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 403.922838][T12611] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 404.220660][ T36] usb 1-1: USB disconnect, device number 22 [ 404.328695][T12611] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 404.827364][T12631] ntfs3(nullb0): Primary boot signature is not NTFS. [ 404.850765][T12631] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 405.463298][T12611] bond3 (unregistering): Released all slaves [ 407.571698][T12645] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2296'. [ 407.638809][T12645] nbd: socks must be embedded in a SOCK_ITEM attr [ 407.824381][T12649] bridge1: entered promiscuous mode [ 410.158108][T12603] udevd[12603]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 411.863085][ T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 412.208193][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.208485][ T31] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 412.208929][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.988900][ T31] usb 1-1: config 0 descriptor?? [ 413.020767][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 413.738381][ T3032] hsr_slave_0: left promiscuous mode [ 413.761779][ T31] pwc: send_video_command error -71 [ 413.761811][ T31] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 413.761902][ T31] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 413.844890][ T31] usb 1-1: USB disconnect, device number 23 [ 413.859648][T12703] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2308'. [ 413.929881][ T3032] hsr_slave_1: left promiscuous mode [ 413.930798][ T3032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.154081][ T37] audit: type=1326 audit(1772320108.189:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12711 comm="syz.1.2311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff01514c799 code=0x0 [ 414.863797][T12721] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 415.635056][ T3032] team0 (unregistering): Port device team_slave_1 removed [ 415.709372][ T3032] team0 (unregistering): Port device team_slave_0 removed [ 418.853305][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'. [ 418.853328][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2319'. [ 426.131323][T12799] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 432.871058][T12859] input: syz1 as /devices/virtual/input/input22 [ 432.959120][T12846] block nbd0: shutting down sockets [ 438.696949][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2357'. [ 440.161101][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.161169][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.123072][ T5872] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 442.433071][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 443.298098][ T5872] usb 1-1: device descriptor read/all, error -71 [ 443.449355][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'. [ 456.024989][ T2199] kworker/u8:10 (2199) used greatest stack depth: 18080 bytes left [ 465.758526][T13058] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.2398'. [ 465.764119][T13058] 0ªX¹¦Dö»: renamed from gretap0 [ 466.613782][T13058] 0ªX¹¦Dö»: entered allmulticast mode [ 475.359816][T13146] 9pnet_virtio: no channels available for device syz [ 475.495407][T13146] pim6reg99999999: entered allmulticast mode [ 482.048773][T13218] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 482.048923][T13218] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 482.661847][ T37] audit: type=1326 audit(1772320176.689:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1fedc799 code=0x7ffc0000 [ 482.661880][ T37] audit: type=1326 audit(1772320176.689:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1fedc799 code=0x7ffc0000 [ 482.661902][ T37] audit: type=1326 audit(1772320176.689:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1fedc799 code=0x7ffc0000 [ 482.661922][ T37] audit: type=1326 audit(1772320176.689:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1fedc799 code=0x7ffc0000 [ 482.661942][ T37] audit: type=1326 audit(1772320176.689:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f6d1fedc799 code=0x7ffc0000 [ 482.667574][ T37] audit: type=1326 audit(1772320176.699:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1fedc799 code=0x7ffc0000 [ 482.667619][ T37] audit: type=1326 audit(1772320176.699:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1fedc799 code=0x7ffc0000 [ 482.670132][ T37] audit: type=1326 audit(1772320176.699:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1fedc799 code=0x7ffc0000 [ 482.670174][ T37] audit: type=1326 audit(1772320176.699:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f6d1fedc799 code=0x7ffc0000 [ 482.672495][ T37] audit: type=1326 audit(1772320176.699:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13222 comm="syz.8.2434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d1fedc799 code=0x7ffc0000 [ 482.768459][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2434'. [ 483.789481][T13206] Bluetooth: hci3: command 0x0406 tx timeout [ 484.124379][T13243] netlink: 'syz.0.2437': attribute type 1 has an invalid length. [ 484.813635][T13243] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.766612][T13294] netlink: 'syz.0.2450': attribute type 2 has an invalid length. [ 494.092625][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2447'. [ 494.258858][T13322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 495.491835][T13329] vlan3: entered promiscuous mode [ 495.491857][T13329] bond3: entered promiscuous mode [ 495.652540][T13349] netlink: 'syz.6.2461': attribute type 11 has an invalid length. [ 499.182428][T13373] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2467'. [ 499.182498][T13373] netlink: 80 bytes leftover after parsing attributes in process `syz.9.2467'. [ 501.804961][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.805026][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.517653][ T5879] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 507.763392][ T5879] usb 1-1: Using ep0 maxpacket: 16 [ 508.772355][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 508.772528][ T5879] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 508.772598][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.468271][ T5879] usb 1-1: config 0 descriptor?? [ 509.535373][ T5879] usb 1-1: can't set config #0, error -71 [ 509.551126][ T5879] usb 1-1: USB disconnect, device number 26 [ 509.846907][T13443] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2486'. [ 509.859716][T13443] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2486'. [ 517.665445][T13507] batadv0: entered promiscuous mode [ 517.738108][T13507] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 521.863668][ T5880] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 522.818168][T13537] overlayfs: failed to resolve './file0': -2 [ 522.833011][ T5880] usb 10-1: Using ep0 maxpacket: 16 [ 522.834856][ T5880] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.834905][ T5880] usb 10-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 522.834927][ T5880] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.877453][ T5880] usb 10-1: config 0 descriptor?? [ 522.894887][ T5880] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 524.210338][ T5800] usb 10-1: USB disconnect, device number 8 [ 524.673575][ T5880] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 526.218973][ T5880] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 526.219000][ T5880] usb 1-1: config 0 has no interface number 0 [ 526.219041][ T5880] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 526.219065][ T5880] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 526.402748][ T5880] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 526.402778][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.402797][ T5880] usb 1-1: Product: syz [ 526.402810][ T5880] usb 1-1: Manufacturer: syz [ 526.402823][ T5880] usb 1-1: SerialNumber: syz [ 527.422542][ T5880] usb 1-1: config 0 descriptor?? [ 528.014848][ T5880] usb 1-1: can't set config #0, error -71 [ 528.710488][ T5880] usb 1-1: USB disconnect, device number 27 [ 533.472306][T13607] tipc: Enabled bearer , priority 10 [ 549.908037][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2556'. [ 551.827524][T13206] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 551.841761][T13206] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 551.842130][T13206] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 552.073170][ T1230] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 552.073502][T13206] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 552.083529][T13206] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 552.714016][T13736] vivid-000: kernel_thread() failed [ 552.802953][ T1230] usb 9-1: Using ep0 maxpacket: 16 [ 552.933109][ T1230] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.933143][ T1230] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 552.933157][ T1230] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 552.933168][ T1230] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 552.933179][ T1230] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.936557][ T1230] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 552.936584][ T1230] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 552.936604][ T1230] usb 9-1: Manufacturer: syz [ 553.071979][ T1230] usb 9-1: config 0 descriptor?? [ 553.563052][ T1230] rc_core: IR keymap rc-hauppauge not found [ 553.563066][ T1230] Registered IR keymap rc-empty [ 553.563566][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.585688][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.609959][ T1230] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 553.645060][ T1230] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input23 [ 553.773326][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.803252][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.834450][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.859245][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.873281][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.903204][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.923092][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.943081][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.965343][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 553.984307][ T1230] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 554.007892][ T1230] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 554.007907][ T1230] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 554.101789][ T1230] usb 9-1: USB disconnect, device number 6 [ 554.985050][ T5804] Bluetooth: hci5: command tx timeout [ 557.450805][ T5804] Bluetooth: hci5: command tx timeout [ 557.632101][T13727] chnl_net:caif_netlink_parms(): no params data found [ 557.936062][T13727] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.936255][T13727] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.936434][T13727] bridge_slave_0: entered allmulticast mode [ 557.939459][T13727] bridge_slave_0: entered promiscuous mode [ 558.004762][T13727] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.004890][T13727] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.005128][T13727] bridge_slave_1: entered allmulticast mode [ 558.008815][T13727] bridge_slave_1: entered promiscuous mode [ 558.138919][T13727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.157002][T13727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.249394][T13727] team0: Port device team_slave_0 added [ 558.268400][T13727] team0: Port device team_slave_1 added [ 558.388925][T13727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.388943][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.388976][T13727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.452208][T13727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.452225][T13727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.452251][T13727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.578400][T13727] hsr_slave_0: entered promiscuous mode [ 558.579660][T13727] hsr_slave_1: entered promiscuous mode [ 558.580525][T13727] debugfs: 'hsr0' already exists in 'hsr' [ 558.580549][T13727] Cannot create hsr debugfs directory [ 560.223224][T13206] Bluetooth: hci5: command tx timeout [ 563.627437][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.627511][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.631887][T13206] Bluetooth: hci5: command tx timeout [ 568.602402][T13206] Bluetooth: hci5: command 0x0405 tx timeout [ 569.321918][T13822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 571.202672][T13845] overlayfs: failed to resolve './file0': -2 [ 572.597798][T13857] vivid-009: kernel_thread() failed [ 574.162976][ T1230] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 575.363002][ T1230] usb 10-1: Using ep0 maxpacket: 16 [ 575.389709][ T1230] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.389763][ T1230] usb 10-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 575.389786][ T1230] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.444092][ T1230] usb 10-1: config 0 descriptor?? [ 575.473733][ T1230] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 577.268790][T11243] usb 10-1: USB disconnect, device number 9 [ 577.504629][T13727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 577.699319][T13727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 577.722630][T13900] block nbd8: shutting down sockets [ 578.565338][T13727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 578.681003][T13727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 581.218956][T13940] netlink: 'syz.6.2602': attribute type 10 has an invalid length. [ 582.145741][T13727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.188675][T13727] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.870819][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.870928][ T6403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.933084][T13944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 582.940406][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.941051][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.750311][T13727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.681808][T13727] veth0_vlan: entered promiscuous mode [ 588.933690][T13727] veth1_vlan: entered promiscuous mode [ 589.950888][T13727] veth0_macvtap: entered promiscuous mode [ 590.104571][T13727] veth1_macvtap: entered promiscuous mode [ 590.242243][T13727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.301415][T13727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.362489][ T6415] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.366158][ T6415] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.366388][ T6415] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.366581][ T6415] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.937793][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.937823][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.875760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.875782][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.974164][T14079] hub 8-0:1.0: USB hub found [ 597.978063][T14079] hub 8-0:1.0: 1 port detected [ 601.822338][T14095] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 601.822438][T14095] UDF-fs: Scanning with blocksize 512 failed [ 601.869439][T14095] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 601.869525][T14095] UDF-fs: Scanning with blocksize 1024 failed [ 601.896226][T14095] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 601.896310][T14095] UDF-fs: Scanning with blocksize 2048 failed [ 601.909641][T14095] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 601.909728][T14095] UDF-fs: Scanning with blocksize 4096 failed [ 611.465334][ T9] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 614.425025][T14157] tipc: Failed to remove unknown binding: 66,0,0/0:399947961/399947963 [ 614.425064][T14157] tipc: Failed to remove unknown binding: 66,0,0/0:399947961/399947962 [ 614.425984][T14157] tipc: Failed to remove unknown binding: 66,0,0/0:399947961/399947963 [ 614.426017][T14157] tipc: Failed to remove unknown binding: 66,0,0/0:399947961/399947962 [ 614.615367][T14160] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 620.055647][T14209] overlayfs: missing 'lowerdir' [ 622.492340][ T37] kauditd_printk_skb: 69 callbacks suppressed [ 622.492360][ T37] audit: type=1804 audit(1772320316.479:96): pid=14213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.6.2660" name="/newroot/336/file1" dev="fuse" ino=1 res=1 errno=0 [ 623.161765][T14230] netlink: 'syz.2.2662': attribute type 4 has an invalid length. [ 623.161790][T14230] netlink: 1601 bytes leftover after parsing attributes in process `syz.2.2662'. [ 624.410217][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.410291][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.434569][ T37] audit: type=1800 audit(1772320318.469:97): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2667" name="bus" dev="tmpfs" ino=75 res=0 errno=0 [ 624.971138][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2663'. [ 629.064939][T14270] overlayfs: missing 'lowerdir' [ 630.421179][T14284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 634.739059][T11243] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 635.913439][T11243] usb 9-1: Using ep0 maxpacket: 32 [ 636.077047][T11243] usb 9-1: device descriptor read/all, error -71 [ 636.990351][T14331] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 636.990991][T14331] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 636.991505][T14331] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 642.813735][T14372] netlink: 'syz.8.2691': attribute type 10 has an invalid length. [ 642.837897][T14372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.862050][T14372] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 644.082525][T14380] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.671293][T14382] overlay: filesystem on ./file0 not supported as upperdir [ 651.213837][T14414] vlan2: entered promiscuous mode [ 651.214039][T14414] vlan2: entered allmulticast mode [ 651.214053][T14414] hsr_slave_1: entered allmulticast mode [ 651.293384][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2697'. [ 652.333003][ T5782] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 652.667205][ T5782] usb 10-1: config 0 has no interfaces? [ 652.669596][ T5782] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.669623][ T5782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.669649][ T5782] usb 10-1: Product: syz [ 652.669663][ T5782] usb 10-1: Manufacturer: syz [ 652.669676][ T5782] usb 10-1: SerialNumber: syz [ 653.444504][ T5782] usb 10-1: config 0 descriptor?? [ 653.753636][T14425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.755594][T14425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.754810][T14425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.755340][T14425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.758544][T14425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.759034][T14425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.760679][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2702'. [ 657.934815][T14425] vlan2: entered promiscuous mode [ 657.934837][T14425] veth0: entered promiscuous mode [ 659.267278][ T5880] usb 10-1: USB disconnect, device number 10 [ 659.268132][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 659.281799][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 659.282724][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 659.340933][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 659.341648][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 662.580645][T14506] 9p: Bad value for 'rfdno' [ 663.118857][ T5804] Bluetooth: hci1: command tx timeout [ 665.657756][T13206] Bluetooth: hci1: command tx timeout [ 668.401993][T13206] Bluetooth: hci1: command tx timeout [ 668.626576][T14521] kvm: kvm [14519]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 668.653862][T14521] kvm: kvm [14519]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 668.693543][T14521] kvm: kvm [14519]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 668.697193][T14521] kvm: kvm [14519]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 668.712303][T14521] kvm: kvm [14519]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 668.751931][T14483] chnl_net:caif_netlink_parms(): no params data found [ 668.759767][T14544] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 669.876919][T14552] vivid-000: kernel_thread() failed [ 670.503138][T13206] Bluetooth: hci1: command tx timeout [ 671.469686][T14483] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.469814][T14483] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.470017][T14483] bridge_slave_0: entered allmulticast mode [ 671.510708][T14483] bridge_slave_0: entered promiscuous mode [ 671.527876][T14483] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.527998][T14483] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.528237][T14483] bridge_slave_1: entered allmulticast mode [ 671.567437][T14483] bridge_slave_1: entered promiscuous mode [ 671.620192][T14483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.641143][T14483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 672.028617][T14483] team0: Port device team_slave_0 added [ 672.032503][T14483] team0: Port device team_slave_1 added [ 672.121146][T14483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 672.121162][T14483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.121187][T14483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 672.174178][T14483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.174193][T14483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.174213][T14483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.442194][T14610] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 675.580831][T14483] hsr_slave_0: entered promiscuous mode [ 675.582095][T14483] hsr_slave_1: entered promiscuous mode [ 675.600884][T14483] debugfs: 'hsr0' already exists in 'hsr' [ 675.600911][T14483] Cannot create hsr debugfs directory [ 675.691577][ T37] audit: type=1804 audit(1772320369.699:98): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.2729" name="/newroot/198/file1" dev="fuse" ino=1 res=1 errno=0 [ 685.832267][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.833359][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.602725][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2739'. [ 687.180720][T14710] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2746'. [ 687.181090][T14710] netlink: 196 bytes leftover after parsing attributes in process `syz.8.2746'. [ 705.516648][T14483] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 705.664598][T14483] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 705.755781][T14483] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 705.807467][T14483] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 709.787955][T14867] netlink: 84 bytes leftover after parsing attributes in process `syz.9.2774'. [ 709.788285][T14867] vlan0: entered promiscuous mode [ 710.754140][T14873] Can't find ip_set type bitmap:ip [ 712.294285][T14483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 712.330102][T13206] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 712.372497][T13206] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 712.381718][T13206] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 712.416212][T13206] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 712.435112][T13206] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 713.050702][T14483] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.075089][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.075880][ T6409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.139490][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.139620][ T6409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.649588][ T5804] Bluetooth: hci5: command tx timeout [ 715.357168][T14914] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2782'. [ 717.460226][ T5804] Bluetooth: hci5: command tx timeout [ 718.101213][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 718.101249][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.626147][T13206] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 718.641849][T13206] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 718.642646][T13206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 718.649135][T13206] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 718.649932][T13206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 719.724902][T13206] Bluetooth: hci5: command tx timeout [ 719.736128][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.736162][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.736770][T14880] chnl_net:caif_netlink_parms(): no params data found [ 720.783191][T13206] Bluetooth: hci0: command tx timeout [ 721.798234][T13206] Bluetooth: hci5: command tx timeout [ 722.997049][T13206] Bluetooth: hci0: command tx timeout [ 723.026217][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.026252][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.410494][ T37] audit: type=1800 audit(1772320418.439:99): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2792" name="bus" dev="tmpfs" ino=2017 res=0 errno=0 [ 724.810595][ T12] team0: Port device netdevsim0 removed [ 724.881990][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.882043][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.023777][T13206] Bluetooth: hci0: command tx timeout [ 725.632651][T14880] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.641063][T14880] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.641307][T14880] bridge_slave_0: entered allmulticast mode [ 725.665155][T14880] bridge_slave_0: entered promiscuous mode [ 726.589667][T14880] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.589757][T14880] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.589951][T14880] bridge_slave_1: entered allmulticast mode [ 726.596368][T14880] bridge_slave_1: entered promiscuous mode [ 727.143023][T13206] Bluetooth: hci0: command tx timeout [ 728.524361][T14880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.901363][T14880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.999207][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2798'. [ 732.245292][T15053] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(12) [ 732.245318][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 732.249056][T14880] team0: Port device team_slave_0 added [ 732.257012][T15053] vhci_hcd vhci_hcd.0: Device attached [ 732.326226][T15053] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(14) [ 732.326253][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 732.326301][T15053] vhci_hcd vhci_hcd.0: Device attached [ 732.328587][T15060] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(17) [ 732.328613][T15060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 732.328666][T15060] vhci_hcd vhci_hcd.0: Device attached [ 732.505026][T15060] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 732.506312][T15060] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 732.507423][T15060] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 733.443385][T15053] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(16) [ 733.443415][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 733.444371][T15053] vhci_hcd vhci_hcd.0: Device attached [ 733.533405][ T1230] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 733.540371][T15057] vhci_hcd: connection closed [ 733.562917][T15054] vhci_hcd: connection closed [ 733.564104][T15063] vhci_hcd: connection closed [ 733.565259][ T6409] vhci_hcd vhci_hcd.8: stop threads [ 733.565278][ T6409] vhci_hcd vhci_hcd.8: release socket [ 733.576289][T14880] team0: Port device team_slave_1 added [ 733.576759][T15066] vhci_hcd: connection closed [ 733.622987][T15056] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 733.686310][ T6409] vhci_hcd vhci_hcd.8: disconnect device [ 733.686417][ T6409] vhci_hcd vhci_hcd.8: stop threads [ 733.686435][ T6409] vhci_hcd vhci_hcd.8: release socket [ 733.686516][ T6409] vhci_hcd vhci_hcd.8: disconnect device [ 733.686671][ T6409] vhci_hcd vhci_hcd.8: stop threads [ 733.686684][ T6409] vhci_hcd vhci_hcd.8: release socket [ 733.686742][ T6409] vhci_hcd vhci_hcd.8: disconnect device [ 733.687034][ T6409] vhci_hcd vhci_hcd.8: stop threads [ 733.687047][ T6409] vhci_hcd vhci_hcd.8: release socket [ 733.687079][ T6409] vhci_hcd vhci_hcd.8: disconnect device [ 733.798727][ T12] bridge_slave_0: left allmulticast mode [ 733.798744][ T12] bridge_slave_0: left promiscuous mode [ 733.798884][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.872959][ T1230] vhci_hcd vhci_hcd.8: vhci_device speed not set [ 741.174591][T15119] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 745.194276][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 745.423218][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.339896][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 747.417326][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.417391][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.856021][ T12] bond0 (unregistering): Released all slaves [ 748.179959][ T12] bond1 (unregistering): Released all slaves [ 748.224689][ T12] bond2 (unregistering): Released all slaves [ 750.393653][T14880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.393670][T14880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.393696][T14880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.447262][T14880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.447279][T14880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.447306][T14880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.944072][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 752.971862][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 752.972255][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 752.974488][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 752.975154][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 753.193214][T14954] chnl_net:caif_netlink_parms(): no params data found [ 753.670184][T14880] hsr_slave_0: entered promiscuous mode [ 753.670995][T14880] hsr_slave_1: entered promiscuous mode [ 753.671535][T14880] debugfs: 'hsr0' already exists in 'hsr' [ 753.671549][T14880] Cannot create hsr debugfs directory [ 754.626276][T15207] ntfs3(nullb0): Primary boot signature is not NTFS. [ 754.633617][T15207] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 755.441863][ T5804] Bluetooth: hci1: command tx timeout [ 757.503676][ T5804] Bluetooth: hci1: command tx timeout [ 757.885145][T15225] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 757.895817][T15225] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 757.896905][T15225] vhci_hcd vhci_hcd.0: Device attached [ 758.008707][T15228] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(10) [ 758.008746][T15228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 758.008908][T15228] vhci_hcd vhci_hcd.0: Device attached [ 758.198102][T15225] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(12) [ 758.209283][T15225] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 758.295281][T15228] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(15) [ 758.295550][T15228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 758.341199][T15225] vhci_hcd vhci_hcd.0: Device attached [ 758.367177][T15228] vhci_hcd vhci_hcd.0: Device attached [ 758.393108][ T5880] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 758.471630][T15232] vhci_hcd vhci_hcd.0: pdev(6) rhport(4) sockfd(18) [ 758.471656][T15232] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 758.475162][T15232] vhci_hcd vhci_hcd.0: Device attached [ 758.547903][T15225] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(14) [ 758.547930][T15225] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 758.548018][T15225] vhci_hcd vhci_hcd.0: Device attached [ 758.549358][T15225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 758.597273][T15225] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 758.647908][T15233] vhci_hcd: connection closed [ 758.650771][T15242] vhci_hcd: connection closed [ 758.658821][T15231] vhci_hcd: connection closed [ 758.660061][T15226] vhci_hcd: connection reset by peer [ 758.661598][T15229] vhci_hcd: connection closed [ 758.661637][T15236] vhci_hcd: connection closed [ 758.694235][ T43] vhci_hcd vhci_hcd.6: stop threads [ 758.694259][ T43] vhci_hcd vhci_hcd.6: release socket [ 758.695397][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 758.696230][ T43] vhci_hcd vhci_hcd.6: stop threads [ 758.696246][ T43] vhci_hcd vhci_hcd.6: release socket [ 758.696282][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 758.697670][ T43] vhci_hcd vhci_hcd.6: stop threads [ 758.697685][ T43] vhci_hcd vhci_hcd.6: release socket [ 758.699208][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 758.699471][ T43] vhci_hcd vhci_hcd.6: stop threads [ 758.699486][ T43] vhci_hcd vhci_hcd.6: release socket [ 758.699677][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 758.699931][ T43] vhci_hcd vhci_hcd.6: stop threads [ 758.699944][ T43] vhci_hcd vhci_hcd.6: release socket [ 758.700125][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 758.700370][ T43] vhci_hcd vhci_hcd.6: stop threads [ 758.700382][ T43] vhci_hcd vhci_hcd.6: release socket [ 758.700564][ T43] vhci_hcd vhci_hcd.6: disconnect device [ 759.595565][ T5804] Bluetooth: hci1: command tx timeout [ 759.867732][T14954] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.867902][T14954] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.868108][T14954] bridge_slave_0: entered allmulticast mode [ 759.871509][T14954] bridge_slave_0: entered promiscuous mode [ 759.891866][T14954] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.891997][T14954] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.892177][T14954] bridge_slave_1: entered allmulticast mode [ 759.896807][T14954] bridge_slave_1: entered promiscuous mode [ 760.062902][ T12] hsr_slave_0: left promiscuous mode [ 760.063593][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.063609][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.124571][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.124598][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.214975][ T12] veth1_macvtap: left promiscuous mode [ 760.215032][ T12] veth0_macvtap: left promiscuous mode [ 760.215156][ T12] veth1_vlan: left promiscuous mode [ 760.215242][ T12] veth0_vlan: left promiscuous mode [ 760.496977][ T12] team0 (unregistering): Port device vlan2 removed [ 760.893395][ T12] team0 (unregistering): Port device team_slave_1 removed [ 760.913434][ T12] team0 (unregistering): Port device team_slave_0 removed [ 761.261511][T14954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.296784][T14954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.355722][T14954] team0: Port device team_slave_0 added [ 761.376570][T14954] team0: Port device team_slave_1 added [ 761.673014][ T5804] Bluetooth: hci1: command tx timeout [ 761.730651][T14954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.730662][T14954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.730676][T14954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.784313][T14954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.784329][T14954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.784362][T14954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.878959][T14954] hsr_slave_0: entered promiscuous mode [ 761.879748][T14954] hsr_slave_1: entered promiscuous mode [ 761.880264][T14954] debugfs: 'hsr0' already exists in 'hsr' [ 761.880279][T14954] Cannot create hsr debugfs directory [ 762.132156][T15183] chnl_net:caif_netlink_parms(): no params data found [ 762.840801][ T12] IPVS: stop unused estimator thread 0... [ 762.898533][T15183] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.900053][T15183] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.900213][T15183] bridge_slave_0: entered allmulticast mode [ 762.902679][T15183] bridge_slave_0: entered promiscuous mode [ 762.947740][T15183] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.947922][T15183] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.948113][T15183] bridge_slave_1: entered allmulticast mode [ 762.949755][T15183] bridge_slave_1: entered promiscuous mode [ 763.050237][T15183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.069146][T15183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.380323][T15183] team0: Port device team_slave_0 added [ 763.391834][T15183] team0: Port device team_slave_1 added [ 763.493118][ T5880] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 763.570698][T15183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.570715][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.570742][T15183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.953870][T15183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.953881][T15183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 763.953896][T15183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 764.850356][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.108468][T15183] hsr_slave_0: entered promiscuous mode [ 765.109287][T15183] hsr_slave_1: entered promiscuous mode [ 765.109823][T15183] debugfs: 'hsr0' already exists in 'hsr' [ 765.109839][T15183] Cannot create hsr debugfs directory [ 765.245479][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.495796][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.797359][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.988497][T14880] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 766.050618][T14880] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 766.105892][T14880] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 766.160732][T14880] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 766.323474][T14954] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 766.365660][T14954] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 766.638924][T14954] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 766.683184][T14954] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 766.851777][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.076910][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.151072][T14880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.295857][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.380578][T14880] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.407195][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.407396][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 767.585337][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.844892][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.844976][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.871844][T14954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.916245][T14954] 8021q: adding VLAN 0 to HW filter on device team0 [ 768.136179][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.136312][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.177509][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.193416][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.689938][ T12] bridge_slave_1: left allmulticast mode [ 768.689958][ T12] bridge_slave_1: left promiscuous mode [ 768.690106][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.794230][ T12] bridge_slave_0: left allmulticast mode [ 768.794257][ T12] bridge_slave_0: left promiscuous mode [ 768.794512][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.904753][ T12] bridge_slave_1: left allmulticast mode [ 768.904781][ T12] bridge_slave_1: left promiscuous mode [ 768.905020][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.984100][ T12] bridge_slave_0: left allmulticast mode [ 768.984119][ T12] bridge_slave_0: left promiscuous mode [ 768.984264][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.067621][ T12] bridge_slave_1: left allmulticast mode [ 769.067648][ T12] bridge_slave_1: left promiscuous mode [ 769.067883][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.154336][ T12] bridge_slave_0: left allmulticast mode [ 769.154364][ T12] bridge_slave_0: left promiscuous mode [ 769.154550][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.353522][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.393398][ T12] bond_slave_0: left promiscuous mode [ 770.434112][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.453564][ T12] bond_slave_1: left promiscuous mode [ 770.455028][ T12] bond0 (unregistering): Released all slaves [ 770.460275][ T12] bond1 (unregistering): Released all slaves [ 770.844025][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.924123][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.960496][ T12] bond0 (unregistering): Released all slaves [ 770.961634][T13206] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 770.981372][T13206] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 771.008626][T13206] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 771.009584][T13206] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 771.011343][T13206] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.393562][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.473612][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.494776][ T12] bond0 (unregistering): Released all slaves [ 771.822507][ T12] tipc: Left network mode [ 771.986789][T14954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 772.207359][T15183] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 772.272398][T15183] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 772.643079][T15183] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 772.746473][T15183] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 773.081653][T15383] chnl_net:caif_netlink_parms(): no params data found [ 773.103102][ T5804] Bluetooth: hci3: command tx timeout [ 773.803092][T15383] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.803237][T15383] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.803399][T15383] bridge_slave_0: entered allmulticast mode [ 773.805289][T15383] bridge_slave_0: entered promiscuous mode [ 773.822470][T14954] veth0_vlan: entered promiscuous mode [ 773.824897][T15383] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.825042][T15383] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.825233][T15383] bridge_slave_1: entered allmulticast mode [ 773.827823][T15383] bridge_slave_1: entered promiscuous mode [ 774.198478][T15383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.206102][T15383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.235943][T14954] veth1_vlan: entered promiscuous mode [ 774.258081][T15383] team0: Port device team_slave_0 added [ 774.265679][T15383] team0: Port device team_slave_1 added [ 774.303844][ T12] batadv0: left promiscuous mode [ 774.434057][ T12] hsr_slave_0: left promiscuous mode [ 774.473352][ T12] hsr_slave_1: left promiscuous mode [ 774.474635][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.474651][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.514499][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.514523][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.652996][ T12] hsr_slave_0: left promiscuous mode [ 774.693165][ T12] hsr_slave_1: left promiscuous mode [ 774.693881][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.693897][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.724997][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.725020][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.893017][ T12] hsr_slave_0: left promiscuous mode [ 774.912956][ T12] hsr_slave_1: left promiscuous mode [ 774.913626][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.963743][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.035402][ T12] veth1_macvtap: left promiscuous mode [ 775.035461][ T12] veth0_macvtap: left promiscuous mode [ 775.035592][ T12] veth1_vlan: left promiscuous mode [ 775.153149][ T12] veth1_macvtap: left promiscuous mode [ 775.153206][ T12] veth0_macvtap: left promiscuous mode [ 775.153336][ T12] veth1_vlan: left promiscuous mode [ 775.153427][ T12] veth0_vlan: left promiscuous mode [ 775.182918][ T5804] Bluetooth: hci3: command tx timeout [ 775.967099][ T12] team0 (unregistering): Port device team_slave_1 removed [ 776.004151][ T12] team0 (unregistering): Port device team_slave_0 removed [ 776.523905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 776.564150][ T12] team0 (unregistering): Port device team_slave_0 removed [ 776.905464][ T12] team0 (unregistering): Port device team_slave_1 removed [ 776.933521][ T12] team0 (unregistering): Port device team_slave_0 removed [ 777.231791][T15383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.231809][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.231831][T15383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.269377][ T5804] Bluetooth: hci3: command tx timeout [ 777.287166][T15383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.287181][T15383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.287204][T15383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 777.287903][T14954] veth0_macvtap: entered promiscuous mode [ 777.332000][T14954] veth1_macvtap: entered promiscuous mode [ 777.380893][T15383] hsr_slave_0: entered promiscuous mode [ 777.381646][T15383] hsr_slave_1: entered promiscuous mode [ 777.405383][T15183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 777.461562][T14954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 777.614505][T14954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 777.639040][T15183] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.669580][ T6400] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.671280][ T6400] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.691919][ T6400] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.706614][ T6400] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.710091][ T6407] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.710233][ T6407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 778.059059][ T6407] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.059451][ T6407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.467860][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.467881][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 778.727980][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.728001][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.218019][T13206] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 779.237706][T13206] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 779.241148][T13206] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 779.262050][T13206] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 779.271954][T13206] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 779.344712][ T5804] Bluetooth: hci3: command tx timeout [ 779.600560][T15383] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 779.633706][T15383] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 779.943063][T15383] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 780.006626][T15383] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 780.084769][T15183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 780.283784][T15409] chnl_net:caif_netlink_parms(): no params data found [ 780.595056][T15409] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.595245][T15409] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.595469][T15409] bridge_slave_0: entered allmulticast mode [ 780.596953][T15409] bridge_slave_0: entered promiscuous mode [ 780.636322][T15409] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.636455][T15409] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.636694][T15409] bridge_slave_1: entered allmulticast mode [ 780.639237][T15409] bridge_slave_1: entered promiscuous mode [ 780.695453][T15409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.701882][T15409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.830923][T15409] team0: Port device team_slave_0 added [ 780.843702][T15409] team0: Port device team_slave_1 added [ 780.881831][T15409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.881846][T15409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.881872][T15409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.927757][T15383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.928745][T15409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.928754][T15409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.928767][T15409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.343618][ T5804] Bluetooth: hci5: command tx timeout [ 781.662512][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.696044][T15183] veth0_vlan: entered promiscuous mode [ 781.710079][T15409] hsr_slave_0: entered promiscuous mode [ 781.710897][T15409] hsr_slave_1: entered promiscuous mode [ 781.711412][T15409] debugfs: 'hsr0' already exists in 'hsr' [ 781.711426][T15409] Cannot create hsr debugfs directory [ 781.727724][T15383] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.905587][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.036330][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.036453][ T6400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.064342][T15183] veth1_vlan: entered promiscuous mode [ 782.185139][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.226101][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.226241][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.440405][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.572660][T15183] veth0_macvtap: entered promiscuous mode [ 782.593132][T15183] veth1_macvtap: entered promiscuous mode [ 782.645477][T15183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.650135][T15183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.672509][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.672725][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.673867][ T43] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.674096][ T43] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.102163][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 783.102184][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 783.220252][ T12] bridge_slave_1: left allmulticast mode [ 783.220267][ T12] bridge_slave_1: left promiscuous mode [ 783.220412][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.293771][ T12] bridge_slave_0: left allmulticast mode [ 783.293791][ T12] bridge_slave_0: left promiscuous mode [ 783.293944][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.355879][ T12] bridge_slave_1: left allmulticast mode [ 783.355898][ T12] bridge_slave_1: left promiscuous mode [ 783.356042][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.413870][ T12] bridge_slave_0: left allmulticast mode [ 783.413889][ T12] bridge_slave_0: left promiscuous mode [ 783.414037][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.423472][ T5804] Bluetooth: hci5: command tx timeout [ 784.153463][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.214796][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.254861][ T12] bond0 (unregistering): Released all slaves [ 784.613472][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.674114][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.714705][ T12] bond0 (unregistering): Released all slaves [ 784.888109][ T6407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.888129][ T6407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.896439][T15383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 786.313646][ T5804] Bluetooth: hci5: command tx timeout [ 788.485356][ T5804] Bluetooth: hci5: command tx timeout [ 791.661179][T15491] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 795.419339][T15515] 9pnet_virtio: no channels available for device syz [ 797.417839][ T12] hsr_slave_0: left promiscuous mode [ 797.552290][ T12] hsr_slave_1: left promiscuous mode [ 797.569389][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 797.569416][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.752756][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 797.752789][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.681381][ T12] hsr_slave_0: left promiscuous mode [ 800.721811][ T12] hsr_slave_1: left promiscuous mode [ 800.722833][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.763476][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.854826][ T12] veth1_macvtap: left promiscuous mode [ 800.854919][ T12] veth0_macvtap: left promiscuous mode [ 800.855156][ T12] veth1_vlan: left promiscuous mode [ 800.855310][ T12] veth0_vlan: left promiscuous mode [ 801.422900][T11243] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 801.572917][T11243] usb 9-1: Using ep0 maxpacket: 8 [ 801.577453][T11243] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.577475][T11243] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 801.580064][T11243] usb 9-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 801.580092][T11243] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.580111][T11243] usb 9-1: Product: syz [ 801.580124][T11243] usb 9-1: Manufacturer: syz [ 801.580138][T11243] usb 9-1: SerialNumber: syz [ 801.641470][T11243] usb 9-1: config 0 descriptor?? [ 802.067373][ T12] team0 (unregistering): Port device team_slave_1 removed [ 802.113533][ T12] team0 (unregistering): Port device team_slave_0 removed [ 802.594130][ T12] team0 (unregistering): Port device team_slave_1 removed [ 802.630080][ T12] team0 (unregistering): Port device team_slave_0 removed [ 802.874025][T15533] vcan0: entered allmulticast mode [ 804.146912][ T5907] usb 9-1: USB disconnect, device number 10 [ 804.451841][T15383] veth0_vlan: entered promiscuous mode [ 804.501366][T15409] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 804.681702][T15383] veth1_vlan: entered promiscuous mode [ 804.694559][T15409] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 804.732218][T15409] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 805.725481][T15409] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 806.870505][ T37] audit: type=1800 audit(1772320500.759:100): pid=15569 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.2851" name="/" dev="fuse" ino=4 res=0 errno=0 [ 807.178664][T15383] veth0_macvtap: entered promiscuous mode [ 807.395342][T15383] veth1_macvtap: entered promiscuous mode [ 808.649992][T15383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.675099][T15383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.716391][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.716484][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.737167][ T6413] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.742656][ T6413] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.856820][ T6413] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.876138][ T6413] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.487679][ T37] audit: type=1326 audit(1772320503.259:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15594 comm="syz.8.2854" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6d1fedc799 code=0x0 [ 810.138517][T15409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.284800][T15409] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.376613][T15603] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 811.474745][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.474890][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.477378][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.477511][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 811.560866][ T6409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.560886][ T6409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.785966][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 811.785987][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 819.272117][T15409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.712345][T15409] veth0_vlan: entered promiscuous mode [ 826.868547][T15409] veth1_vlan: entered promiscuous mode [ 827.875048][T15706] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 829.737926][ T5872] IPVS: starting estimator thread 0... [ 830.652072][T15409] veth0_macvtap: entered promiscuous mode [ 830.653071][T15721] IPVS: using max 9 ests per chain, 21600 per kthread [ 830.708656][T15409] veth1_macvtap: entered promiscuous mode [ 830.749350][T15409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.761702][T15409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.155405][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.239999][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.241897][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.539403][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.282027][ T6400] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.282042][ T6400] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.439013][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2879'. [ 835.473323][ T6407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.473372][ T6407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.689632][T15771] syz.6.2880(15771): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 839.590571][ T5859] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 840.199906][ T5859] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.200214][ T5859] usb 6-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 840.200261][ T5859] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.528472][ T5859] usb 6-1: config 0 descriptor?? [ 840.851290][ T10] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 842.770450][ T5859] usb 6-1: string descriptor 0 read error: -71 [ 842.928701][ T10] usb 9-1: device descriptor read/all, error -71 [ 842.947555][ T5859] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 842.984750][ T5859] usb 6-1: USB disconnect, device number 6 [ 843.116119][T15829] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 843.131892][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2889'. [ 843.419133][T15839] dummy0: entered promiscuous mode [ 843.468926][T15835] loop7: detected capacity change from 0 to 16384 [ 843.751040][T15840] loop7: detected capacity change from 16384 to 0 [ 843.757994][ C0] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 26 prio class 2 [ 845.231312][T15836] dummy0: left promiscuous mode [ 849.921808][ T37] audit: type=1326 audit(1772320543.249:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15882 comm="syz.4.2901" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcacf65c799 code=0x0 [ 850.702956][T15543] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 850.864730][T15543] usb 5-1: Using ep0 maxpacket: 16 [ 850.867209][T15543] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 850.867263][T15543] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 850.867276][T15543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.926022][T15543] usb 5-1: config 0 descriptor?? [ 850.947265][T15543] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 854.170587][ T5880] usb 5-1: USB disconnect, device number 7 [ 862.367546][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2920'. [ 862.367582][T15960] openvswitch: netlink: Flow actions attr not present in new flow. [ 864.106402][T15989] netlink: 'syz.8.2916': attribute type 3 has an invalid length. [ 868.504341][T16026] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 870.102649][T16048] Can't find ip_set type bitmap:ip [ 870.193443][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.193509][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.793795][ T6405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.793809][ T6405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.457938][ T5879] IPVS: starting estimator thread 0... [ 876.708562][T16104] IPVS: using max 1 ests per chain, 2400 per kthread [ 877.078911][T16107] ptrace attach of ""[16108] was attempted by "./syz-executor exec"[16107] [ 877.629355][ T37] audit: type=1326 audit(1772320571.559:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.5.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ba85c799 code=0x7ffc0000 [ 877.895308][ T37] audit: type=1326 audit(1772320571.929:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16112 comm="syz.5.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57ba85c799 code=0x7ffc0000 [ 878.542892][ T5804] Bluetooth: hci1: command 0x0406 tx timeout [ 881.269903][T16172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2969'. [ 885.788280][T16217] lo speed is unknown, defaulting to 1000 [ 885.788397][T16217] lo speed is unknown, defaulting to 1000 [ 885.793944][T16217] lo speed is unknown, defaulting to 1000 [ 885.803180][T16217] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 885.816586][T16217] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 885.854483][T16218] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2975'. [ 885.856239][T16218] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 886.772840][T16217] lo speed is unknown, defaulting to 1000 [ 886.774274][T16217] lo speed is unknown, defaulting to 1000 [ 886.775653][T16217] lo speed is unknown, defaulting to 1000 [ 886.777986][T16217] lo speed is unknown, defaulting to 1000 [ 886.779380][T16217] lo speed is unknown, defaulting to 1000 [ 886.780708][T16217] lo speed is unknown, defaulting to 1000 [ 889.127241][ T5880] IPVS: starting estimator thread 0... [ 889.222967][T16231] IPVS: using max 9 ests per chain, 21600 per kthread [ 897.020979][T16320] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3007'. [ 897.125033][T16320] lo speed is unknown, defaulting to 1000 [ 898.392466][T16105] Bluetooth: hci3: command 0x0406 tx timeout [ 899.134812][T16344] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 899.134838][T16344] PKCS7: Only support pkcs7_signedData type [ 902.944501][T16105] Bluetooth: hci5: command 0x0406 tx timeout [ 906.735901][T16385] Can't find ip_set type bitmap:ip [ 907.422811][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 907.575694][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.575742][ T10] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 907.575765][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.797294][ T10] usb 9-1: config 0 descriptor?? [ 909.043361][T16422] Can't find ip_set type bitmap:ip [ 910.672955][ T5880] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 910.825132][ T5880] usb 5-1: config 11 has too many interfaces: 35, using maximum allowed: 32 [ 910.825162][ T5880] usb 5-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config [ 910.825181][ T5880] usb 5-1: config 11 has 1 interface, different from the descriptor's value: 35 [ 910.825200][ T5880] usb 5-1: config 11 has no interface number 0 [ 910.825315][ T5880] usb 5-1: too many endpoints for config 11 interface 6 altsetting 6: 201, using maximum allowed: 30 [ 910.825368][ T5880] usb 5-1: config 11 interface 6 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 201 [ 910.825394][ T5880] usb 5-1: config 11 interface 6 has no altsetting 0 [ 910.828968][ T5880] usb 5-1: New USB device found, idVendor=2184, idProduct=0036, bcdDevice=68.fd [ 910.828996][ T5880] usb 5-1: New USB device strings: Mfr=21, Product=2, SerialNumber=3 [ 910.829016][ T5880] usb 5-1: Product: syz [ 910.829029][ T5880] usb 5-1: Manufacturer: syz [ 910.829043][ T5880] usb 5-1: SerialNumber: syz [ 912.363093][ T5880] usb 5-1: USB disconnect, device number 8 [ 912.728119][ T10] usbhid 9-1:0.0: can't add hid device: -71 [ 912.728202][ T10] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 912.745220][ T10] usb 9-1: USB disconnect, device number 13 [ 912.911992][ T5872] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 913.065101][ T5872] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 913.065131][ T5872] usb 6-1: config 160 has no interface number 0 [ 913.065177][ T5872] usb 6-1: config 160 interface 200 has no altsetting 0 [ 913.068668][ T5872] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 913.068696][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.068715][ T5872] usb 6-1: Product: syz [ 913.068729][ T5872] usb 6-1: Manufacturer: syz [ 913.068743][ T5872] usb 6-1: SerialNumber: syz [ 913.808943][T16501] Can't find ip_set type bitmap:ip [ 913.859716][ T5872] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 913.859853][ T5872] usb 6-1: MIDIStreaming interface descriptor not found [ 914.062872][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 914.120834][ T5872] usb 6-1: USB disconnect, device number 7 [ 914.223425][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 914.227726][ T10] usb 9-1: config 64 has an invalid interface number: 189 but max is 0 [ 914.227753][ T10] usb 9-1: config 64 has no interface number 0 [ 914.227783][ T10] usb 9-1: config 64 interface 189 has no altsetting 0 [ 914.230366][ T10] usb 9-1: New USB device found, idVendor=19d2, idProduct=4ab1, bcdDevice=fd.c9 [ 914.230394][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.230414][ T10] usb 9-1: Product: syz [ 914.230427][ T10] usb 9-1: Manufacturer: syz [ 914.230439][ T10] usb 9-1: SerialNumber: syz [ 914.533436][ T10] usb 9-1: bad CDC descriptors [ 914.687397][T16532] udevd[16532]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 914.711926][ T10] usb 9-1: USB disconnect, device number 14 [ 918.439685][T16550] Can't find ip_set type bitmap:ip [ 919.913568][ T5872] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 920.269522][ T5872] usb 9-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 920.269550][ T5872] usb 9-1: config 127 has 0 interfaces, different from the descriptor's value: 1 [ 920.269583][ T5872] usb 9-1: New USB device found, idVendor=d18e, idProduct=ee3b, bcdDevice=1c.98 [ 920.269605][ T5872] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.915736][ T5872] usb 9-1: USB disconnect, device number 15 [ 930.259207][T16747] dummy0: entered promiscuous mode [ 931.057414][T16746] dummy0: left promiscuous mode [ 931.635069][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.635136][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.382978][ T5880] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 935.555933][ T5880] usb 9-1: Using ep0 maxpacket: 32 [ 935.558501][ T5880] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 935.558525][ T5880] usb 9-1: config 5 has 0 interfaces, different from the descriptor's value: 1 [ 935.561373][ T5880] usb 9-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d [ 935.561400][ T5880] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.561419][ T5880] usb 9-1: Product: syz [ 935.561433][ T5880] usb 9-1: Manufacturer: syz [ 935.561447][ T5880] usb 9-1: SerialNumber: syz [ 935.910357][ T5880] apple-mfi-fastcharge 9-1: USB disconnect, device number 16 [ 940.692755][T16851] Can't find ip_set type bitmap:ip [ 946.206398][T16929] Can't find ip_set type bitmap:ip [ 948.146123][T16964] Can't find ip_set type bitmap:ip [ 949.253972][T11243] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 949.636105][T11243] usb 5-1: unable to get BOS descriptor or descriptor too short [ 949.638178][T11243] usb 5-1: config index 0 descriptor too short (expected 57261, got 36) [ 949.638204][T11243] usb 5-1: config 110 has too many interfaces: 34, using maximum allowed: 32 [ 949.638224][T11243] usb 5-1: config 110 has an invalid interface number: 227 but max is 33 [ 949.638243][T11243] usb 5-1: config 110 has an invalid descriptor of length 0, skipping remainder of the config [ 949.638261][T11243] usb 5-1: config 110 has 1 interface, different from the descriptor's value: 34 [ 949.638281][T11243] usb 5-1: config 110 has no interface number 0 [ 949.638320][T11243] usb 5-1: config 110 interface 227 has no altsetting 0 [ 949.723696][T11243] usb 5-1: string descriptor 0 read error: -22 [ 949.723828][T11243] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=cc.bf [ 949.723851][T11243] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.827124][T11243] imon_raw 5-1:110.227: IR endpoint missing [ 950.089327][ T5879] usb 5-1: USB disconnect, device number 9 [ 952.374678][T13206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 952.374708][T13206] CPU: 1 UID: 0 PID: 13206 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 952.374724][T13206] Tainted: [L]=SOFTLOCKUP [ 952.374728][T13206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 952.374736][T13206] Workqueue: hci3 hci_rx_work [ 952.374880][T13206] Call Trace: [ 952.374891][T13206] [ 952.374901][T13206] dump_stack_lvl+0xe8/0x150 [ 952.374949][T13206] sysfs_create_dir_ns+0x271/0x2a0 [ 952.375011][T13206] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 952.375075][T13206] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 952.375088][T13206] ? rt_spin_unlock+0x160/0x200 [ 952.375100][T13206] kobject_add_internal+0x631/0xd10 [ 952.375184][T13206] kobject_add+0x163/0x240 [ 952.375202][T13206] ? __pfx_kobject_add+0x10/0x10 [ 952.375222][T13206] ? get_device_parent+0x370/0x3a0 [ 952.375305][T13206] device_add+0x408/0xb80 [ 952.375322][T13206] hci_conn_add_sysfs+0xd5/0x210 [ 952.375373][T13206] le_conn_complete_evt+0xf1d/0x1430 [ 952.375435][T13206] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 952.375457][T13206] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 952.375481][T13206] ? lockdep_hardirqs_on+0x7a/0x110 [ 952.375533][T13206] ? skb_pull_data+0xfb/0x200 [ 952.375620][T13206] hci_le_enh_conn_complete_evt+0x189/0x490 [ 952.375637][T13206] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 952.375660][T13206] hci_event_packet+0x7af/0x12c0 [ 952.375698][T13206] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 952.375714][T13206] ? __pfx_hci_event_packet+0x10/0x10 [ 952.375726][T13206] ? rt_spin_unlock+0x14f/0x200 [ 952.375743][T13206] ? hci_send_to_monitor+0xe2/0x590 [ 952.375756][T13206] hci_rx_work+0x3ee/0x1030 [ 952.375772][T13206] ? process_scheduled_works+0xa25/0x1830 [ 952.375802][T13206] process_scheduled_works+0xb02/0x1830 [ 952.375848][T13206] ? __pfx_process_scheduled_works+0x10/0x10 [ 952.375880][T13206] ? assign_work+0x3d5/0x5e0 [ 952.375911][T13206] worker_thread+0xa50/0xfc0 [ 952.375947][T13206] kthread+0x388/0x470 [ 952.375960][T13206] ? __pfx_worker_thread+0x10/0x10 [ 952.375972][T13206] ? __pfx_kthread+0x10/0x10 [ 952.375984][T13206] ret_from_fork+0x51e/0xb90 [ 952.376012][T13206] ? __pfx_ret_from_fork+0x10/0x10 [ 952.376033][T13206] ? __switch_to+0xc7d/0x1450 [ 952.376055][T13206] ? __pfx_kthread+0x10/0x10 [ 952.376067][T13206] ret_from_fork_asm+0x1a/0x30 [ 952.376088][T13206] [ 952.376173][T13206] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 952.376197][T13206] Bluetooth: hci3: failed to register connection device [ 953.332422][T17054] netlink: 'syz.4.3216': attribute type 2 has an invalid length. [ 954.192853][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 954.342813][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 954.345010][ T10] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 954.345035][ T10] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 954.347465][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=9236, bcdDevice=27.1e [ 954.347492][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.347511][ T10] usb 5-1: Product: syz [ 954.347525][ T10] usb 5-1: Manufacturer: syz [ 954.347538][ T10] usb 5-1: SerialNumber: syz [ 954.592249][T11243] usb 5-1: USB disconnect, device number 10 [ 957.740855][T17113] Can't find ip_set type bitmap:ip [ 958.973729][T13206] Bluetooth: hci5: unexpected event for opcode 0x0401 [ 964.743652][T13206] Bluetooth: hci5: unexpected event for opcode 0x0c38 [ 967.491897][T17210] Can't find ip_set type bitmap:ip [ 968.232633][T17227] futex_wake_op: syz.8.3262 tries to shift op by 32; fix this program [ 972.652308][T17275] futex_wake_op: syz.6.3271 tries to shift op by 144; fix this program [ 976.126702][ T37] audit: type=1326 audit(1772320670.159:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17306 comm="syz.6.3281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f006a86c799 code=0x0 [ 976.272863][ T5907] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 976.422864][ T5907] usb 6-1: Using ep0 maxpacket: 32 [ 976.429114][ T5907] usb 6-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 976.429141][ T5907] usb 6-1: config 10 has 0 interfaces, different from the descriptor's value: 2 [ 976.431429][ T5907] usb 6-1: New USB device found, idVendor=1164, idProduct=0602, bcdDevice= 3.e4 [ 976.431457][ T5907] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.431476][ T5907] usb 6-1: Product: syz [ 976.431489][ T5907] usb 6-1: Manufacturer: syz [ 976.431500][ T5907] usb 6-1: SerialNumber: syz [ 976.676179][ T5907] usb 6-1: USB disconnect, device number 8 [ 981.724940][ T809] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 981.888281][ T809] usb 5-1: unable to get BOS descriptor or descriptor too short [ 981.889603][ T809] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 981.889626][ T809] usb 5-1: config 14 has 0 interfaces, different from the descriptor's value: 1 [ 981.892154][ T809] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=75.c2 [ 981.892180][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.892199][ T809] usb 5-1: Product: syz [ 981.892213][ T809] usb 5-1: Manufacturer: syz [ 981.892227][ T809] usb 5-1: SerialNumber: syz [ 982.991201][ T809] usb 5-1: USB disconnect, device number 11 [ 986.590020][T17442] ceph: No mds server is up or the cluster is laggy [ 986.750159][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 986.750336][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 988.395074][T17457] Can't find ip_set type bitmap:ip [ 988.922966][ T10] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 989.075061][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.075088][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 989.075147][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 989.075171][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 989.077757][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 989.077838][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.077859][ T10] usb 6-1: Product: syz [ 989.077872][ T10] usb 6-1: Manufacturer: syz [ 989.077886][ T10] usb 6-1: SerialNumber: syz [ 990.372818][ T10] usb 6-1: 0:2 : does not exist [ 992.397130][T17514] ceph: No mds server is up or the cluster is laggy [ 992.515685][ T10] usb 6-1: USB disconnect, device number 9 [ 992.582375][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 992.582545][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 992.876943][T16544] udevd[16544]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.075520][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.075587][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.872860][T11243] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 997.034793][T11243] usb 9-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 997.034827][T11243] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 997.034852][T11243] usb 9-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 997.034891][T11243] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 997.034913][T11243] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.042417][T17600] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 997.330962][T11243] aiptek 9-1:17.0: Aiptek using 400 ms programming speed [ 997.359269][T11243] input: Aiptek as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:17.0/input/input24 [ 999.395069][ C1] aiptek 9-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 999.395130][T11243] usb 9-1: USB disconnect, device number 17 [ 1000.582861][ T5880] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1000.845306][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 1000.857776][ T5880] usb 5-1: config 232 has an invalid interface number: 126 but max is 0 [ 1000.857803][ T5880] usb 5-1: config 232 has no interface number 0 [ 1000.857844][ T5880] usb 5-1: config 232 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1000.857868][ T5880] usb 5-1: config 232 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1000.857889][ T5880] usb 5-1: config 232 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 1000.857912][ T5880] usb 5-1: config 232 interface 126 has no altsetting 0 [ 1000.902861][ T5880] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1000.902889][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.902907][ T5880] usb 5-1: Product: syz [ 1000.902921][ T5880] usb 5-1: Manufacturer: syz [ 1000.902934][ T5880] usb 5-1: SerialNumber: syz [ 1000.922986][T17662] netlink: 'syz.6.3393': attribute type 6 has an invalid length. [ 1000.970646][T17640] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1001.051719][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3395'. [ 1001.299831][ T5880] ir_usb 5-1:232.126: IR Dongle converter detected [ 1001.301811][ T5880] usb 5-1: IRDA class descriptor not found, device not bound [ 1001.365620][ T5880] usb 5-1: USB disconnect, device number 12 [ 1006.817758][T17738] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3416'. [ 1007.274917][T17751] netlink: 'syz.8.3420': attribute type 1 has an invalid length. [ 1008.495762][T17762] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3425'. [ 1008.495789][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3425'. [ 1008.495803][T17762] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3425'. [ 1008.854778][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3428'. [ 1009.332282][T17784] Can't find ip_set type bitmap:ip [ 1011.409362][T17807] netlink: 'syz.4.3440': attribute type 4 has an invalid length. [ 1011.410226][T17807] netlink: 'syz.4.3440': attribute type 4 has an invalid length. [ 1011.410245][T17807] netlink: 'syz.4.3440': attribute type 4 has an invalid length. [ 1011.410259][T17807] netlink: 'syz.4.3440': attribute type 4 has an invalid length. [ 1011.410272][T17807] netlink: 'syz.4.3440': attribute type 4 has an invalid length. [ 1011.412162][T17807] netlink: 'syz.4.3440': attribute type 4 has an invalid length. [ 1011.412298][T17807] netlink: 'syz.4.3440': attribute type 4 has an invalid length. [ 1011.412565][T17807] netlink: 'syz.4.3440': attribute type 4 has an invalid length. [ 1011.514648][T17807] netlink: 'syz.4.3440': attribute type 4 has an invalid length. [ 1015.328295][T17879] validate_nla: 44 callbacks suppressed [ 1015.328315][T17879] netlink: 'syz.5.3464': attribute type 10 has an invalid length. [ 1015.390210][T17879] team0: Device xfrm0 is of different type [ 1015.521079][T17887] dummy0: entered promiscuous mode [ 1015.586277][T17884] Can't find ip_set type bitmap:ip [ 1017.192844][T17886] dummy0: left promiscuous mode [ 1030.056333][T18074] Can't find ip_set type bitmap:ip [ 1031.359274][T13206] Bluetooth: unknown link type 4 [ 1031.359360][T13206] Bluetooth: hci3: connection err: -111 [ 1033.301038][T18149] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 1033.301059][T18149] PKCS7: Only support pkcs7_signedData type [ 1034.867554][T18190] Can't find ip_set type bitmap:ip [ 1035.341754][T18208] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3576'. [ 1038.371150][T18233] Can't find ip_set type bitmap:ip [ 1040.287388][T18267] netlink: 'syz.5.3589': attribute type 23 has an invalid length. [ 1043.625323][T18334] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3616'. [ 1047.199978][T18373] bond3: entered promiscuous mode [ 1047.200006][T18373] bond3: entered allmulticast mode [ 1047.200389][T18373] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1048.601111][T18400] netlink: 'syz.8.3622': attribute type 1 has an invalid length. [ 1048.601135][T18400] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3622'. [ 1048.601161][T18400] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3622'. [ 1048.601175][T18400] netlink: 658 bytes leftover after parsing attributes in process `syz.8.3622'. [ 1048.818802][ T37] audit: type=1326 audit(1772320742.849:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18407 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006a86c799 code=0x7ffc0000 [ 1048.872809][ T37] audit: type=1326 audit(1772320742.859:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18407 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f006a86c799 code=0x7ffc0000 [ 1048.872862][ T37] audit: type=1326 audit(1772320742.869:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18407 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f006a82cfce code=0x7ffc0000 [ 1048.872904][ T37] audit: type=1326 audit(1772320742.869:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18407 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006a86c42b code=0x7ffc0000 [ 1048.872943][ T37] audit: type=1326 audit(1772320742.869:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18407 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006a86c42b code=0x7ffc0000 [ 1048.872982][ T37] audit: type=1326 audit(1772320742.869:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18407 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006a86c42b code=0x7ffc0000 [ 1048.873078][ T37] audit: type=1326 audit(1772320742.869:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18407 comm="syz.6.3642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f006a86c42b code=0x7ffc0000 [ 1053.408633][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3668'. [ 1053.615703][T18504] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3674'. [ 1053.633492][T18506] dummy0: entered promiscuous mode [ 1054.443775][T18502] dummy0: left promiscuous mode [ 1054.476924][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.476999][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.557239][T18526] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3680'. [ 1054.557257][T18526] netlink: 'syz.8.3680': attribute type 1 has an invalid length. [ 1056.458389][T18554] netlink: 400 bytes leftover after parsing attributes in process `syz.6.3690'. [ 1056.542814][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1056.699463][ T10] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1056.699495][ T10] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1056.699514][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1056.699568][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1056.699594][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1056.793472][ T10] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1056.793504][ T10] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1056.793523][ T10] usb 9-1: Product: syz [ 1056.793538][ T10] usb 9-1: Manufacturer: syz [ 1056.837466][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 1056.837485][ T10] cdc_wdm 9-1:1.0: skipping garbage [ 1056.863148][ T10] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1056.863168][ T10] cdc_wdm 9-1:1.0: Unknown control protocol [ 1057.280787][ T5880] usb 9-1: USB disconnect, device number 18 [ 1061.430965][T18689] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3716'. [ 1064.527232][T18781] netlink: 180 bytes leftover after parsing attributes in process `syz.6.3778'. [ 1068.001453][T18833] Can't find ip_set type bitmap:ip [ 1072.010957][T18878] Can't find ip_set type bitmap:ip [ 1072.442682][T18885] Can't find ip_set type bitmap:ip [ 1073.611531][T18898] Can't find ip_set type bitmap:ip [ 1074.123584][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1074.795601][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1074.839732][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.839786][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1074.839812][ T10] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1074.839834][ T10] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1074.839859][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1074.857293][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1074.857323][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.857342][ T10] usb 5-1: Product: syz [ 1074.857355][ T10] usb 5-1: Manufacturer: syz [ 1074.857369][ T10] usb 5-1: SerialNumber: syz [ 1074.929540][ T10] usb 5-1: config 0 descriptor?? [ 1074.954884][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 1075.171254][ T10] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 1075.171734][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 1075.194279][ T10] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1075.396823][ T5872] usb 5-1: USB disconnect, device number 13 [ 1075.575616][T18953] netlink: 'syz.6.3848': attribute type 3 has an invalid length. [ 1078.608505][T18993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1079.403650][T19005] netlink: 'syz.4.3867': attribute type 3 has an invalid length. [ 1079.574829][T19012] netlink: set zone limit has 4 unknown bytes [ 1079.602906][ T10] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 1079.754298][ T10] usb 9-1: config 0 has an invalid interface number: 64 but max is 0 [ 1079.754326][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1079.754344][ T10] usb 9-1: config 0 has no interface number 0 [ 1079.756424][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1079.756450][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.756468][ T10] usb 9-1: Product: syz [ 1079.756476][ T10] usb 9-1: Manufacturer: syz [ 1079.756483][ T10] usb 9-1: SerialNumber: syz [ 1080.684440][ T10] usb 9-1: config 0 descriptor?? [ 1080.902954][ T10] uvcvideo 9-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1080.903034][ T10] uvcvideo 9-1:0.64: No valid video chain found. [ 1080.936501][T19027] netdevsim netdevsim6 : renamed from netdevsim0 (while UP) [ 1081.110632][T15821] usb 9-1: USB disconnect, device number 19 [ 1081.172997][ T5872] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1081.334312][ T5872] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1081.334342][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.334360][ T5872] usb 6-1: Product: syz [ 1081.334373][ T5872] usb 6-1: Manufacturer: syz [ 1081.334386][ T5872] usb 6-1: SerialNumber: syz [ 1081.372673][ T5872] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1081.535913][T19056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1081.594870][ T5879] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1081.745723][T19064] overlayfs: failed to resolve 'smackfstransmute='': -2 [ 1082.078855][T15821] usb 6-1: USB disconnect, device number 10 [ 1082.309906][T19084] bond1: option xmit_hash_policy: invalid value (65) [ 1082.419436][T19084] bond1 (unregistering): Released all slaves [ 1084.512702][ T5879] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1084.513353][ T5879] ath9k_htc: Failed to initialize the device [ 1084.843312][T15821] usb 6-1: ath9k_htc: USB layer deinitialized [ 1085.266592][T19123] ip6gre1: entered allmulticast mode [ 1085.283872][ T1103] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1086.332772][T19137] netlink: 'syz.6.3926': attribute type 10 has an invalid length. [ 1086.332796][T19137] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3926'. [ 1086.332933][T19137] dummy0: entered promiscuous mode [ 1086.333373][T19137] bridge0: port 4(dummy0) entered blocking state [ 1086.333496][T19137] bridge0: port 4(dummy0) entered disabled state [ 1086.333663][T19137] dummy0: entered allmulticast mode [ 1086.337280][T19137] bridge0: port 4(dummy0) entered blocking state [ 1086.337461][T19137] bridge0: port 4(dummy0) entered forwarding state [ 1087.394845][T19146] Can't find ip_set type bitmap:ip [ 1089.502992][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1089.625619][T19167] vivid-000: disconnect [ 1089.625974][T19166] vivid-000: reconnect [ 1093.512905][T19233] IPVS: length: 218 != 24 [ 1097.982839][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1100.742340][T19356] overlayfs: missing 'lowerdir' [ 1101.533484][T19370] Can't find ip_set type bitmap:ip [ 1101.952793][T15821] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1102.221145][T15821] usb 6-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=67.7a [ 1102.221174][T15821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.221193][T15821] usb 6-1: Product: syz [ 1102.221206][T15821] usb 6-1: Manufacturer: syz [ 1102.221219][T15821] usb 6-1: SerialNumber: syz [ 1103.168387][T15821] gspca_main: spca501-2.14.0 probing 0497:c001 [ 1103.688719][T15821] gspca_spca501: reg write: error -71 [ 1103.688739][T15821] spca501 6-1:68.0: Reg write failed for 0x02,0xa048,0x00 [ 1103.688852][T15821] spca501 6-1:68.0: probe with driver spca501 failed with error -22 [ 1103.762335][T15821] usb 6-1: USB disconnect, device number 11 [ 1107.242945][T19436] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4051'. [ 1107.359904][T19436] bond4: entered promiscuous mode [ 1107.712263][T19449] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4057'. [ 1114.618996][T19539] netlink: 'syz.5.4092': attribute type 180 has an invalid length. [ 1114.830981][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1116.494596][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.494741][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1118.078727][T19613] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 1119.410767][T19640] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4139'. [ 1119.410792][T19640] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4139'. [ 1119.410807][T19640] netlink: 'syz.5.4139': attribute type 6 has an invalid length. [ 1119.410819][T19640] netlink: 'syz.5.4139': attribute type 5 has an invalid length. [ 1119.410831][T19640] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4139'. [ 1119.660590][T19650] netlink: zone id is out of range [ 1119.660606][T19650] netlink: zone id is out of range [ 1119.660614][T19650] netlink: zone id is out of range [ 1119.660621][T19650] netlink: zone id is out of range [ 1119.660628][T19650] netlink: zone id is out of range [ 1119.660635][T19650] netlink: zone id is out of range [ 1119.660642][T19650] netlink: zone id is out of range [ 1119.660649][T19650] netlink: zone id is out of range [ 1119.660656][T19650] netlink: zone id is out of range [ 1120.861873][T19659] Can't find ip_set type bitmap:ip [ 1122.770180][T19697] Can't find ip_set type bitmap:ip [ 1123.291252][T19717] netlink: 76 bytes leftover after parsing attributes in process `syz.8.4172'. [ 1123.409711][T19720] net_ratelimit: 8 callbacks suppressed [ 1123.409731][T19720] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1124.365754][T19739] Can't find ip_set type bitmap:ip [ 1124.541838][T19736] netlink: 'syz.4.4179': attribute type 1 has an invalid length. [ 1124.541856][T19736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4179'. [ 1125.724693][T19756] Can't find ip_set type bitmap:ip [ 1126.159947][T19766] misc userio: Invalid payload size [ 1128.690495][T19816] Can't find ip_set type bitmap:ip [ 1131.018522][T19864] Can't find ip_set type bitmap:ip [ 1131.815088][T19883] netlink: 'syz.8.4241': attribute type 10 has an invalid length. [ 1132.281166][T19903] netlink: get zone limit has 4 unknown bytes [ 1133.442803][ T5859] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1133.592688][ T5859] usb 9-1: Using ep0 maxpacket: 16 [ 1133.595079][ T5859] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1133.595104][ T5859] usb 9-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config [ 1133.595122][ T5859] usb 9-1: config 0 has no interface number 0 [ 1133.598526][ T5859] usb 9-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.17 [ 1133.598553][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.598572][ T5859] usb 9-1: Product: syz [ 1133.598586][ T5859] usb 9-1: Manufacturer: syz [ 1133.598600][ T5859] usb 9-1: SerialNumber: syz [ 1133.729542][ T5859] usb 9-1: config 0 descriptor?? [ 1133.760707][ T5859] uvcvideo 9-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 1133.760739][ T5859] uvcvideo 9-1:0.105: No valid video chain found. [ 1133.951510][T15434] usb 9-1: USB disconnect, device number 20 [ 1136.982306][T20002] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4292'. [ 1136.982341][T20002] netlink: 'syz.8.4292': attribute type 5 has an invalid length. [ 1136.982356][T20002] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4292'. [ 1137.025835][T20002] geneve3: entered promiscuous mode [ 1137.025857][T20002] geneve3: entered allmulticast mode [ 1137.030334][ T6409] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 1137.030648][ T6409] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1137.030686][ T6409] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1137.030724][ T6409] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1141.053188][T20090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4331'. [ 1143.262654][T20134] Can't find ip_set type bitmap:ip [ 1143.552825][T20143] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4350'. [ 1143.552843][T20143] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4350'. [ 1143.552864][T20143] netlink: 'syz.6.4350': attribute type 4 has an invalid length. [ 1145.771611][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4362'. [ 1147.405804][T20200] netlink: 'syz.8.4371': attribute type 27 has an invalid length. [ 1147.902990][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1148.017979][T20219] netlink: 'syz.5.4376': attribute type 21 has an invalid length. [ 1148.018002][T20219] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4376'. [ 1148.018100][T20219] netlink: 'syz.5.4376': attribute type 5 has an invalid length. [ 1148.018113][T20219] netlink: 'syz.5.4376': attribute type 6 has an invalid length. [ 1148.018125][T20219] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4376'. [ 1150.247287][T20257] overlay: Unknown parameter '\' [ 1150.696462][T20268] netlink: 'syz.5.4394': attribute type 61 has an invalid length. [ 1152.302939][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1152.452761][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1152.475339][ T10] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1152.475369][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.475387][ T10] usb 6-1: Product: syz [ 1152.475400][ T10] usb 6-1: Manufacturer: syz [ 1152.475414][ T10] usb 6-1: SerialNumber: syz [ 1152.669274][ T10] usb 6-1: config 0 descriptor?? [ 1152.684490][T20309] ip6gre1: entered promiscuous mode [ 1153.042759][ T10] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: failure sending bit rate [ 1153.042804][ T10] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 1153.102089][ T10] usb 6-1: USB disconnect, device number 12 [ 1157.450044][T20385] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4437'. [ 1158.292868][T20410] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1158.292896][T20410] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1158.321187][T20410] vhci_hcd vhci_hcd.0: Device attached [ 1158.340033][T20411] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 0 [ 1158.341030][T17520] vhci_hcd vhci_hcd.4: stop threads [ 1158.341051][T17520] vhci_hcd vhci_hcd.4: release socket [ 1158.341088][T17520] vhci_hcd vhci_hcd.4: disconnect device [ 1158.450519][T20416] tmpfs: Bad value for 'mpol' [ 1166.068736][T20552] : entered promiscuous mode [ 1169.811809][T20611] netlink: 'syz.8.4536': attribute type 10 has an invalid length. [ 1169.830073][T20611] team0: Port device netdevsim0 added [ 1172.093018][T20643] Can't find ip_set type bitmap:ip [ 1172.342670][T15434] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1173.388867][T15434] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.388893][T15434] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1173.391379][T15434] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1173.391405][T15434] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1173.391424][T15434] usb 6-1: SerialNumber: syz [ 1173.430775][T15434] usb 6-1: 0:2 : does not exist [ 1173.454580][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4553'. [ 1173.454627][T20658] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1173.455193][T20658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4553'. [ 1173.875037][T15434] usb 6-1: USB disconnect, device number 13 [ 1174.957287][T20676] binder: 20674:20676 ioctl c00c6211 ffffffffffffffff returned -14 [ 1175.348517][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4545'. [ 1177.477174][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.477241][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.394618][T20730] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4588'. [ 1178.394642][T20730] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4588'. [ 1178.394660][T20730] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4588'. [ 1180.164155][T20755] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1180.536577][T20762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1182.799033][T20782] Can't find ip_set type bitmap:ip [ 1185.081636][T20825] netlink: 'syz.5.4630': attribute type 1 has an invalid length. [ 1187.347963][T20847] overlayfs: failed to clone upperpath [ 1189.731832][ T37] audit: type=1107 audit(1772320883.729:113): pid=20906 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='' [ 1190.694820][T20919] Can't find ip_set type bitmap:ip [ 1192.093396][T20974] usb usb9: usbfs: process 20974 (syz.4.4693) did not claim interface 3 before use [ 1193.015074][T20984] Can't find ip_set type bitmap:ip [ 1193.015577][T20983] Can't find ip_set type bitmap:ip [ 1193.292697][ T5879] ------------[ cut here ]------------ [ 1193.292712][ T5879] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1193.292734][ T5879] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:5/5879 [ 1193.292863][ T5879] Modules linked in: [ 1193.292885][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1193.292912][ T5879] Tainted: [L]=SOFTLOCKUP [ 1193.292919][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1193.292932][ T5879] Workqueue: events drm_fb_helper_damage_work [ 1193.293035][ T5879] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1193.293065][ T5879] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 aa b9 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1193.293083][ T5879] RSP: 0018:ffffc9000566f8e0 EFLAGS: 00010246 [ 1193.293099][ T5879] RAX: 1ffff11004a8d400 RBX: ffffffff8f751030 RCX: 0000000000000000 [ 1193.293114][ T5879] RDX: ffffffff8bbf30c0 RSI: ffffffff8bc0efc0 RDI: ffffffff8f751030 [ 1193.293128][ T5879] RBP: ffffc9000566f9c8 R08: 0000000000000000 R09: 0000000000000000 [ 1193.293141][ T5879] R10: dffffc0000000000 R11: fffffbfff1ed4617 R12: ffffffff8bc0efc0 [ 1193.293155][ T5879] R13: ffff88802546a000 R14: 0000000000000000 R15: ffffffff8bbf30c0 [ 1193.293170][ T5879] FS: 0000000000000000(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 1193.293187][ T5879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1193.293200][ T5879] CR2: 0000001b2ee21ff8 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 1193.293217][ T5879] Call Trace: [ 1193.293226][ T5879] [ 1193.293240][ T5879] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1193.293270][ T5879] ? rt_spin_unlock+0x14f/0x200 [ 1193.293292][ T5879] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1193.293326][ T5879] ? rt_spin_unlock+0x160/0x200 [ 1193.293351][ T5879] ? drm_vblank_get+0x147/0x260 [ 1193.293382][ T5879] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1193.293412][ T5879] drm_fb_helper_damage_work+0x131/0x6f0 [ 1193.293454][ T5879] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1193.293489][ T5879] ? process_scheduled_works+0xa25/0x1830 [ 1193.293517][ T5879] ? process_scheduled_works+0xa25/0x1830 [ 1193.293546][ T5879] process_scheduled_works+0xb02/0x1830 [ 1193.293603][ T5879] ? __pfx_process_scheduled_works+0x10/0x10 [ 1193.293637][ T5879] ? assign_work+0x3d5/0x5e0 [ 1193.293670][ T5879] worker_thread+0xa50/0xfc0 [ 1193.293735][ T5879] kthread+0x388/0x470 [ 1193.293757][ T5879] ? __pfx_worker_thread+0x10/0x10 [ 1193.293783][ T5879] ? __pfx_kthread+0x10/0x10 [ 1193.293805][ T5879] ret_from_fork+0x51e/0xb90 [ 1193.293843][ T5879] ? __pfx_ret_from_fork+0x10/0x10 [ 1193.293868][ T5879] ? __switch_to+0xc7d/0x1450 [ 1193.293899][ T5879] ? __pfx_kthread+0x10/0x10 [ 1193.293921][ T5879] ret_from_fork_asm+0x1a/0x30 [ 1193.293959][ T5879] [ 1193.293977][ T5879] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1193.293993][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: kworker/1:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1193.294020][ T5879] Tainted: [L]=SOFTLOCKUP [ 1193.294026][ T5879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1193.294039][ T5879] Workqueue: events drm_fb_helper_damage_work [ 1193.294069][ T5879] Call Trace: [ 1193.294076][ T5879] [ 1193.294084][ T5879] vpanic+0x56c/0xa60 [ 1193.294129][ T5879] ? __pfx__printk+0x10/0x10 [ 1193.294150][ T5879] ? __pfx_vpanic+0x10/0x10 [ 1193.294177][ T5879] ? is_bpf_text_address+0x292/0x2b0 [ 1193.294204][ T5879] ? is_bpf_text_address+0x26/0x2b0 [ 1193.294240][ T5879] panic+0xc5/0xd0 [ 1193.294268][ T5879] ? __pfx_panic+0x10/0x10 [ 1193.294306][ T5879] ? ret_from_fork_asm+0x1a/0x30 [ 1193.294330][ T5879] __warn+0x315/0x4f0 [ 1193.294357][ T5879] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1193.294388][ T5879] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1193.294420][ T5879] __report_bug+0x29a/0x540 [ 1193.294460][ T5879] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 1193.294490][ T5879] ? __pfx___report_bug+0x10/0x10 [ 1193.294536][ T5879] report_bug_entry+0x19a/0x290 [ 1193.294563][ T5879] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1193.294591][ T5879] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 1193.294620][ T5879] handle_bug+0xca/0x200 [ 1193.294693][ T5879] exc_invalid_op+0x1a/0x50 [ 1193.294722][ T5879] asm_exc_invalid_op+0x1a/0x20 [ 1193.294760][ T5879] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 1193.294791][ T5879] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 aa b9 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 1193.294807][ T5879] RSP: 0018:ffffc9000566f8e0 EFLAGS: 00010246 [ 1193.294823][ T5879] RAX: 1ffff11004a8d400 RBX: ffffffff8f751030 RCX: 0000000000000000 [ 1193.294837][ T5879] RDX: ffffffff8bbf30c0 RSI: ffffffff8bc0efc0 RDI: ffffffff8f751030 [ 1193.294852][ T5879] RBP: ffffc9000566f9c8 R08: 0000000000000000 R09: 0000000000000000 [ 1193.294865][ T5879] R10: dffffc0000000000 R11: fffffbfff1ed4617 R12: ffffffff8bc0efc0 [ 1193.294880][ T5879] R13: ffff88802546a000 R14: 0000000000000000 R15: ffffffff8bbf30c0 [ 1193.294916][ T5879] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 1193.294944][ T5879] ? rt_spin_unlock+0x14f/0x200 [ 1193.294965][ T5879] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1193.294997][ T5879] ? rt_spin_unlock+0x160/0x200 [ 1193.295021][ T5879] ? drm_vblank_get+0x147/0x260 [ 1193.295052][ T5879] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 1193.295081][ T5879] drm_fb_helper_damage_work+0x131/0x6f0 [ 1193.295121][ T5879] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 1193.295157][ T5879] ? process_scheduled_works+0xa25/0x1830 [ 1193.295183][ T5879] ? process_scheduled_works+0xa25/0x1830 [ 1193.295212][ T5879] process_scheduled_works+0xb02/0x1830 [ 1193.295268][ T5879] ? __pfx_process_scheduled_works+0x10/0x10 [ 1193.295302][ T5879] ? assign_work+0x3d5/0x5e0 [ 1193.295335][ T5879] worker_thread+0xa50/0xfc0 [ 1193.295390][ T5879] kthread+0x388/0x470 [ 1193.295412][ T5879] ? __pfx_worker_thread+0x10/0x10 [ 1193.295437][ T5879] ? __pfx_kthread+0x10/0x10 [ 1193.295459][ T5879] ret_from_fork+0x51e/0xb90 [ 1193.295489][ T5879] ? __pfx_ret_from_fork+0x10/0x10 [ 1193.295515][ T5879] ? __switch_to+0xc7d/0x1450 [ 1193.295543][ T5879] ? __pfx_kthread+0x10/0x10 [ 1193.295566][ T5879] ret_from_fork_asm+0x1a/0x30 [ 1193.295602][ T5879] [ 1193.295940][ T5879] Kernel Offset: disabled