last executing test programs: 2m58.66080875s ago: executing program 4 (id=2570): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = timerfd_create(0x8, 0x0) read(r0, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m58.344175334s ago: executing program 4 (id=2573): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 2m57.975859601s ago: executing program 4 (id=2578): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file2\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) 2m57.779451135s ago: executing program 4 (id=2582): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x141) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 2m57.549969511s ago: executing program 4 (id=2585): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x29, 0x34}], 0x10}}], 0x1, 0x0) 2m57.207909129s ago: executing program 4 (id=2590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000000)="ba4100ec66b9f40a000066f081aa000056f900000f01ca0f005706640f32660fe8e9f30f0936f2260f09ffc5", 0x2c}], 0x1, 0x80, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m56.77177535s ago: executing program 32 (id=2590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000000)="ba4100ec66b9f40a000066f081aa000056f900000f01ca0f005706640f32660fe8e9f30f0936f2260f09ffc5", 0x2c}], 0x1, 0x80, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m0.487319591s ago: executing program 1 (id=3195): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000340)="aefd00005a90f5ff0770b857bcc179cec865d76641cb010052f400"/36, 0x24}], 0x1) 2m0.243696311s ago: executing program 1 (id=3198): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd9000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x25, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 2m0.1151485s ago: executing program 1 (id=3200): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m59.69577972s ago: executing program 5 (id=3204): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000fb"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000005c0)=r1, 0x12) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 1m59.590399038s ago: executing program 1 (id=3205): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 1m59.451983039s ago: executing program 5 (id=3207): r0 = inotify_init() r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) r2 = memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) close(0x3) pwrite64(r2, &(0x7f00000002c0)="e6", 0x1, 0x4002) fcntl$addseals(r2, 0x409, 0x6) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000180)={r2, 0x1, 0x0, 0x2000}) close_range(r0, 0xffffffffffffffff, 0x0) 1m59.263923982s ago: executing program 1 (id=3208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001300010027bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="020300000000000008000a00", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x402c004}, 0x0) 1m59.232827962s ago: executing program 5 (id=3209): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x5b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fd9000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x25, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11}}}}}}}, 0x0) 1m58.989852456s ago: executing program 5 (id=3212): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) chown(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r1, 0x3, 0x1) 1m58.928005115s ago: executing program 1 (id=3213): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 1m58.173328216s ago: executing program 33 (id=3213): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) 1m58.140966027s ago: executing program 5 (id=3219): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000414}], 0x1, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d6, 0x4000845) 1m57.9640012s ago: executing program 5 (id=3220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba00000000650f32660fc775022e0fba600c980f320f3566b857000f00d0", 0x4a}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m57.236403375s ago: executing program 34 (id=3220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26ba00000000650f32660fc775022e0fba600c980f320f3566b857000f00d0", 0x4a}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd3000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.20919097s ago: executing program 2 (id=4210): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xb8, 0x0, 0xfffffffffffffff9, [{{0x3, 0x2, 0x40000000000, 0x2ea8, 0x7fffffff, 0x2, {0x5, 0x2, 0x6, 0x7fffffffffffffff, 0x5, 0x4, 0x3, 0x9, 0x4, 0xa000, 0x3, 0x0, r2, 0x7, 0x3}}, {0x5, 0x8, 0xe, 0x7ff, 'chacha20-neon\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)={0x29, 0x4, 0x0, {0x1, 0x8, 0x1, 0x0, [0x0]}}, 0x29) 8.171709954s ago: executing program 2 (id=4214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x4, 0x1000, &(0x7f0000006000/0x1000)=nil}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000005c0)="2ef2dd050080000048b844410000000000000f23d0440f01b8f000000035000000010f23f836362e6726af440f20c0350e000000440f22c0b805000000b900980000662666450f380455410f01c965470f01c4410f79d226450f01cb660f013b", 0x60}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1c0) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[], 0x28}}, 0x0) pipe2$9p(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 7.022070083s ago: executing program 2 (id=4222): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 6.126544135s ago: executing program 2 (id=4226): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) fsopen(0x0, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(0x0, 0x442281, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) 5.873559915s ago: executing program 2 (id=4229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000acd000/0x400000)=nil) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000280)=ANY=[], 0x8) sendmsg$inet6(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x60}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r5, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 5.559841414s ago: executing program 3 (id=4234): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r1], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) shutdown(r0, 0x1) recvfrom(r0, &(0x7f0000000280)=""/214, 0xd6, 0x62, 0x0, 0x0) 5.329195222s ago: executing program 6 (id=4238): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0xc5e, 0x4, 0x1, 0x168c240b, r1}}], 0x20, 0xc005}], 0x1, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x2}, 0x8) 5.220766215s ago: executing program 3 (id=4239): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d3c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f18fb4d64db5c0404f01b99fba50263ee03e82a28fcd751660b0cab68a62a8b6eac29946c988fc747092d35e9352d8442feece96b4ee481cf95a8feb6ec3d6e5cff03f59eb97136d7cb400c1d0ed4ed9b83090abb113aa4e9260695700"/165, 0xa5}, {&(0x7f0000000980)="742f311a83a225186454bcfd09e48b60d703de616d0e6f11523b39000158bc", 0x1f}], 0x2}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1c2789bd018bf77308ae7ed990e4b63b8cf1cf4ae822f1f84abd5420339c722aa7f6d87f5926c484455c67b7a9259ac3f36154b6526320d83fe72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245dce1a721576750f3f592ce4ac96010bf3ce1d9ee389c83a39827b4d9f231ad23f382e2f3d86880015b84a6d3740029d6ffbbf61ae415dc51a6ebd3010000000000008067a9e4abdbbe9045", 0xa8}, {&(0x7f0000000640)="52f8380baae8e668551434e8e52993134696bf3c1070a44f8ceb3f19887414681b93293f0d2708000000a3d8cd2f44c13665c2b7b19ccc306f2564a04b723aca127f75146ebd099961bb5e6fbbd1b0565354e7a8f71134ab7e87ffe3ff2bc0eaed9485be7a3a004cc22c2d22c782bba426367b93ee2c699f89f97a186b3150c8e2584abae470fbda592a19cdb1712dcf558ff0b2bf908973c3ff49", 0x9b}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x267}], 0x1}}], 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.079048568s ago: executing program 7 (id=4241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000200a0000010900010073797a31000000002c0004802800018007000100637400001c000280050003009c000000080002400000001108000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 4.923853986s ago: executing program 6 (id=4243): r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r1, r1, r1) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000000400)='ns\x00') readlinkat(r4, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 4.919135175s ago: executing program 3 (id=4244): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6, 0xd}, {0x10, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x8, 0x5, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0xdb4, 0x0, 0x0, 0x0, 0x0) 4.865314855s ago: executing program 7 (id=4245): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x6}, 0x90) 4.351586296s ago: executing program 6 (id=4248): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x76, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0xf, "8475be675de6a70a05a0dc91e5"}, {0x0, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "a3d50542"}}}}}, 0x0) 2.975185038s ago: executing program 7 (id=4249): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit}]}) 2.961768758s ago: executing program 6 (id=4250): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r7, @ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r8}, 0x10) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r9, 0xee00, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x98, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 2.69260041s ago: executing program 3 (id=4251): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x10040610, 0x0, 0x0, 0x2}}, 0x50) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x30, 0x0, 0x0, [{0x1, 0x4, 0x8, 0x8001, ']@-[]]{]'}]}, 0x0, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x2c) 2.691657066s ago: executing program 0 (id=4252): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) fsopen(0x0, 0x1) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(0x0, 0x442281, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x200) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x84) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) 1.779884403s ago: executing program 6 (id=4253): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)}, 0x4048043) r2 = dup(r0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$inet6(r2, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000840)="e5", 0x1}], 0x1}, 0x4000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000300)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 1.108163218s ago: executing program 0 (id=4254): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0xc5e, 0x4, 0x1, 0x168c240b, r1}}], 0x20, 0xc005}], 0x1, 0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x2}, 0x8) 989.155113ms ago: executing program 7 (id=4255): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002f00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000200a0000010900010073797a31000000002c0004802800018007000100637400001c000280050003009c000000080002400000001108000140000000090900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 859.819953ms ago: executing program 0 (id=4256): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000006c00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1a0000000028"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 829.37926ms ago: executing program 3 (id=4257): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x80, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2000b0e2ee"], 0x6e}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000840)={0x0, 0x0, @pic={0x2a, 0xbe, 0x1, 0x5, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 774.922792ms ago: executing program 6 (id=4258): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r3, r4}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 669.274511ms ago: executing program 0 (id=4259): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0) 651.196834ms ago: executing program 7 (id=4260): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x76, 0x0, [{0x0, 0xc, "e256b28c590300000052"}, {0x0, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0xf, "8475be675de6a70a05a0dc91e5"}, {0x0, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "a3d50542"}}}}}, 0x0) 239.348876ms ago: executing program 0 (id=4261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000180)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x75, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x9c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 186.577898ms ago: executing program 7 (id=4262): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x22, 0x0, 0x0, @empty}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) socket(0x1e, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000001c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0x3e}]}}}], 0x18}}], 0x1, 0x4004000) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) 143.684605ms ago: executing program 2 (id=4263): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)=0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x2, 0x5004) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="0000101d00", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x7, 0x0, 0xe7}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x3000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x80a0000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x8140aecc, &(0x7f0000000140)=@x86={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x9, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8}) 17.261438ms ago: executing program 0 (id=4264): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x1, 0x102, 0x0) 0s ago: executing program 3 (id=4265): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x38}}, 0x44080) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0), 0x80, &(0x7f0000000080)={[{@quota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x38]}}]}) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r4, &(0x7f0000003480)={0x2020}, 0x2020) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xf}, {0xa, 0xa}, {0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x4, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0xa8a, 0xd, 0x8e, 0x1f, 0x3, 0xff, {0x4415, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x1c4fb}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x18, 0x3b05ff}) kernel console output (not intermixed with test programs): disconnect, device number 20 [ 423.506005][ T5903] usblp0: removed [ 424.512681][ T5924] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 424.574022][T10507] batadv_slave_1: entered promiscuous mode [ 424.588170][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1719'. [ 424.702331][ T5924] usb 2-1: Using ep0 maxpacket: 8 [ 424.733572][ T5924] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 424.757055][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 424.784291][ T5924] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 424.796891][ T5924] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 424.810204][ T5924] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 424.819762][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.883719][T10507] team0 (unregistering): Port device team_slave_0 removed [ 424.895385][T10507] team0 (unregistering): Port device team_slave_1 removed [ 424.909009][T10507] team0 (unregistering): Port device bond1 removed [ 424.918818][T10507] team0 (unregistering): Port device bond0 removed [ 424.929634][T10507] team0 (unregistering): Port device bond2 removed [ 425.050981][T10505] batadv_slave_1: left promiscuous mode [ 425.073064][ T5924] usb 2-1: GET_CAPABILITIES returned 0 [ 425.083420][ T5924] usbtmc 2-1:16.0: can't read capabilities [ 425.301047][ T8495] usb 2-1: USB disconnect, device number 34 [ 425.633347][T10541] fuse: Bad value for 'group_id' [ 425.645550][T10541] fuse: Bad value for 'group_id' [ 425.967743][T10552] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 426.235824][T10558] nbd2: detected capacity change from 0 to 8589934592 [ 426.275323][T10559] block nbd2: Send control failed (result -89) [ 426.294266][T10559] block nbd2: Request send failed, requeueing [ 426.313924][ T5842] block nbd2: Receive control failed (result -32) [ 426.328340][ T55] block nbd2: Dead connection, failed to find a fallback [ 426.336074][ T55] block nbd2: shutting down sockets [ 426.341817][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.351531][ T55] buffer_io_error: 27 callbacks suppressed [ 426.351549][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.368127][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.390414][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.407724][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.427784][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.444662][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.532167][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.541583][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.560917][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.596231][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.635902][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.660268][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.693733][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.720993][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.752960][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.768517][T10559] ldm_validate_partition_table(): Disk read failed. [ 426.787590][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.820585][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.844426][T10559] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 426.878805][T10559] Buffer I/O error on dev nbd2, logical block 0, async page read [ 426.927373][T10559] Dev nbd2: unable to read RDB block 0 [ 426.947919][T10559] nbd2: unable to read partition table [ 426.957774][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 426.975364][ T8709] ldm_validate_partition_table(): Disk read failed. [ 426.997161][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 427.010643][ T8709] Dev nbd2: unable to read RDB block 0 [ 427.022657][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 427.036567][ T8709] nbd2: unable to read partition table [ 427.059286][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 427.082149][ T8709] ldm_validate_partition_table(): Disk read failed. [ 427.082158][T10559] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 427.098586][T10559] UDF-fs: Scanning with blocksize 1024 failed [ 427.105873][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 427.111794][ T8709] Dev nbd2: unable to read RDB block 0 [ 427.118930][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2147483647, location=2147483647 [ 427.134707][ T8709] nbd2: unable to read partition table [ 427.135208][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2147483391, location=2147483391 [ 427.168443][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2147483646, location=2147483646 [ 427.200944][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2147483390, location=2147483390 [ 427.223272][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2147483645, location=2147483645 [ 427.234390][ T5924] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 427.248080][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2147483389, location=2147483389 [ 427.261253][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2147483497, location=2147483497 [ 427.301497][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2147483241, location=2147483241 [ 427.314404][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2147483495, location=2147483495 [ 427.326503][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2147483239, location=2147483239 [ 427.340156][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 427.353077][T10559] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 427.360747][T10559] UDF-fs: Scanning with blocksize 2048 failed [ 427.389700][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 427.408441][ T5924] usb 1-1: Using ep0 maxpacket: 8 [ 427.421827][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1073741823, location=1073741823 [ 427.435951][ T5924] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.468126][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 427.479162][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1073741567, location=1073741567 [ 427.502392][ T5924] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 427.508952][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1073741822, location=1073741822 [ 427.532409][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1073741566, location=1073741566 [ 427.533529][ T5924] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 427.548964][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1073741821, location=1073741821 [ 427.578060][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1073741565, location=1073741565 [ 427.590512][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1073741673, location=1073741673 [ 427.606650][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1073741417, location=1073741417 [ 427.618268][ T5924] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 427.619147][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1073741671, location=1073741671 [ 427.638194][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.647660][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1073741415, location=1073741415 [ 427.661049][T10559] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 427.672895][ T8498] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 427.680546][T10559] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 427.688593][T10559] UDF-fs: Scanning with blocksize 4096 failed [ 427.706290][T10559] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 427.723222][ T92] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 427.834164][ T8498] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 427.845723][ T8498] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 427.859910][ T5924] usb 1-1: GET_CAPABILITIES returned 0 [ 427.866150][ T8498] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.878640][ T5924] usbtmc 1-1:16.0: can't read capabilities [ 427.893810][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 427.908764][ T92] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 427.939871][ T8498] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 427.952304][ T92] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 427.962818][ T8498] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 427.971028][ T8498] usb 5-1: Product: syz [ 428.009022][ T92] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.027575][ T8498] usb 5-1: Manufacturer: syz [ 428.032711][ T8498] usb 5-1: SerialNumber: syz [ 428.052204][ T92] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14112, setting to 1024 [ 428.085802][ T8496] usb 1-1: USB disconnect, device number 23 [ 428.094401][ T92] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 428.120080][ T92] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.133265][T10600] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 428.139834][T10600] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.175578][ T92] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 428.176806][T10600] vhci_hcd vhci_hcd.0: Device attached [ 428.184782][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.280076][ T8498] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 428.402225][ T8495] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 428.430705][ T92] usb 4-1: usb_control_msg returned -32 [ 428.436507][ T92] usbtmc 4-1:16.0: can't read capabilities [ 428.442224][ T5903] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 428.480946][ T92] usb 5-1: USB disconnect, device number 24 [ 428.496803][ T92] usblp0: removed [ 428.552285][ T8495] usb 2-1: Using ep0 maxpacket: 16 [ 428.559494][ T8495] usb 2-1: config 0 has no interfaces? [ 428.567115][ T8495] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 428.576810][ T8495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.588754][ T8495] usb 2-1: config 0 descriptor?? [ 428.813680][ T5924] usb 2-1: USB disconnect, device number 35 [ 428.822250][T10603] vhci_hcd: connection closed [ 428.824135][ T12] vhci_hcd: stop threads [ 428.850504][ T12] vhci_hcd: release socket [ 428.858157][ T12] vhci_hcd: disconnect device [ 428.884342][ T5903] vhci_hcd: vhci_device speed not set [ 429.205542][T10627] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1765'. [ 429.522288][ T5924] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 429.702142][ T5924] usb 1-1: Using ep0 maxpacket: 16 [ 429.716162][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 194, changing to 11 [ 429.749436][ T5924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59021, setting to 1024 [ 429.781597][ T5924] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 429.823238][ T5924] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 429.872567][ T5924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.914456][ T5924] usb 1-1: config 0 descriptor?? [ 429.931367][T10631] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 430.407852][ T5924] HID 045e:07da: Invalid code 65791 type 1 [ 430.421978][ T5924] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0001/input/input6 [ 430.534467][ T5903] usb 4-1: USB disconnect, device number 21 [ 430.562703][ T5924] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 430.683438][ T92] usb 1-1: USB disconnect, device number 24 [ 430.924269][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 430.975055][T10664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1777'. [ 431.047729][T10655] fido_id[10655]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 432.238465][T10696] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 432.676855][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 432.685940][T10712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1793'. [ 433.301526][T10712] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.311071][T10712] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.319994][T10712] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.328745][T10712] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.378520][T10712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 433.398125][T10712] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1793'. [ 433.752238][T10724] fuse: Unknown parameter 'group_i00000000000000000000' [ 434.082446][ T5924] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 434.242887][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 434.261235][ T5924] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 434.281253][ T5924] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 434.303795][ T5924] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 434.354238][ T5924] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 434.420994][ T5924] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 434.475792][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.602162][ T5924] usb 5-1: usb_control_msg returned -71 [ 435.689148][ T5924] usbtmc 5-1:16.0: can't read capabilities [ 435.741568][ T5924] usb 5-1: USB disconnect, device number 25 [ 436.185602][T10766] fuse: Unknown parameter 'group_i00000000000000000000' [ 436.322845][T10767] autofs: Bad value for 'fd' [ 436.701038][T10777] fuse: Unknown parameter 'grou00000000000000000000' [ 437.547944][T10794] fuse: Unknown parameter 'group_id00000000000000000000' [ 437.728399][ T8495] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 437.843115][T10800] fuse: Unknown parameter 'group_i00000000000000000000' [ 437.912152][ T8495] usb 2-1: Using ep0 maxpacket: 8 [ 437.947930][ T8495] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.972167][ T8495] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.994515][ T8495] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.023639][ T8495] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.059306][ T8495] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 438.094110][ T8495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.246460][T10813] binder: BINDER_SET_CONTEXT_MGR already set [ 438.265479][T10813] binder: 10812:10813 ioctl 4018620d 2000000001c0 returned -16 [ 438.336818][ T8495] usb 2-1: usb_control_msg returned -71 [ 438.369795][ T8495] usbtmc 2-1:16.0: can't read capabilities [ 438.441361][ T8495] usb 2-1: USB disconnect, device number 36 [ 438.711286][T10823] binder: BINDER_SET_CONTEXT_MGR already set [ 438.720493][T10823] binder: 10822:10823 ioctl 4018620d 200000000040 returned -16 [ 438.740418][T10823] binder: 10822:10823 unknown command 0 [ 438.769049][T10823] binder: 10822:10823 ioctl c0306201 200000000180 returned -22 [ 439.162563][T10833] fuse: Unknown parameter 'group_i00000000000000000000' [ 439.289195][T10835] binder_alloc: 10834: binder_alloc_buf, no vma [ 439.670975][T10843] autofs: Bad value for 'fd' [ 439.823943][ T5924] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 440.012480][ T5924] usb 5-1: Using ep0 maxpacket: 32 [ 440.034495][ T5924] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 440.062255][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.112760][ T5924] usb 5-1: config 0 descriptor?? [ 440.149260][ T5924] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 440.199619][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.209046][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.528592][ T5924] gspca_nw80x: reg_r err -32 [ 440.534042][ T5924] nw80x 5-1:0.0: probe with driver nw80x failed with error -32 [ 440.681431][T10864] fuse: Unknown parameter 'group_i00000000000000000000' [ 441.241229][T10879] fuse: Bad value for 'fd' [ 441.351561][T10882] binder_alloc: 10881: binder_alloc_buf, no vma [ 441.636621][T10889] binder: 10888:10889 unknown command 0 [ 441.648521][T10889] binder: 10888:10889 ioctl c0306201 200000000080 returned -22 [ 441.999764][T10895] fuse: Unknown parameter 'group_id00000000000000000000' [ 442.372421][T10904] autofs: Unknown parameter '0x0000000000000000' [ 442.554954][T10910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.662792][ T5987] usb 5-1: USB disconnect, device number 26 [ 442.722462][T10912] fuse: Bad value for 'fd' [ 443.086530][T10921] binder: 10920:10921 unknown command 527554 [ 443.112355][T10921] binder: 10920:10921 ioctl c0306201 200000000080 returned -22 [ 443.168979][T10923] fuse: Unknown parameter 'group_id00000000000000000000' [ 443.592230][T10938] openvswitch: netlink: Flow actions attr not present in new flow. [ 443.642375][T10940] fuse: Bad value for 'fd' [ 444.039005][T10955] binder: 10954:10955 unknown command 527554 [ 444.045229][T10955] binder: 10954:10955 ioctl c0306201 200000000080 returned -22 [ 444.812186][ T5987] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 445.023508][ T5987] usb 1-1: Using ep0 maxpacket: 16 [ 445.069663][ T5987] usb 1-1: config 0 has no interfaces? [ 445.091442][ T5987] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 445.142112][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.194915][ T5987] usb 1-1: config 0 descriptor?? [ 445.466322][ T5924] usb 1-1: USB disconnect, device number 25 [ 445.582943][T10995] binder: 10994:10995 unknown command 527554 [ 445.612486][T10995] binder: 10994:10995 ioctl c0306201 200000000080 returned -22 [ 445.983025][T11009] autofs: Unknown parameter '0x0000000000000000' [ 446.432294][ T5924] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 446.642114][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 446.665831][ T5924] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 446.692309][ T5924] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 446.722086][ T5924] usb 5-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 446.732507][ T5924] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 446.753301][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.989370][T11028] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.114920][ T5924] usb 5-1: USB disconnect, device number 27 [ 447.221362][T11031] binder: 11030:11031 ioctl 4018620d 0 returned -22 [ 447.245369][T11031] binder: 11030:11031 unknown command 527554 [ 447.261674][T11031] binder: 11030:11031 ioctl c0306201 200000000080 returned -22 [ 447.382230][T11039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.625479][T11045] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 447.834676][T11055] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.151939][T11068] binder: 11067:11068 ioctl 4018620d 0 returned -22 [ 448.184469][T11068] binder: 11067:11068 unknown command 527554 [ 448.204715][T11068] binder: 11067:11068 ioctl c0306201 200000000080 returned -22 [ 448.732479][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 448.752547][T11085] autofs: Unknown parameter '0x0000000000000000' [ 448.761762][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1940'. [ 448.930197][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 448.958913][T11090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.959558][T11086] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1940'. [ 449.563623][T11111] syz.2.1951: attempt to access beyond end of device [ 449.563623][T11111] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 449.592386][T11111] syz.2.1951: attempt to access beyond end of device [ 449.592386][T11111] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 449.641481][T11111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 449.675187][T11111] syz.2.1951: attempt to access beyond end of device [ 449.675187][T11111] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 449.729234][T11111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 449.764541][T11111] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 449.791267][T11111] UDF-fs: Scanning with blocksize 1024 failed [ 449.826551][T11111] syz.2.1951: attempt to access beyond end of device [ 449.826551][T11111] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 449.874567][T11111] syz.2.1951: attempt to access beyond end of device [ 449.874567][T11111] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 449.911179][T11111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 449.938079][T11111] syz.2.1951: attempt to access beyond end of device [ 449.938079][T11111] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 449.973345][T11111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 450.021444][T11111] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 450.052827][T11111] UDF-fs: Scanning with blocksize 2048 failed [ 450.072954][T11111] syz.2.1951: attempt to access beyond end of device [ 450.072954][T11111] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 450.089042][T11111] syz.2.1951: attempt to access beyond end of device [ 450.089042][T11111] nbd2: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 450.120143][T11111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 450.147639][T11111] syz.2.1951: attempt to access beyond end of device [ 450.147639][T11111] nbd2: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 450.175534][T11111] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 450.197845][T11111] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 450.229464][T11111] UDF-fs: Scanning with blocksize 4096 failed [ 450.249335][T11111] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 450.283042][T11109] block nbd2: shutting down sockets [ 450.287525][T11123] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.441573][T11127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 450.823928][T11134] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1958'. [ 452.239208][T11157] autofs: Unknown parameter '0x0000000000000000' [ 453.609104][T11171] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1972'. [ 454.265170][T11173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.639723][T11202] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1983'. [ 456.534288][T11218] autofs: Unknown parameter '0x0000000000000000' [ 457.566314][T11246] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1998'. [ 459.077403][T11270] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 459.170829][T11278] tmpfs: Bad value for 'mpol' [ 459.304638][T11282] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2014'. [ 460.014744][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 460.073203][T11288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2020'. [ 460.155403][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2020'. [ 460.207801][T11288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2020'. [ 460.797686][T11308] tmpfs: Bad value for 'mpol' [ 460.976513][T11310] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 461.730915][T11324] autofs: Unknown parameter '0x0000000000000000' [ 462.426946][T11333] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 462.702646][T11339] tmpfs: Bad value for 'mpol' [ 466.165090][T11391] autofs: Unknown parameter 'fd0x0000000000000000' [ 467.046321][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 467.068562][T11409] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2069'. [ 468.767934][T11433] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 468.839038][T11435] veth0_to_batadv: entered promiscuous mode [ 468.845367][ T92] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 468.869835][T11435] vlan2: entered promiscuous mode [ 469.018976][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 469.067902][ T92] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 469.102660][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 469.120353][T11443] netlink: 'syz.1.2081': attribute type 23 has an invalid length. [ 469.152761][ T92] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.182711][ T92] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 469.193401][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 469.205681][ T92] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.218716][ T92] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 469.226768][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 469.307262][ T92] usb 3-1: config 168 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 469.339639][ T92] usb 3-1: string descriptor 0 read error: -22 [ 469.362327][ T92] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 469.398001][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.484756][ T92] adutux 3-1:168.0: interrupt endpoints not found [ 469.709988][ T8495] usb 3-1: USB disconnect, device number 26 [ 470.904218][T11480] autofs: Unknown parameter 'fd0x0000000000000000' [ 472.537671][T11509] capability: warning: `syz.0.2105' uses deprecated v2 capabilities in a way that may be insecure [ 474.312077][T11551] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2123'. [ 475.278474][T11567] fuse: Bad value for 'fd' [ 475.459415][T11574] autofs: Unknown parameter 'fd0x0000000000000000' [ 475.902106][ T5987] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 476.600855][T11590] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2135'. [ 477.062266][ T5987] usb 2-1: Using ep0 maxpacket: 8 [ 477.097779][ T5987] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 477.125305][ T5987] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 477.156142][ T5987] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 477.189024][ T5987] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 477.211894][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.452524][ T5987] usb 2-1: USB disconnect, device number 37 [ 477.537066][T11606] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 477.605260][T11611] fuse: Bad value for 'fd' [ 478.032173][ T8495] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 478.181786][T11629] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 478.212924][ T8495] usb 5-1: Using ep0 maxpacket: 8 [ 478.318095][ T8495] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 478.473439][ T8495] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 478.656578][ T8495] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.761208][ T8495] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 478.803357][ T8495] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 478.849472][ T8495] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 478.878725][ T8495] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 478.921580][ T8495] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.949206][T11636] overlayfs: failed to resolve './file1': -2 [ 478.956125][ T8495] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 478.973649][ T8495] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 479.030439][ T8495] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 479.045772][T11640] fuse: Unknown parameter '0x0000000000000003' [ 479.075548][ T8495] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 479.143504][ T8495] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.205000][ T8495] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.252643][ T8495] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 479.296371][ T8495] usb 5-1: string descriptor 0 read error: -22 [ 479.303922][ T8495] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 479.326308][ T8495] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.393193][ T8495] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 479.599118][ T8495] usb 5-1: USB disconnect, device number 28 [ 479.762958][T11667] syzkaller0: create flow: hash 3845204502 index 1 [ 479.923309][T11664] syzkaller0: delete flow: hash 3845204502 index 1 [ 480.674429][T11672] fuse: Unknown parameter '0x0000000000000003' [ 483.478159][T11736] openvswitch: netlink: Flow actions attr not present in new flow. [ 484.207320][T11763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 484.992605][ T8495] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 485.152396][ T8495] usb 1-1: device descriptor read/64, error -71 [ 485.402139][ T8495] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 485.552253][ T8495] usb 1-1: device descriptor read/64, error -71 [ 485.581126][T11820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2227'. [ 485.606560][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2227'. [ 485.685206][ T8495] usb usb1-port1: attempt power cycle [ 485.884996][T11832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2230'. [ 486.044912][ T8495] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 486.093849][ T8495] usb 1-1: device descriptor read/8, error -71 [ 486.213155][T11846] overlayfs: failed to resolve './file0': -2 [ 486.315777][T11851] xt_connbytes: Forcing CT accounting to be enabled [ 486.362111][ T8495] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 486.393537][ T8495] usb 1-1: device descriptor read/8, error -71 [ 486.522689][ T8495] usb usb1-port1: unable to enumerate USB device [ 486.910050][T11871] overlayfs: failed to resolve './file0': -2 [ 487.221039][T11885] binder: 11884:11885 unknown command 527554 [ 487.227487][T11885] binder: 11884:11885 ioctl c0306201 200000000080 returned -22 [ 487.241299][T11885] binder: 11884:11885 ioctl 4018620d 0 returned -22 [ 487.594736][T11900] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 487.601318][T11900] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 487.611495][T11900] vhci_hcd vhci_hcd.0: Device attached [ 487.729366][T11905] overlayfs: failed to resolve './file0': -2 [ 487.844073][ T8498] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 487.863344][ T8495] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 488.032313][ T8495] usb 2-1: Using ep0 maxpacket: 16 [ 488.050553][ T8495] usb 2-1: config 0 has no interfaces? [ 488.079628][ T8495] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 488.118793][ T8495] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.150815][ T8495] usb 2-1: config 0 descriptor?? [ 488.173503][T11920] binder: 11918:11920 unknown command 527554 [ 488.188201][T11920] binder: 11918:11920 ioctl c0306201 200000000080 returned -22 [ 488.221477][T11920] binder: 11918:11920 ioctl c0306201 0 returned -14 [ 488.404592][T11901] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 488.417280][ T8496] usb 2-1: USB disconnect, device number 38 [ 488.428952][ T6458] vhci_hcd: stop threads [ 488.448562][ T6458] vhci_hcd: release socket [ 488.466036][ T6458] vhci_hcd: disconnect device [ 488.537585][T11932] overlayfs: failed to resolve './file1': -2 [ 488.774411][T11948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.830059][T11950] binder: 11949:11950 ioctl c0306201 0 returned -14 [ 489.050501][T11958] fuse: Unknown parameter 'fd0x0000000000000003' [ 489.070240][T11956] binder: 11955:11956 unknown command 527554 [ 489.080728][T11956] binder: 11955:11956 ioctl c0306201 200000000080 returned -22 [ 489.091934][T11956] binder: 11955:11956 ioctl c0306201 0 returned -14 [ 489.536214][T11971] syz.0.2288: attempt to access beyond end of device [ 489.536214][T11971] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 489.598713][T11971] syz.0.2288: attempt to access beyond end of device [ 489.598713][T11971] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 489.650786][T11971] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 489.670418][T11975] binder: 11974:11975 ioctl c0306201 0 returned -14 [ 489.683504][T11971] syz.0.2288: attempt to access beyond end of device [ 489.683504][T11971] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 489.714789][T11971] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 489.762436][T11971] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 489.809111][T11971] UDF-fs: Scanning with blocksize 512 failed [ 489.817447][T11971] syz.0.2288: attempt to access beyond end of device [ 489.817447][T11971] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 489.850948][T11971] syz.0.2288: attempt to access beyond end of device [ 489.850948][T11971] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 489.884356][T11983] fuse: Unknown parameter 'fd0x0000000000000003' [ 489.891111][T11971] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 489.937382][T11971] syz.0.2288: attempt to access beyond end of device [ 489.937382][T11971] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 489.945662][T11986] binder: 11984:11986 unknown command 527554 [ 489.975048][T11986] binder: 11984:11986 ioctl c0306201 200000000080 returned -22 [ 489.989258][T11986] binder: 11984:11986 ioctl c0306201 0 returned -14 [ 490.014494][T11971] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 490.042650][T11971] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 490.050268][T11971] UDF-fs: Scanning with blocksize 1024 failed [ 490.122201][T11971] syz.0.2288: attempt to access beyond end of device [ 490.122201][T11971] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 490.154726][T11971] syz.0.2288: attempt to access beyond end of device [ 490.154726][T11971] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 490.175295][T11971] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 490.188296][T11971] syz.0.2288: attempt to access beyond end of device [ 490.188296][T11971] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 490.235117][T11971] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 490.254996][T11971] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 490.287237][T11971] UDF-fs: Scanning with blocksize 2048 failed [ 490.300713][T11971] syz.0.2288: attempt to access beyond end of device [ 490.300713][T11971] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 490.340303][T11971] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 490.367159][T11971] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 490.402825][T11971] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 490.420794][T11971] UDF-fs: Scanning with blocksize 4096 failed [ 490.436087][T11971] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 491.091364][T12027] binder: 12026:12027 unknown command 527554 [ 491.104769][T12027] binder: 12026:12027 ioctl c0306201 200000000080 returned -22 [ 491.133846][T12027] binder: BINDER_SET_CONTEXT_MGR already set [ 491.139908][T12027] binder: 12026:12027 ioctl 4018620d 200000000040 returned -16 [ 491.478663][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2317'. [ 492.612739][T12063] binder: 12060:12063 unknown command 527554 [ 492.618934][T12063] binder: 12060:12063 ioctl c0306201 200000000080 returned -22 [ 492.692911][T12066] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 492.800177][T12071] loop2: detected capacity change from 0 to 7 [ 492.829089][T12071] Dev loop2: unable to read RDB block 7 [ 492.846231][T12071] loop2: unable to read partition table [ 492.859564][T12071] loop2: partition table beyond EOD, truncated [ 492.880330][T12071] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 492.984128][ T8498] vhci_hcd: vhci_device speed not set [ 494.320626][T12096] binder: 12095:12096 unknown command 527554 [ 494.340990][T12096] binder: 12095:12096 ioctl c0306201 200000000080 returned -22 [ 495.723431][T12140] binder: 12138:12140 unknown command 527554 [ 495.729495][T12140] binder: 12138:12140 ioctl c0306201 200000000080 returned -22 [ 496.794728][T12167] binder: 12166:12167 unknown command 527554 [ 496.801046][T12167] binder: 12166:12167 ioctl c0306201 200000000080 returned -22 [ 497.449769][T12187] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2378'. [ 497.881372][T12205] binder: 12204:12205 unknown command 527554 [ 497.897813][T12205] binder: 12204:12205 ioctl c0306201 200000000080 returned -22 [ 498.363918][T12226] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2393'. [ 499.128312][T12249] binder: 12248:12249 unknown command 527554 [ 499.136769][T12249] binder: 12248:12249 ioctl c0306201 200000000080 returned -22 [ 499.151391][T12249] binder: 12248:12249 ioctl c0306201 0 returned -14 [ 499.624970][T12264] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2408'. [ 500.122383][T12289] nbd1: detected capacity change from 0 to 8589934592 [ 500.157256][ T8709] block nbd1: Send control failed (result -89) [ 500.180660][ T8709] block nbd1: Request send failed, requeueing [ 500.191189][ T5842] block nbd1: Receive control failed (result -32) [ 500.205881][ T55] block nbd1: Dead connection, failed to find a fallback [ 500.214209][ T55] block nbd1: shutting down sockets [ 500.219614][ T55] blk_print_req_error: 152 callbacks suppressed [ 500.219630][ T55] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.236687][ T55] buffer_io_error: 120 callbacks suppressed [ 500.236705][ T55] Buffer I/O error on dev nbd1, logical block 0, async page read [ 500.261135][ T8709] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.271879][ T8709] Buffer I/O error on dev nbd1, logical block 0, async page read [ 500.280536][ T8709] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.290737][ T8709] Buffer I/O error on dev nbd1, logical block 0, async page read [ 500.303610][ T8709] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.313207][ T8709] Buffer I/O error on dev nbd1, logical block 0, async page read [ 500.321232][ T8709] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.333194][ T8709] Buffer I/O error on dev nbd1, logical block 0, async page read [ 500.349312][ T8709] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.366339][ T8709] Buffer I/O error on dev nbd1, logical block 0, async page read [ 500.375310][ T8709] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.384986][ T8709] Buffer I/O error on dev nbd1, logical block 0, async page read [ 500.394771][ T8709] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.406661][ T8709] Buffer I/O error on dev nbd1, logical block 0, async page read [ 500.414952][ T8709] ldm_validate_partition_table(): Disk read failed. [ 500.421904][ T8709] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.438004][ T8709] Buffer I/O error on dev nbd1, logical block 0, async page read [ 500.448897][ T8709] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 500.459511][ T8709] Buffer I/O error on dev nbd1, logical block 0, async page read [ 500.474460][ T8709] Dev nbd1: unable to read RDB block 0 [ 500.488973][ T8709] nbd1: unable to read partition table [ 500.514222][ T8709] ldm_validate_partition_table(): Disk read failed. [ 500.528618][ T8709] Dev nbd1: unable to read RDB block 0 [ 500.548504][ T8709] nbd1: unable to read partition table [ 500.755686][T12305] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 500.762279][T12305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 500.803594][T12305] vhci_hcd vhci_hcd.0: Device attached [ 501.032240][ T8496] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 501.054823][ T5903] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 501.202094][ T8496] usb 3-1: Using ep0 maxpacket: 16 [ 501.250771][ T8496] usb 3-1: config 0 has no interfaces? [ 501.262219][ T8496] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 501.292111][ T8496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.321959][ T8496] usb 3-1: config 0 descriptor?? [ 501.497391][ T5924] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 501.548762][ T8498] usb 3-1: USB disconnect, device number 27 [ 501.561297][T12311] vhci_hcd: connection closed [ 501.567333][ T13] vhci_hcd: stop threads [ 501.589559][ T13] vhci_hcd: release socket [ 501.600145][ T13] vhci_hcd: disconnect device [ 501.637509][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.644159][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.650701][ T5903] vhci_hcd: vhci_device speed not set [ 501.704899][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.718154][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.733215][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 501.752683][ T5924] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 501.761896][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.772992][ T5924] usb 4-1: config 0 descriptor?? [ 501.822542][T12341] nbd0: detected capacity change from 0 to 8589934592 [ 501.831733][ T8709] block nbd0: Send control failed (result -89) [ 501.841343][ T8709] block nbd0: Request send failed, requeueing [ 501.848855][ T5842] block nbd0: Receive control failed (result -32) [ 501.848914][ T95] block nbd0: Dead connection, failed to find a fallback [ 501.864463][ T95] block nbd0: shutting down sockets [ 501.871569][ T8709] ldm_validate_partition_table(): Disk read failed. [ 501.879061][ T8709] Dev nbd0: unable to read RDB block 0 [ 501.885494][ T8709] nbd0: unable to read partition table [ 501.897862][ T8709] ldm_validate_partition_table(): Disk read failed. [ 501.923844][ T8709] Dev nbd0: unable to read RDB block 0 [ 501.930103][ T8709] nbd0: unable to read partition table [ 502.136679][T12350] fuse: Unknown parameter 'group_i00000000000000000000' [ 502.194855][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 502.235114][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 502.260384][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 502.268467][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 502.293990][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 502.301465][ T5924] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 502.401022][ T5924] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 502.439799][T12359] fuse: Invalid rootmode [ 502.470833][ T5924] usb 4-1: USB disconnect, device number 22 [ 502.634389][T12360] fido_id[12360]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 503.192898][T12375] nbd4: detected capacity change from 0 to 8589934592 [ 503.449545][ T8709] block nbd4: Send control failed (result -89) [ 503.603932][ T8709] block nbd4: Request send failed, requeueing [ 503.813871][ T55] block nbd4: Dead connection, failed to find a fallback [ 503.820971][ T55] block nbd4: shutting down sockets [ 503.845885][ T8709] ldm_validate_partition_table(): Disk read failed. [ 503.867488][ T8709] Dev nbd4: unable to read RDB block 0 [ 503.895317][ T8709] nbd4: unable to read partition table [ 503.970356][ T8709] ldm_validate_partition_table(): Disk read failed. [ 504.044609][ T8709] Dev nbd4: unable to read RDB block 0 [ 504.090141][ T8709] nbd4: unable to read partition table [ 504.253036][T12393] fuse: Invalid rootmode [ 504.856931][ T8496] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 505.722568][T12418] nbd4: detected capacity change from 0 to 8589934592 [ 505.735913][ T8709] block nbd4: Send control failed (result -89) [ 505.750977][T12427] fuse: Invalid rootmode [ 505.768059][ T8709] block nbd4: Request send failed, requeueing [ 505.788252][ T8496] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.809877][ T5842] block nbd4: Receive control failed (result -32) [ 505.810039][ T95] block nbd4: Dead connection, failed to find a fallback [ 505.827277][ T95] block nbd4: shutting down sockets [ 505.833373][ T95] blk_print_req_error: 92 callbacks suppressed [ 505.833390][ T95] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.849426][ T95] buffer_io_error: 89 callbacks suppressed [ 505.849442][ T95] Buffer I/O error on dev nbd4, logical block 0, async page read [ 505.863333][ T8709] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.880110][ T8496] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.891169][ T8709] Buffer I/O error on dev nbd4, logical block 0, async page read [ 505.899092][ T8496] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 505.909433][ T8709] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 505.912089][ T8496] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 505.912120][ T8496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.915138][ T8496] usb 4-1: config 0 descriptor?? [ 505.992245][ T8709] Buffer I/O error on dev nbd4, logical block 0, async page read [ 506.004921][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 506.027939][ T8709] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.032107][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 506.070259][ T8709] Buffer I/O error on dev nbd4, logical block 0, async page read [ 506.087483][ T8709] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.101161][ T8709] Buffer I/O error on dev nbd4, logical block 0, async page read [ 506.111503][ T8709] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.128460][ T8709] Buffer I/O error on dev nbd4, logical block 0, async page read [ 506.138337][ T8709] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.170458][ T8709] Buffer I/O error on dev nbd4, logical block 0, async page read [ 506.195082][ T8709] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.445416][ T8709] Buffer I/O error on dev nbd4, logical block 0, async page read [ 506.458650][ T8709] ldm_validate_partition_table(): Disk read failed. [ 506.468661][ T8709] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.489277][ T8709] Buffer I/O error on dev nbd4, logical block 0, async page read [ 506.499778][ T8709] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 506.521891][ T8709] Buffer I/O error on dev nbd4, logical block 0, async page read [ 506.544502][ T8709] Dev nbd4: unable to read RDB block 0 [ 506.606071][ T8709] nbd4: unable to read partition table [ 506.680555][ T8709] ldm_validate_partition_table(): Disk read failed. [ 506.711208][ T8709] Dev nbd4: unable to read RDB block 0 [ 506.717974][ T8709] nbd4: unable to read partition table [ 506.731527][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2472'. [ 506.735640][ T8496] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 506.759607][ T8496] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 506.767154][ T8496] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 506.784437][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 506.828021][ T8496] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 506.867852][ T8496] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 506.898299][ T8496] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 506.989440][ T8496] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 507.051773][ T8496] usb 4-1: USB disconnect, device number 23 [ 507.274344][T12452] fido_id[12452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 507.460837][T12463] fuse: Bad value for 'rootmode' [ 508.067736][T12484] fuse: Bad value for 'rootmode' [ 509.702803][T12526] fuse: Bad value for 'rootmode' [ 510.492237][ T8496] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 510.530071][T12559] fuse: Unknown parameter 'use00000000000000000000' [ 510.698739][ T8496] usb 3-1: Using ep0 maxpacket: 8 [ 510.725465][ T8496] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 510.778346][ T8496] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 510.829430][ T8496] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 510.859911][ T8496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.536937][T12588] fuse: Unknown parameter 'use00000000000000000000' [ 512.225593][T12614] fuse: Unknown parameter 'use00000000000000000000' [ 513.203862][T12645] fuse: Unknown parameter 'user_i00000000000000000000' [ 513.335272][ T5924] usb 3-1: USB disconnect, device number 28 [ 513.948762][T12663] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 513.958823][T12663] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 514.241067][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2569'. [ 514.443201][T12674] fuse: Unknown parameter 'user_i00000000000000000000' [ 515.021910][T12690] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 515.053468][T12690] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 517.196081][T12755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 517.207060][T12755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 517.222910][T12755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 517.240415][T12755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 517.252357][T12755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 518.250570][T12753] chnl_net:caif_netlink_parms(): no params data found [ 518.455637][T12799] fuse: Bad value for 'fd' [ 518.624623][T12753] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.661200][T12753] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.699835][T12753] bridge_slave_0: entered allmulticast mode [ 518.708592][T12753] bridge_slave_0: entered promiscuous mode [ 518.756878][T12753] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.782196][T12753] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.806722][T12753] bridge_slave_1: entered allmulticast mode [ 518.845732][T12753] bridge_slave_1: entered promiscuous mode [ 518.941925][T12815] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2627'. [ 519.076869][T12753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.126556][T12753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.226641][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2632'. [ 519.250755][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2632'. [ 519.312292][ T5842] Bluetooth: hci3: command tx timeout [ 519.429202][T12753] team0: Port device team_slave_0 added [ 519.457261][T12753] team0: Port device team_slave_1 added [ 519.698420][T12753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 519.710171][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.754387][T12753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 519.799431][T12753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 519.827785][T12753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.877143][T12753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.888684][ T92] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 520.053797][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 520.070949][T12850] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 520.077538][T12850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 520.079498][ T92] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 520.106439][T12753] hsr_slave_0: entered promiscuous mode [ 520.112193][ T92] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 520.118570][T12850] vhci_hcd vhci_hcd.0: Device attached [ 520.130480][T12753] hsr_slave_1: entered promiscuous mode [ 520.147572][T12753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 520.155601][T12753] Cannot create hsr debugfs directory [ 520.156750][ T92] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 520.202067][ T92] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 520.225461][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.264911][ T92] usbtmc 1-1:16.0: bulk endpoints not found [ 520.352361][ T5924] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 520.362184][ T8496] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 520.531001][T12863] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2643'. [ 520.540502][ T8496] usb 4-1: Using ep0 maxpacket: 16 [ 520.556259][ T8496] usb 4-1: config 0 has no interfaces? [ 520.570804][ T8496] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 520.596348][ T8496] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.623775][ T8496] usb 4-1: config 0 descriptor?? [ 520.824643][T12753] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 520.850420][ T8486] usb 4-1: USB disconnect, device number 24 [ 520.857085][T12851] vhci_hcd: connection closed [ 520.857570][ T13] vhci_hcd: stop threads [ 520.879178][T12753] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 520.892614][ T13] vhci_hcd: release socket [ 520.903153][ T13] vhci_hcd: disconnect device [ 520.921626][T12873] fuse: Bad value for 'group_id' [ 520.926986][T12873] fuse: Bad value for 'group_id' [ 520.932609][ T5924] vhci_hcd: vhci_device speed not set [ 520.944737][T12753] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 521.016179][T12753] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 521.392252][ T5842] Bluetooth: hci3: command tx timeout [ 521.392997][T12753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.457321][T12753] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.486355][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.493641][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.571608][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.578861][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.271186][T12753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.715734][ T5924] usb 1-1: USB disconnect, device number 30 [ 523.070415][T12753] veth0_vlan: entered promiscuous mode [ 523.128464][T12753] veth1_vlan: entered promiscuous mode [ 523.253318][T12753] veth0_macvtap: entered promiscuous mode [ 523.276574][T12753] veth1_macvtap: entered promiscuous mode [ 523.338078][T12753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 523.423917][T12753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 523.461597][T12957] fuse: Bad value for 'fd' [ 523.469029][T12753] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.483266][ T5842] Bluetooth: hci3: command tx timeout [ 523.497670][T12753] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.507259][T12753] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.517039][T12753] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.652225][ T8486] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 523.675722][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 523.692159][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2679'. [ 523.709573][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.738914][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.829860][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.839103][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.852741][ T8486] usb 2-1: Using ep0 maxpacket: 8 [ 523.886625][ T8486] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 523.916253][ T8486] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 523.942487][ T8486] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.969198][ T8486] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 523.984049][ T8486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.999184][ T8486] usbtmc 2-1:16.0: bulk endpoints not found [ 525.531497][T13028] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2703'. [ 525.553262][ T5842] Bluetooth: hci3: command tx timeout [ 525.905850][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 525.905872][ T30] audit: type=1326 audit(1752980495.659:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13042 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468298e9a9 code=0x7ffc0000 [ 525.946628][ T30] audit: type=1326 audit(1752980495.689:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13042 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468298e9a9 code=0x7ffc0000 [ 525.987380][ T30] audit: type=1326 audit(1752980495.689:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13042 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468298e9a9 code=0x7ffc0000 [ 526.022529][ T30] audit: type=1326 audit(1752980495.699:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13042 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468298e9a9 code=0x7ffc0000 [ 526.046726][ T30] audit: type=1326 audit(1752980495.699:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13042 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468298e9a9 code=0x7ffc0000 [ 526.091227][ T30] audit: type=1326 audit(1752980495.699:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13042 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468298e9a9 code=0x7ffc0000 [ 526.138598][ T30] audit: type=1326 audit(1752980495.699:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13042 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468298e9a9 code=0x7ffc0000 [ 526.166916][ T30] audit: type=1326 audit(1752980495.699:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13042 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468298e9a9 code=0x7ffc0000 [ 526.241491][ T30] audit: type=1326 audit(1752980495.699:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13042 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468298e9a9 code=0x7ffc0000 [ 526.285923][T13051] overlayfs: failed to clone upperpath [ 526.324407][ T30] audit: type=1326 audit(1752980495.819:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13042 comm="syz.2.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468298e9a9 code=0x7ffc0000 [ 526.450782][ T8496] usb 2-1: USB disconnect, device number 39 [ 526.705775][T13069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2717'. [ 528.159029][T13131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2739'. [ 528.757104][T13152] fuse: Unknown parameter 'grou00000000000000000000' [ 529.067749][T13165] overlayfs: failed to clone upperpath [ 529.187419][T13167] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2755'. [ 529.743066][T13189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2765'. [ 530.080064][T13199] kvm: Disabled LAPIC found during irq injection [ 530.443209][T13216] fuse: Unknown parameter 'group_i00000000000000000000' [ 531.007084][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2783'. [ 532.022888][T12755] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 532.042496][T12755] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 532.063058][T12755] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 532.091920][T12755] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 532.125210][T12755] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 532.436143][T13259] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 532.442740][T13259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.502439][T13259] vhci_hcd vhci_hcd.0: Device attached [ 532.732239][ T8498] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 532.752139][ T5923] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 532.922060][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 532.929729][ T5923] usb 4-1: config 0 has no interfaces? [ 532.937732][ T5923] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 532.956557][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.986427][ T5923] usb 4-1: config 0 descriptor?? [ 533.198161][ T5923] usb 4-1: USB disconnect, device number 25 [ 533.199315][T13260] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 533.245879][ T12] vhci_hcd: stop threads [ 533.250311][ T12] vhci_hcd: release socket [ 533.286500][ T12] vhci_hcd: disconnect device [ 533.513730][T13249] chnl_net:caif_netlink_parms(): no params data found [ 533.838993][T13295] fuse: Bad value for 'fd' [ 534.192507][ T5842] Bluetooth: hci4: command tx timeout [ 534.258962][T13249] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.280318][T13249] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.321286][T13249] bridge_slave_0: entered allmulticast mode [ 534.338336][T13249] bridge_slave_0: entered promiscuous mode [ 534.348822][T13249] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.371818][T13249] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.381949][T13249] bridge_slave_1: entered allmulticast mode [ 534.398773][T13249] bridge_slave_1: entered promiscuous mode [ 534.502271][T13249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.548672][T13249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.683316][T13249] team0: Port device team_slave_0 added [ 534.718493][T13249] team0: Port device team_slave_1 added [ 534.871027][T13249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 534.885510][T13249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.922120][T13249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 534.951751][T13249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 534.961051][T13249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.000304][T13249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.355740][T13249] hsr_slave_0: entered promiscuous mode [ 535.368437][T13249] hsr_slave_1: entered promiscuous mode [ 535.377629][T13249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.399388][T13249] Cannot create hsr debugfs directory [ 536.274586][ T5842] Bluetooth: hci4: command tx timeout [ 536.597381][T13249] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.628063][T13371] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3023087389 (6046174778 ns) > initial count (3228954816 ns). Using initial count to start timer. [ 536.650566][T13249] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.718869][T13375] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2549184248 (40786947968 ns) > initial count (38013993840 ns). Using initial count to start timer. [ 536.905466][T13249] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.928793][T13249] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.962843][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2840'. [ 537.291526][T13379] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 537.324836][T13379] team0 (unregistering): Port device team_slave_0 removed [ 537.373548][T13379] team0 (unregistering): Failed to send options change via netlink (err -105) [ 537.385843][T13379] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 537.411706][T13379] team0 (unregistering): Port device team_slave_1 removed [ 537.504085][T13249] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.517731][T13249] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.706876][T13249] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.717752][T13249] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.862142][ T8498] vhci_hcd: vhci_device speed not set [ 538.352234][ T5842] Bluetooth: hci4: command tx timeout [ 540.337522][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2855'. [ 540.348429][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 540.416513][T13418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2855'. [ 540.419948][T13249] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 540.446471][ T5842] Bluetooth: hci4: command tx timeout [ 540.458451][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2855'. [ 540.513388][T13249] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 540.596219][T13249] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 540.693599][T13249] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 541.061288][T13249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.133613][T13249] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.187144][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.194423][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.216818][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.224082][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.229926][T13470] fuse: Bad value for 'user_id' [ 541.243066][T13470] fuse: Bad value for 'user_id' [ 541.266491][T13472] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2872'. [ 541.592639][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2874'. [ 541.619818][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'. [ 541.689480][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2874'. [ 541.698946][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'. [ 541.951044][T13249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.139411][T13249] veth0_vlan: entered promiscuous mode [ 542.185479][T13249] veth1_vlan: entered promiscuous mode [ 542.300190][T13249] veth0_macvtap: entered promiscuous mode [ 542.329534][T13249] veth1_macvtap: entered promiscuous mode [ 542.397444][T13249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.454199][T13249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.487783][T13249] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.516361][T13249] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.538078][T13249] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.547705][T13249] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.620703][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2887'. [ 542.640408][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2887'. [ 542.773597][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2887'. [ 542.785213][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2887'. [ 542.879595][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.923779][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.002293][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.036777][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.415534][T13535] fuse: Unknown parameter 'fd0x0000000000000005' [ 544.221493][T13562] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 544.483556][T13570] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2909'. [ 545.351562][T12755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 545.383060][T12755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 545.393018][T12755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 545.418049][T12755] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 545.428847][T12755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 546.358128][T13615] kvm: kvm [13614]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0xfffffffffffffeb6 [ 546.488595][T13620] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2928'. [ 546.635578][T13590] chnl_net:caif_netlink_parms(): no params data found [ 547.269863][T13645] fuse: Invalid rootmode [ 547.331715][T13590] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.341114][T13590] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.397872][T13590] bridge_slave_0: entered allmulticast mode [ 547.436617][T13590] bridge_slave_0: entered promiscuous mode [ 547.473061][ T5842] Bluetooth: hci1: command tx timeout [ 547.489029][T13590] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.496939][T13590] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.504654][T13590] bridge_slave_1: entered allmulticast mode [ 547.516250][T13590] bridge_slave_1: entered promiscuous mode [ 547.595663][T13590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.624693][T13590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.740148][T13590] team0: Port device team_slave_0 added [ 547.757693][T13590] team0: Port device team_slave_1 added [ 547.770741][T13658] overlayfs: missing 'lowerdir' [ 547.825850][T13590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.838571][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.872690][T13590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.892996][T13590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.900171][T13590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.930994][T13590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.028111][T13590] hsr_slave_0: entered promiscuous mode [ 548.040117][T13590] hsr_slave_1: entered promiscuous mode [ 548.057509][T13590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.065711][T13590] Cannot create hsr debugfs directory [ 548.071382][T13664] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2945'. [ 548.641418][T13590] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.757080][T13683] fuse: Invalid rootmode [ 548.897071][T13590] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.966951][T13688] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2955'. [ 549.030757][T13590] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.132977][T13693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2957'. [ 549.211555][T13590] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.504457][T13590] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 549.518575][T13590] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 549.549210][T13590] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 549.561797][ T5842] Bluetooth: hci1: command tx timeout [ 549.589838][T13590] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 549.912506][T13713] fuse: Bad value for 'fd' [ 550.028874][T13717] netlink: 'syz.1.2965': attribute type 12 has an invalid length. [ 550.045381][T13717] netlink: 'syz.1.2965': attribute type 29 has an invalid length. [ 550.057981][T13717] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2965'. [ 550.081352][T13717] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2965'. [ 550.297737][T13590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.418820][T13590] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.457834][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.465059][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.556902][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.563457][T13735] fuse: Bad value for 'rootmode' [ 550.564248][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.343847][T13590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.484152][T13590] veth0_vlan: entered promiscuous mode [ 551.520277][T13590] veth1_vlan: entered promiscuous mode [ 551.634723][ T5842] Bluetooth: hci1: command tx timeout [ 551.701522][T13590] veth0_macvtap: entered promiscuous mode [ 551.721211][T13590] veth1_macvtap: entered promiscuous mode [ 551.761812][T13590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.823267][T13590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.867088][T13590] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.894204][T13590] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.926030][T13590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.946731][T13590] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.957893][T13770] fuse: Bad value for 'rootmode' [ 552.948604][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.004414][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.133933][ T3500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.164374][ T3500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.428830][T13794] fuse: Bad value for 'rootmode' [ 553.714601][ T5842] Bluetooth: hci1: command tx timeout [ 553.720440][T13807] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 553.726995][T13807] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 553.758856][T13807] vhci_hcd vhci_hcd.0: Device attached [ 553.795498][T13799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.853186][T13799] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.909643][T13799] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 554.004285][ T5987] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 554.022227][ T8486] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 554.212229][ T8486] usb 2-1: Using ep0 maxpacket: 16 [ 554.245090][ T8486] usb 2-1: config 0 has no interfaces? [ 554.260252][ T8486] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 554.299360][ T8486] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.350675][ T8486] usb 2-1: config 0 descriptor?? [ 554.629191][ T8498] usb 2-1: USB disconnect, device number 40 [ 554.637125][T13809] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 554.675922][ T13] vhci_hcd: stop threads [ 554.709636][ T13] vhci_hcd: release socket [ 554.731777][ T13] vhci_hcd: disconnect device [ 557.078139][T13910] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.323253][ T92] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 557.445236][T13921] fuse: Unknown parameter 'user_i00000000000000000000' [ 557.489923][T13910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.504420][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 557.529163][ T92] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 557.550035][T13910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.561450][T12755] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 557.573492][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 557.585465][T12755] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 557.596073][T12755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 557.613452][ T92] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.627002][T12755] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 557.638887][T12755] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 557.669741][ T92] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 557.693339][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 557.716950][ T92] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.742399][ T92] usb 3-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 557.773371][ T92] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 557.788247][ T92] usb 3-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.806057][T13910] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.815890][T13910] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.826517][T13910] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.838281][T13910] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.865935][ T92] usb 3-1: string descriptor 0 read error: -22 [ 557.875245][ T92] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 557.906603][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.937365][ T92] adutux 3-1:168.0: interrupt endpoints not found [ 558.185725][ T5903] usb 3-1: USB disconnect, device number 29 [ 558.457916][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.557509][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.656965][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.798688][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.142486][ T5987] vhci_hcd: vhci_device speed not set [ 559.428693][T13972] fuse: Bad value for 'fd' [ 559.679096][T13978] fuse: Unknown parameter 'user_i00000000000000000000' [ 559.690513][T13922] chnl_net:caif_netlink_parms(): no params data found [ 559.712292][T12755] Bluetooth: hci0: command tx timeout [ 559.872780][ T13] bridge_slave_1: left allmulticast mode [ 559.878794][ T13] bridge_slave_1: left promiscuous mode [ 559.945740][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.040031][ T13] bridge_slave_0: left allmulticast mode [ 560.059795][ T13] bridge_slave_0: left promiscuous mode [ 560.094656][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.668679][T14011] fuse: Bad value for 'fd' [ 561.104461][ T13] bond3 (unregistering): (slave gretap1): Releasing active interface [ 561.451403][T14035] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3085'. [ 561.731478][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'. [ 561.740695][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3088'. [ 561.792647][T12755] Bluetooth: hci0: command tx timeout [ 561.906557][ T13] team0: Port device bond0 removed [ 561.917961][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.928924][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.939651][ T13] bond0 (unregistering): Released all slaves [ 561.961665][ T13] bond1 (unregistering): Released all slaves [ 562.099160][ T13] team0: Port device bond2 removed [ 562.108254][ T13] bond2 (unregistering): Released all slaves [ 562.237343][ T13] bond3 (unregistering): Released all slaves [ 562.895074][T14065] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3096'. [ 562.986068][T13922] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.016411][T13922] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.053593][T13922] bridge_slave_0: entered allmulticast mode [ 563.083724][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.090120][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.112571][T14072] fuse: Unknown parameter 'user_id00000000000000000000' [ 563.115745][T13922] bridge_slave_0: entered promiscuous mode [ 563.171704][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3097'. [ 563.235302][T14070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3097'. [ 563.412203][T13922] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.419433][T13922] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.458460][T13922] bridge_slave_1: entered allmulticast mode [ 563.508483][T13922] bridge_slave_1: entered promiscuous mode [ 563.599769][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.655542][T14086] netlink: 'syz.2.3103': attribute type 12 has an invalid length. [ 563.686363][T14086] netlink: 'syz.2.3103': attribute type 29 has an invalid length. [ 563.708597][T14086] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3103'. [ 563.743270][T14086] netlink: 39 bytes leftover after parsing attributes in process `syz.2.3103'. [ 563.872239][T12755] Bluetooth: hci0: command tx timeout [ 563.888183][T14097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3107'. [ 564.024290][ T13] hsr_slave_0: left promiscuous mode [ 564.069771][ T13] hsr_slave_1: left promiscuous mode [ 564.085685][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 564.143705][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.648392][T14153] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3128'. [ 565.958447][T12755] Bluetooth: hci0: command tx timeout [ 565.978578][ T13] team0 (unregistering): Port device team_slave_1 removed [ 566.034367][ T13] team0 (unregistering): Port device team_slave_0 removed [ 566.695827][T13922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.817713][T13922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 567.004894][T14172] netlink: 'syz.2.3138': attribute type 12 has an invalid length. [ 567.025873][T14172] netlink: 'syz.2.3138': attribute type 29 has an invalid length. [ 567.058065][T14172] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3138'. [ 567.081396][T14172] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3138'. [ 567.185590][T13922] team0: Port device team_slave_0 added [ 567.237058][T13922] team0: Port device team_slave_1 added [ 567.443018][T13922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.483916][T13922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.573743][T13922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.607887][T13922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.642323][T13922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 567.702356][T13922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.240724][T13922] hsr_slave_0: entered promiscuous mode [ 568.264940][T13922] hsr_slave_1: entered promiscuous mode [ 568.291505][T13922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 568.317504][T13922] Cannot create hsr debugfs directory [ 568.329645][T14212] netlink: 'syz.0.3150': attribute type 12 has an invalid length. [ 568.341262][T14212] netlink: 'syz.0.3150': attribute type 29 has an invalid length. [ 568.370520][T14212] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3150'. [ 568.452339][T14212] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3150'. [ 568.636311][T14222] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3154'. [ 569.237471][T14240] fuse: Unknown parameter 'use00000000000000000000' [ 570.886801][T13922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 570.934673][T13922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 570.992477][T13922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 571.057599][T13922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 571.125535][T14291] autofs: Unknown parameter './file0' [ 571.634900][T13922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.706511][T13922] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.798111][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.805510][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.905090][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.912333][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.136554][T14330] autofs: Unknown parameter './file0' [ 572.972424][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3200'. [ 573.078159][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3200'. [ 573.276847][T13922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.618462][T13922] veth0_vlan: entered promiscuous mode [ 573.686920][T13922] veth1_vlan: entered promiscuous mode [ 573.859456][T13922] veth0_macvtap: entered promiscuous mode [ 573.955985][T13922] veth1_macvtap: entered promiscuous mode [ 574.061930][T13922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.156690][T13922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.247932][T13922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.287802][T13922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.333329][T13922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.376669][T13922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.802132][ T6494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.810030][ T6494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.237686][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.504617][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.564342][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.582084][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.741542][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.006407][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 576.024309][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 576.052400][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 576.076900][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 576.089052][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 576.101740][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.982300][ T49] bridge_slave_1: left allmulticast mode [ 576.988117][ T49] bridge_slave_1: left promiscuous mode [ 577.055192][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.116655][ T49] bridge_slave_0: left allmulticast mode [ 577.142047][ T49] bridge_slave_0: left promiscuous mode [ 577.153966][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.165124][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 577.175885][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 577.184888][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 577.206241][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 577.214748][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 577.936116][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3238'. [ 577.965642][T14490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3238'. [ 578.199013][T12755] Bluetooth: hci2: command tx timeout [ 578.596399][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.616959][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 578.642710][ T49] bond0 (unregistering): Released all slaves [ 578.774308][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'. [ 578.842359][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 578.922304][T14473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'. [ 578.931309][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 579.312109][T12755] Bluetooth: hci3: command tx timeout [ 579.914985][T14531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 579.923298][T14531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 579.931261][T14531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 579.939370][T14531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 579.947418][T14531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 579.955423][T14531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 579.963427][T14531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 579.971383][T14531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 579.979398][T14531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 579.987404][T14531] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 580.075244][T14539] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 580.238657][T14433] chnl_net:caif_netlink_parms(): no params data found [ 580.288704][T12755] Bluetooth: hci2: command tx timeout [ 580.360172][ T49] hsr_slave_0: left promiscuous mode [ 580.388249][ T49] hsr_slave_1: left promiscuous mode [ 580.408809][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.421321][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.460667][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.495726][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.579240][ T49] veth1_macvtap: left promiscuous mode [ 580.609380][ T49] veth0_macvtap: left promiscuous mode [ 580.615770][ T49] veth1_vlan: left promiscuous mode [ 580.621276][ T49] veth0_vlan: left promiscuous mode [ 581.204380][T14569] fuse: Bad value for 'group_id' [ 581.209406][T14569] fuse: Bad value for 'group_id' [ 581.402321][T12755] Bluetooth: hci3: command tx timeout [ 581.522363][T14582] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 581.571187][T14576] kvm: Disabled LAPIC found during irq injection [ 582.317021][T14602] fuse: Bad value for 'group_id' [ 582.337549][T14602] fuse: Bad value for 'group_id' [ 582.367966][T12755] Bluetooth: hci2: command tx timeout [ 582.937991][T14614] kvm: MWAIT instruction emulated as NOP! [ 583.034950][T14617] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 583.131363][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3278'. [ 583.172932][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3278'. [ 583.473646][T12755] Bluetooth: hci3: command tx timeout [ 584.070730][T14635] fuse: Bad value for 'group_id' [ 584.096644][T14635] fuse: Bad value for 'group_id' [ 584.432249][T12755] Bluetooth: hci2: command tx timeout [ 584.544319][T14433] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.597181][T14433] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.634360][T14433] bridge_slave_0: entered allmulticast mode [ 584.657055][T14433] bridge_slave_0: entered promiscuous mode [ 584.712791][T14433] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.740438][T14433] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.762554][T14433] bridge_slave_1: entered allmulticast mode [ 584.787439][T14433] bridge_slave_1: entered promiscuous mode [ 585.036218][T14433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.067559][T14433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.095065][T14464] chnl_net:caif_netlink_parms(): no params data found [ 585.365257][T14433] team0: Port device team_slave_0 added [ 585.435716][T14433] team0: Port device team_slave_1 added [ 585.552118][T12755] Bluetooth: hci3: command tx timeout [ 585.784262][T14433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.793855][T14433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.822488][T14433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.861213][T14433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.879069][T14433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.013043][T14433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.366136][T14464] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.393899][T14464] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.430557][T14464] bridge_slave_0: entered allmulticast mode [ 586.444642][T14464] bridge_slave_0: entered promiscuous mode [ 586.455731][T14464] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.470638][T14464] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.514527][T14464] bridge_slave_1: entered allmulticast mode [ 586.543697][T14464] bridge_slave_1: entered promiscuous mode [ 586.848496][T14719] netlink: 'syz.2.3305': attribute type 12 has an invalid length. [ 586.875283][T14719] netlink: 'syz.2.3305': attribute type 29 has an invalid length. [ 586.903756][T14719] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3305'. [ 586.926816][T14719] netlink: 11 bytes leftover after parsing attributes in process `syz.2.3305'. [ 587.056721][T14433] hsr_slave_0: entered promiscuous mode [ 587.103578][T14433] hsr_slave_1: entered promiscuous mode [ 587.113620][T14433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.124538][T14433] Cannot create hsr debugfs directory [ 587.142471][T14464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.261273][T14464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 587.599226][T14464] team0: Port device team_slave_0 added [ 587.728284][T14464] team0: Port device team_slave_1 added [ 588.147607][T14464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.176094][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.275066][T14464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.448570][T14464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 588.474848][T14464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.538002][T14464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 588.585466][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'. [ 588.630028][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'. [ 588.817791][T14751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3315'. [ 588.836137][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3315'. [ 588.868444][T14757] netlink: 'syz.3.3316': attribute type 12 has an invalid length. [ 588.876853][T14757] netlink: 'syz.3.3316': attribute type 29 has an invalid length. [ 588.890473][T14757] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3316'. [ 588.915589][T14757] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3316'. [ 589.249006][T14464] hsr_slave_0: entered promiscuous mode [ 589.300849][T14464] hsr_slave_1: entered promiscuous mode [ 589.320710][T14464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.348801][T14464] Cannot create hsr debugfs directory [ 589.454895][T14765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 590.075666][T14433] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 590.151851][T14775] fuse: Bad value for 'fd' [ 590.208609][T14433] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 590.341578][T14433] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 590.357163][T14433] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 590.493765][T14785] netlink: 'syz.0.3325': attribute type 12 has an invalid length. [ 590.531276][T14785] netlink: 'syz.0.3325': attribute type 29 has an invalid length. [ 590.575736][T14785] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3325'. [ 590.609562][T14785] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3325'. [ 590.987579][T14464] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 591.010087][T14804] fuse: Bad value for 'fd' [ 591.042435][T14464] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 591.068254][T14464] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 591.169372][T14464] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 591.574442][T14433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.751154][T14433] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.884489][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.891895][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.954081][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.961314][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.134461][T14844] fuse: Bad value for 'fd' [ 592.239128][T14464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.362464][T14464] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.408974][ T6494] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.416282][ T6494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.546526][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.553793][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.226213][T14433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.250102][T14876] netlink: 'syz.0.3350': attribute type 12 has an invalid length. [ 593.268504][T14876] netlink: 'syz.0.3350': attribute type 29 has an invalid length. [ 593.283575][T14876] __nla_validate_parse: 1 callbacks suppressed [ 593.283594][T14876] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3350'. [ 593.342424][T14876] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3350'. [ 593.837962][T14464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.453953][T14915] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 594.607041][T14433] veth0_vlan: entered promiscuous mode [ 594.695082][T14433] veth1_vlan: entered promiscuous mode [ 594.895392][T14433] veth0_macvtap: entered promiscuous mode [ 594.962138][T14433] veth1_macvtap: entered promiscuous mode [ 595.061807][T14433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.143943][T14433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.230372][T14433] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.241622][T14433] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.251343][T14433] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.282776][T14433] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.633478][T14464] veth0_vlan: entered promiscuous mode [ 595.694107][T14464] veth1_vlan: entered promiscuous mode [ 595.855509][T14955] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 595.895605][T14955] kvm: Disabled LAPIC found during irq injection [ 595.926629][ T6494] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.958125][ T6494] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.051745][T14464] veth0_macvtap: entered promiscuous mode [ 596.108321][T14464] veth1_macvtap: entered promiscuous mode [ 596.133296][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.173576][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.175311][T14464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 596.227348][T14464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 596.286181][T14464] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.314035][T14464] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.340458][T14464] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.374704][T14464] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.025188][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.076902][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.284501][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.315995][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.296275][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3398'. [ 599.330271][T15074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3413'. [ 600.448705][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3430'. [ 601.824062][T15151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3443'. [ 602.458348][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 602.458370][ T30] audit: type=1326 audit(1752980572.199:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15166 comm="syz.6.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429b38e9a9 code=0x7ffc0000 [ 602.682160][ T30] audit: type=1326 audit(1752980572.199:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15166 comm="syz.6.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429b38e9a9 code=0x7ffc0000 [ 602.829418][ T30] audit: type=1326 audit(1752980572.199:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15166 comm="syz.6.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429b38e9a9 code=0x7ffc0000 [ 602.879701][T15173] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 602.895566][T15177] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 602.936616][T15180] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 602.966590][ T30] audit: type=1326 audit(1752980572.199:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15166 comm="syz.6.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429b38e9a9 code=0x7ffc0000 [ 603.017013][T15183] kvm: Disabled LAPIC found during irq injection [ 603.156228][ T30] audit: type=1326 audit(1752980572.199:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15166 comm="syz.6.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f429b38e9a9 code=0x7ffc0000 [ 603.345719][ T30] audit: type=1326 audit(1752980572.199:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15166 comm="syz.6.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429b38e9a9 code=0x7ffc0000 [ 603.512261][ T30] audit: type=1326 audit(1752980572.199:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15166 comm="syz.6.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f429b38e9a9 code=0x7ffc0000 [ 603.677684][ T30] audit: type=1326 audit(1752980572.199:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15166 comm="syz.6.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f429b38e9a9 code=0x7ffc0000 [ 603.878954][ T30] audit: type=1326 audit(1752980572.199:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15166 comm="syz.6.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f429b38e9a9 code=0x7ffc0000 [ 604.254666][T15210] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 604.557689][T15219] fuse: Bad value for 'fd' [ 605.954552][T15255] fuse: Bad value for 'fd' [ 606.313292][T15261] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 609.456693][T15357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3516'. [ 613.025347][T15451] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 614.120595][T15487] kvm: pic: single mode not supported [ 614.496961][T15498] xt_CT: No such helper "snmp_trap" [ 619.090739][T15627] netlink: 'syz.6.3620': attribute type 27 has an invalid length. [ 619.280504][T15627] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.288885][T15627] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.593392][T15627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.619973][T15627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.874393][T15627] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.886098][T15627] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.896012][T15627] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.910482][T15627] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.144364][T15656] overlayfs: missing 'workdir' [ 620.186884][T15632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.208701][T15632] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.295737][T15632] net_ratelimit: 44 callbacks suppressed [ 620.295762][T15632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 621.998894][T15716] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 622.005481][T15716] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 622.183084][T15716] vhci_hcd vhci_hcd.0: Device attached [ 622.322270][ T8495] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 622.472093][ T8496] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 622.582191][ T8495] usb 7-1: Using ep0 maxpacket: 16 [ 622.597806][ T8495] usb 7-1: no configurations [ 622.616701][ T8495] usb 7-1: can't read configurations, error -22 [ 622.822280][ T8495] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 623.022981][ T8495] usb 7-1: Using ep0 maxpacket: 16 [ 623.063925][ T8495] usb 7-1: no configurations [ 623.086665][ T8495] usb 7-1: can't read configurations, error -22 [ 623.125899][ T8495] usb usb7-port1: attempt power cycle [ 623.514562][ T8495] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 623.552916][ T8495] usb 7-1: Using ep0 maxpacket: 16 [ 623.565434][ T8495] usb 7-1: no configurations [ 623.582399][ T8495] usb 7-1: can't read configurations, error -22 [ 623.772269][ T8495] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 623.806567][ T8495] usb 7-1: Using ep0 maxpacket: 16 [ 623.816067][ T8495] usb 7-1: no configurations [ 623.843524][ T8495] usb 7-1: can't read configurations, error -22 [ 623.862264][ T8495] usb usb7-port1: unable to enumerate USB device [ 623.957812][T15771] fuse: Bad value for 'fd' [ 624.459149][T15782] syzkaller0: entered promiscuous mode [ 624.469419][T15782] syzkaller0: entered allmulticast mode [ 624.537428][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.544051][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.857448][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3682'. [ 624.866726][T15717] vhci_hcd: connection reset by peer [ 624.903986][ T49] vhci_hcd: stop threads [ 624.908422][ T49] vhci_hcd: release socket [ 624.952401][ T49] vhci_hcd: disconnect device [ 625.903786][T15815] fuse: Bad value for 'fd' [ 627.416599][T15792] tap0: tun_chr_ioctl cmd 1074025677 [ 627.424203][T15792] tap0: linktype set to 825 [ 627.622433][ T8496] vhci_hcd: vhci_device speed not set [ 627.651305][T15829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3691'. [ 627.691499][T15829] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3691'. [ 628.259434][T15849] fuse: Bad value for 'fd' [ 628.655632][T15861] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 628.656238][T15867] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3705'. [ 628.726593][T15867] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3705'. [ 629.062084][T15875] tap0: tun_chr_ioctl cmd 1074025677 [ 629.093934][T15875] tap0: linktype set to 825 [ 629.425752][T15891] fuse: Unknown parameter '00000000000000000003' [ 629.840648][T15905] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3718'. [ 629.880685][T15905] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3718'. [ 629.900953][T15904] 9pnet_fd: Insufficient options for proto=fd [ 630.385907][T15923] fuse: Unknown parameter '00000000000000000003' [ 630.924650][T15944] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3734'. [ 630.951411][T15944] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3734'. [ 631.241585][T15958] fuse: Unknown parameter '00000000000000000003' [ 631.594092][T15971] syzkaller0: create flow: hash 3845204502 index 1 [ 632.044579][ T6494] syzkaller0: tun_net_xmit 76 [ 632.060149][ T6494] syzkaller0: tun_net_xmit 48 [ 632.075968][T15960] syzkaller0: delete flow: hash 3845204502 index 1 [ 632.338368][T15993] fuse: Unknown parameter '00000000000000000003' [ 633.295101][T16023] fuse: Unknown parameter '00000000000000000003' [ 633.762151][T16039] process 'syz.2.3775' launched './file1' with NULL argv: empty string added [ 636.456033][T16102] 9pnet_fd: Insufficient options for proto=fd [ 636.612440][T16105] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3802'. [ 638.049794][T16130] 9pnet_fd: Insufficient options for proto=fd [ 639.022880][T16159] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856151591 (22849212728 ns) > initial count (5743301600 ns). Using initial count to start timer. [ 639.126030][T16159] kvm: Disabled LAPIC found during irq injection [ 639.255516][T16172] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3827'. [ 639.650179][T16184] syzkaller0: create flow: hash 3845204502 index 1 [ 639.683630][ T3500] syzkaller0: tun_net_xmit 76 [ 639.713488][ T3500] syzkaller0: tun_net_xmit 48 [ 639.718666][ T5923] syzkaller0: tun_net_xmit 76 [ 639.748776][T16189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 639.915286][ T5923] syzkaller0: tun_net_xmit 76 [ 640.023352][T16194] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3834'. [ 640.092263][T16177] syzkaller0: delete flow: hash 3845204502 index 1 [ 640.507584][T16209] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3839'. [ 644.622293][T16294] fuse: Bad value for 'fd' [ 645.806263][T16336] fuse: Bad value for 'fd' [ 646.832635][ T3500] bridge_slave_1: left allmulticast mode [ 646.864334][ T3500] bridge_slave_1: left promiscuous mode [ 646.893265][ T3500] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.970151][ T3500] bridge_slave_0: left allmulticast mode [ 647.004042][ T3500] bridge_slave_0: left promiscuous mode [ 647.031228][ T3500] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.990803][ T3500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.020371][ T3500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.061692][ T3500] bond0 (unregistering): Released all slaves [ 649.088150][T16424] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3925'. [ 649.347852][ T3500] team0: Port device bond1 removed [ 649.357735][ T3500] bond1 (unregistering): Released all slaves [ 650.718662][ T3500] hsr_slave_0: left promiscuous mode [ 650.768386][ T3500] hsr_slave_1: left promiscuous mode [ 650.783194][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 650.823574][ T3500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.826776][ T3500] team0 (unregistering): Port device team_slave_1 removed [ 652.900882][ T3500] team0 (unregistering): Port device team_slave_0 removed [ 653.856712][T16565] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 657.312339][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 658.088691][ T30] audit: type=1326 audit(1752980627.839:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16662 comm="syz.7.4009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56be38e9a9 code=0x7fc00000 [ 659.922514][T16737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4033'. [ 667.558646][T12755] Bluetooth: hci1: command 0x0406 tx timeout [ 669.640312][T16959] fuse: Bad value for 'fd' [ 669.948132][T16971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4114'. [ 670.146300][T16978] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 670.962519][T17003] fuse: Bad value for 'fd' [ 671.203168][T17005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4126'. [ 671.604260][T17015] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 672.557220][T17037] block nbd7: shutting down sockets [ 673.305022][T17060] 9pnet_fd: Insufficient options for proto=fd [ 673.372662][T17061] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 676.161549][T17108] 9pnet_fd: Insufficient options for proto=fd [ 678.011781][T17135] fuse: Bad value for 'fd' [ 679.130654][T17146] netlink: 'syz.3.4168': attribute type 12 has an invalid length. [ 679.146783][T17146] netlink: 'syz.3.4168': attribute type 29 has an invalid length. [ 679.162147][T17146] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4168'. [ 679.331408][T17152] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4170'. [ 679.723712][T17167] block nbd7: shutting down sockets [ 679.866937][T17175] fuse: Bad value for 'fd' [ 680.245400][T17181] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4178'. [ 680.399962][T17187] fuse: Bad value for 'fd' [ 680.675007][T17194] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4186'. [ 681.515995][T17210] fuse: Bad value for 'fd' [ 682.027161][T17221] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4193'. [ 682.564314][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4194'. [ 682.806577][T17231] fuse: Bad value for 'fd' [ 682.912948][T12755] Bluetooth: hci0: command 0x0406 tx timeout [ 683.147687][T17244] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4200'. [ 683.364925][T17252] fuse: Bad value for 'fd' [ 684.542336][T17275] fuse: Bad value for 'fd' [ 684.940048][T17292] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4215'. [ 685.642572][T17300] fuse: Bad value for 'fd' [ 685.682095][T17297] block nbd2: shutting down sockets [ 686.011943][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.040649][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.997532][T17329] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4226'. [ 687.139621][T17334] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4228'. [ 687.771699][T17365] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4240'. [ 688.092378][T17375] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4242'. [ 691.264214][T17405] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 691.746466][T17403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4252'. [ 692.145727][T17419] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4256'. [ 693.128628][T17442] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 695.087106][T17446] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.094735][T17446] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.162463][T17446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.179359][T17446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.223305][T17446] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.232503][T17446] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.241364][T17446] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.250270][T17446] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.280737][T17446] ------------[ cut here ]------------ [ 695.286393][T17446] WARNING: CPU: 1 PID: 17446 at kernel/kcov.c:872 kcov_remote_start+0x55a/0x7f0 [ 695.295441][T17446] Modules linked in: [ 695.299426][T17446] CPU: 1 UID: 0 PID: 17446 Comm: syz.3.4265 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 695.311482][T17446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 695.321538][T17446] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 695.327281][T17446] Code: ff 4c 89 ff be 03 00 00 00 e8 02 19 f9 02 e9 eb fa ff ff e8 48 44 a6 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 fe 5c a6 09 89 c0 48 c7 c7 68 17 9d 92 48 03 3c c5 70 [ 695.347108][T17446] RSP: 0018:ffffc9000426e430 EFLAGS: 00010002 [ 695.353178][T17446] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 695.361149][T17446] RDX: 0000000000030000 RSI: ffffffff8db6f761 RDI: ffffffff8be1ba00 [ 695.369123][T17446] RBP: ffffc9000426e690 R08: ffffc9000426e1b0 R09: 0000000000000020 [ 695.377119][T17446] R10: dffffc0000000000 R11: ffffffff819eaba0 R12: ffff8880b8728768 [ 695.385117][T17446] R13: ffffffff81c03027 R14: ffff88802d940000 R15: 0000000000000000 [ 695.393117][T17446] FS: 00007f797256c6c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 695.402053][T17446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 695.408633][T17446] CR2: 000000110c30fdcf CR3: 00000000656e6000 CR4: 00000000003526f0 [ 695.416619][T17446] Call Trace: [ 695.419905][T17446] [ 695.422842][T17446] ieee80211_rx_list+0x53a/0x2d80 [ 695.427879][T17446] ? __d_instantiate+0x197/0x740 [ 695.432844][T17446] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 695.438303][T17446] ? __lock_acquire+0xab9/0xd20 [ 695.443177][T17446] ? ieee80211_rx_napi+0xca/0x3d0 [ 695.448214][T17446] ? ieee80211_rx_napi+0xca/0x3d0 [ 695.453260][T17446] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 695.459175][T17446] ? ieee80211_rx_napi+0xca/0x3d0 [ 695.464195][T17446] ieee80211_rx_napi+0x1a8/0x3d0 [ 695.469150][T17446] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 695.474643][T17446] ? skb_dequeue+0x10e/0x150 [ 695.479264][T17446] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 695.485259][T17446] ? ieee80211_stop_device+0x29/0xf0 [ 695.490553][T17446] ieee80211_stop_device+0x3e/0xf0 [ 695.495771][T17446] ieee80211_do_stop+0x17dd/0x1fa0 [ 695.500901][T17446] ? __lock_acquire+0xab9/0xd20 [ 695.505761][T17446] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 695.511154][T17446] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 695.516619][T17446] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 695.522628][T17446] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.527857][T17446] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 695.534204][T17446] ? wiphy_work_cancel+0x1eb/0x3c0 [ 695.539334][T17446] ieee80211_stop+0x1b1/0x220 [ 695.544016][T17446] ? __pfx_ieee80211_stop+0x10/0x10 [ 695.549223][T17446] __dev_close_many+0x364/0x6f0 [ 695.554083][T17446] ? __pfx___dev_close_many+0x10/0x10 [ 695.559461][T17446] __dev_change_flags+0x2c7/0x6d0 [ 695.564494][T17446] ? __pfx___dev_change_flags+0x10/0x10 [ 695.570056][T17446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 695.576117][T17446] ? __pfx_netif_state_change+0x10/0x10 [ 695.581690][T17446] netif_change_flags+0x88/0x1a0 [ 695.586660][T17446] do_setlink+0xc55/0x41c0 [ 695.591117][T17446] ? __kernel_text_address+0xd/0x40 [ 695.596340][T17446] ? arch_stack_walk+0xfc/0x150 [ 695.601207][T17446] ? __pfx_do_setlink+0x10/0x10 [ 695.606086][T17446] ? __lock_acquire+0xab9/0xd20 [ 695.610941][T17446] ? __mutex_trylock_common+0x153/0x260 [ 695.616505][T17446] ? __pfx___mutex_trylock_common+0x10/0x10 [ 695.622403][T17446] ? rcu_is_watching+0x15/0xb0 [ 695.627169][T17446] ? trace_contention_end+0x39/0x120 [ 695.632486][T17446] ? __mutex_lock+0x330/0xe80 [ 695.637170][T17446] ? rtnl_newlink+0x8db/0x1c70 [ 695.641958][T17446] ? rcu_is_watching+0x15/0xb0 [ 695.646727][T17446] ? __pfx___mutex_lock+0x10/0x10 [ 695.651754][T17446] ? ns_capable+0x8a/0xf0 [ 695.656099][T17446] ? rtnl_link_get_net_capable+0x16a/0x350 [ 695.661923][T17446] rtnl_newlink+0x149f/0x1c70 [ 695.666616][T17446] ? netlink_sendmsg+0x805/0xb30 [ 695.671582][T17446] ? __pfx_rtnl_newlink+0x10/0x10 [ 695.676634][T17446] ? kasan_quarantine_put+0xdd/0x220 [ 695.682029][T17446] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.687263][T17446] ? nlmon_xmit+0xb0/0x100 [ 695.691681][T17446] ? kmem_cache_free+0x18f/0x400 [ 695.696639][T17446] ? __local_bh_enable_ip+0x12d/0x1c0 [ 695.702012][T17446] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.707209][T17446] ? __local_bh_enable_ip+0x12d/0x1c0 [ 695.712582][T17446] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 695.718301][T17446] ? __dev_queue_xmit+0x27e/0x3a70 [ 695.723412][T17446] ? __dev_queue_xmit+0x27e/0x3a70 [ 695.728518][T17446] ? __dev_queue_xmit+0x27e/0x3a70 [ 695.733628][T17446] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 695.738825][T17446] ? __lock_acquire+0xab9/0xd20 [ 695.743707][T17446] ? __pfx_rtnl_newlink+0x10/0x10 [ 695.748734][T17446] rtnetlink_rcv_msg+0x7cc/0xb70 [ 695.753677][T17446] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 695.758816][T17446] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 695.764362][T17446] ? ref_tracker_free+0x63a/0x7d0 [ 695.769383][T17446] ? __copy_skb_header+0xa7/0x550 [ 695.774415][T17446] ? __pfx_ref_tracker_free+0x10/0x10 [ 695.779794][T17446] netlink_rcv_skb+0x205/0x470 [ 695.784581][T17446] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 695.790074][T17446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 695.795374][T17446] ? netlink_deliver_tap+0x2e/0x1b0 [ 695.800570][T17446] ? netlink_deliver_tap+0x2e/0x1b0 [ 695.805777][T17446] netlink_unicast+0x759/0x8e0 [ 695.810566][T17446] netlink_sendmsg+0x805/0xb30 [ 695.815429][T17446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.820722][T17446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 695.826011][T17446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 695.831299][T17446] __sock_sendmsg+0x219/0x270 [ 695.835984][T17446] ____sys_sendmsg+0x505/0x830 [ 695.840754][T17446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 695.846073][T17446] ? import_iovec+0x74/0xa0 [ 695.850596][T17446] ___sys_sendmsg+0x21f/0x2a0 [ 695.855299][T17446] ? __pfx____sys_sendmsg+0x10/0x10 [ 695.860532][T17446] ? __fget_files+0x2a/0x420 [ 695.865126][T17446] ? __fget_files+0x3a0/0x420 [ 695.869809][T17446] __x64_sys_sendmsg+0x19b/0x260 [ 695.874757][T17446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 695.880246][T17446] ? do_syscall_64+0xbe/0x3b0 [ 695.884930][T17446] do_syscall_64+0xfa/0x3b0 [ 695.889436][T17446] ? lockdep_hardirqs_on+0x9c/0x150 [ 695.894809][T17446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.900874][T17446] ? clear_bhb_loop+0x60/0xb0 [ 695.905556][T17446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 695.911543][T17446] RIP: 0033:0x7f797178e9a9 [ 695.915959][T17446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.935568][T17446] RSP: 002b:00007f797256c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.944001][T17446] RAX: ffffffffffffffda RBX: 00007f79719b6080 RCX: 00007f797178e9a9 [ 695.951974][T17446] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 695.959960][T17446] RBP: 00007f7971810d69 R08: 0000000000000000 R09: 0000000000000000 [ 695.967931][T17446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.975907][T17446] R13: 0000000000000000 R14: 00007f79719b6080 R15: 00007fffb9329f48 [ 695.983904][T17446] [ 695.986923][T17446] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 695.994206][T17446] CPU: 1 UID: 0 PID: 17446 Comm: syz.3.4265 Not tainted 6.16.0-rc6-syzkaller-00279-gbf61759db409 #0 PREEMPT(full) [ 696.006438][T17446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 696.016509][T17446] Call Trace: [ 696.019793][T17446] [ 696.022722][T17446] dump_stack_lvl+0x99/0x250 [ 696.027316][T17446] ? __asan_memcpy+0x40/0x70 [ 696.031923][T17446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 696.037140][T17446] ? __pfx__printk+0x10/0x10 [ 696.041738][T17446] panic+0x2db/0x790 [ 696.045638][T17446] ? __pfx_panic+0x10/0x10 [ 696.050071][T17446] __warn+0x31b/0x4b0 [ 696.054055][T17446] ? kcov_remote_start+0x55a/0x7f0 [ 696.059169][T17446] ? kcov_remote_start+0x55a/0x7f0 [ 696.064280][T17446] report_bug+0x2be/0x4f0 [ 696.068605][T17446] ? kcov_remote_start+0x55a/0x7f0 [ 696.073715][T17446] ? kcov_remote_start+0x55a/0x7f0 [ 696.078841][T17446] ? kcov_remote_start+0x55c/0x7f0 [ 696.083954][T17446] handle_bug+0x84/0x160 [ 696.088199][T17446] exc_invalid_op+0x1a/0x50 [ 696.092708][T17446] asm_exc_invalid_op+0x1a/0x20 [ 696.097554][T17446] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 696.103276][T17446] Code: ff 4c 89 ff be 03 00 00 00 e8 02 19 f9 02 e9 eb fa ff ff e8 48 44 a6 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 fe 5c a6 09 89 c0 48 c7 c7 68 17 9d 92 48 03 3c c5 70 [ 696.122880][T17446] RSP: 0018:ffffc9000426e430 EFLAGS: 00010002 [ 696.128946][T17446] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 696.136916][T17446] RDX: 0000000000030000 RSI: ffffffff8db6f761 RDI: ffffffff8be1ba00 [ 696.144887][T17446] RBP: ffffc9000426e690 R08: ffffc9000426e1b0 R09: 0000000000000020 [ 696.152855][T17446] R10: dffffc0000000000 R11: ffffffff819eaba0 R12: ffff8880b8728768 [ 696.160822][T17446] R13: ffffffff81c03027 R14: ffff88802d940000 R15: 0000000000000000 [ 696.168811][T17446] ? kcov_remote_start+0x97/0x7f0 [ 696.173838][T17446] ? __pfx_hlock_conflict+0x10/0x10 [ 696.179050][T17446] ieee80211_rx_list+0x53a/0x2d80 [ 696.184078][T17446] ? __d_instantiate+0x197/0x740 [ 696.189035][T17446] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 696.194496][T17446] ? __lock_acquire+0xab9/0xd20 [ 696.199363][T17446] ? ieee80211_rx_napi+0xca/0x3d0 [ 696.204387][T17446] ? ieee80211_rx_napi+0xca/0x3d0 [ 696.209414][T17446] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 696.215318][T17446] ? ieee80211_rx_napi+0xca/0x3d0 [ 696.220339][T17446] ieee80211_rx_napi+0x1a8/0x3d0 [ 696.225275][T17446] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 696.230742][T17446] ? skb_dequeue+0x10e/0x150 [ 696.235363][T17446] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 696.241377][T17446] ? ieee80211_stop_device+0x29/0xf0 [ 696.246669][T17446] ieee80211_stop_device+0x3e/0xf0 [ 696.251787][T17446] ieee80211_do_stop+0x17dd/0x1fa0 [ 696.256915][T17446] ? __lock_acquire+0xab9/0xd20 [ 696.261789][T17446] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 696.267177][T17446] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 696.272654][T17446] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 696.278555][T17446] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.283857][T17446] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 696.290196][T17446] ? wiphy_work_cancel+0x1eb/0x3c0 [ 696.295421][T17446] ieee80211_stop+0x1b1/0x220 [ 696.300127][T17446] ? __pfx_ieee80211_stop+0x10/0x10 [ 696.305334][T17446] __dev_close_many+0x364/0x6f0 [ 696.310192][T17446] ? __pfx___dev_close_many+0x10/0x10 [ 696.315573][T17446] __dev_change_flags+0x2c7/0x6d0 [ 696.320604][T17446] ? __pfx___dev_change_flags+0x10/0x10 [ 696.326179][T17446] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 696.332180][T17446] ? __pfx_netif_state_change+0x10/0x10 [ 696.337731][T17446] netif_change_flags+0x88/0x1a0 [ 696.342682][T17446] do_setlink+0xc55/0x41c0 [ 696.347102][T17446] ? __kernel_text_address+0xd/0x40 [ 696.352305][T17446] ? arch_stack_walk+0xfc/0x150 [ 696.357153][T17446] ? __pfx_do_setlink+0x10/0x10 [ 696.362024][T17446] ? __lock_acquire+0xab9/0xd20 [ 696.366890][T17446] ? __mutex_trylock_common+0x153/0x260 [ 696.372442][T17446] ? __pfx___mutex_trylock_common+0x10/0x10 [ 696.378338][T17446] ? rcu_is_watching+0x15/0xb0 [ 696.383107][T17446] ? trace_contention_end+0x39/0x120 [ 696.388390][T17446] ? __mutex_lock+0x330/0xe80 [ 696.393077][T17446] ? rtnl_newlink+0x8db/0x1c70 [ 696.397862][T17446] ? rcu_is_watching+0x15/0xb0 [ 696.402665][T17446] ? __pfx___mutex_lock+0x10/0x10 [ 696.407696][T17446] ? ns_capable+0x8a/0xf0 [ 696.412025][T17446] ? rtnl_link_get_net_capable+0x16a/0x350 [ 696.417845][T17446] rtnl_newlink+0x149f/0x1c70 [ 696.422524][T17446] ? netlink_sendmsg+0x805/0xb30 [ 696.427493][T17446] ? __pfx_rtnl_newlink+0x10/0x10 [ 696.432554][T17446] ? kasan_quarantine_put+0xdd/0x220 [ 696.437855][T17446] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.443170][T17446] ? nlmon_xmit+0xb0/0x100 [ 696.447622][T17446] ? kmem_cache_free+0x18f/0x400 [ 696.452577][T17446] ? __local_bh_enable_ip+0x12d/0x1c0 [ 696.457956][T17446] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.463156][T17446] ? __local_bh_enable_ip+0x12d/0x1c0 [ 696.468785][T17446] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 696.474517][T17446] ? __dev_queue_xmit+0x27e/0x3a70 [ 696.479625][T17446] ? __dev_queue_xmit+0x27e/0x3a70 [ 696.484752][T17446] ? __dev_queue_xmit+0x27e/0x3a70 [ 696.489864][T17446] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 696.495073][T17446] ? __lock_acquire+0xab9/0xd20 [ 696.499935][T17446] ? __pfx_rtnl_newlink+0x10/0x10 [ 696.504969][T17446] rtnetlink_rcv_msg+0x7cc/0xb70 [ 696.509912][T17446] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 696.515022][T17446] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 696.520484][T17446] ? ref_tracker_free+0x63a/0x7d0 [ 696.525507][T17446] ? __copy_skb_header+0xa7/0x550 [ 696.530535][T17446] ? __pfx_ref_tracker_free+0x10/0x10 [ 696.535912][T17446] netlink_rcv_skb+0x205/0x470 [ 696.540704][T17446] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 696.546170][T17446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 696.551478][T17446] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.556678][T17446] ? netlink_deliver_tap+0x2e/0x1b0 [ 696.561879][T17446] netlink_unicast+0x759/0x8e0 [ 696.566668][T17446] netlink_sendmsg+0x805/0xb30 [ 696.571443][T17446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.576733][T17446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.582028][T17446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.587339][T17446] __sock_sendmsg+0x219/0x270 [ 696.592021][T17446] ____sys_sendmsg+0x505/0x830 [ 696.596791][T17446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.602624][T17446] ? import_iovec+0x74/0xa0 [ 696.607157][T17446] ___sys_sendmsg+0x21f/0x2a0 [ 696.611863][T17446] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.617126][T17446] ? __fget_files+0x2a/0x420 [ 696.621727][T17446] ? __fget_files+0x3a0/0x420 [ 696.626411][T17446] __x64_sys_sendmsg+0x19b/0x260 [ 696.631354][T17446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.636832][T17446] ? do_syscall_64+0xbe/0x3b0 [ 696.641514][T17446] do_syscall_64+0xfa/0x3b0 [ 696.646023][T17446] ? lockdep_hardirqs_on+0x9c/0x150 [ 696.651226][T17446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.657291][T17446] ? clear_bhb_loop+0x60/0xb0 [ 696.661983][T17446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.667877][T17446] RIP: 0033:0x7f797178e9a9 [ 696.672294][T17446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 696.691907][T17446] RSP: 002b:00007f797256c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.700340][T17446] RAX: ffffffffffffffda RBX: 00007f79719b6080 RCX: 00007f797178e9a9 [ 696.708315][T17446] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000b [ 696.716285][T17446] RBP: 00007f7971810d69 R08: 0000000000000000 R09: 0000000000000000 [ 696.724269][T17446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.732238][T17446] R13: 0000000000000000 R14: 00007f79719b6080 R15: 00007fffb9329f48 [ 696.740218][T17446] [ 696.743589][T17446] Kernel Offset: disabled [ 696.747916][T17446] Rebooting in 86400 seconds..