last executing test programs: 3.781568542s ago: executing program 2 (id=3232): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xecf86c37d53049cc) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x644180, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) 2.943469174s ago: executing program 0 (id=3239): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, 0x0, 0x21eae}}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.816659027s ago: executing program 2 (id=3241): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000ff00000000000000010000000000000084010500fe8000000000000000000000000000bb000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ff010000000000000000000000000001000000006c13000000000000ac1414aa000000000000000000000000fcffffff03000000000000000000000000000000fe8000000000000000000000000000aa00000000"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 2.738894168s ago: executing program 0 (id=3243): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x28, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x9}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.644262869s ago: executing program 2 (id=3245): semctl$IPC_RMID(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) 2.60170035s ago: executing program 0 (id=3246): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.417603293s ago: executing program 0 (id=3249): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xecf86c37d53049cc) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x644180, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) 2.412138343s ago: executing program 3 (id=3250): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x8000, 0x101) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562cb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd054cb0e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa0fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d211522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be00", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xb0, 0x0, 0xa1, [{{0x6, 0x2, 0x3, 0xffffffffffffffff, 0xe, 0x5, {0x80000000000004, 0x9, 0xcb, 0x1, 0x80000001, 0x8, 0xe629, 0x5, 0x7fffffff, 0x8000, 0x7c, r2, r3, 0xc3, 0x1}}, {0x0, 0x7, 0x1, 0x6e4bd64b, '\x00'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x18) 1.590944955s ago: executing program 3 (id=3252): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0xe2, &(0x7f0000000180)=""/226, 0x0, 0x8}, 0x94) 1.576487856s ago: executing program 1 (id=3253): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000ff00000000000000010000000000000084010500fe8000000000000000000000000000bb000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ff010000000000000000000000000001000000006c13000000000000ac1414aa000000000000000000000000fcffffff03000000000000000000000000000000fe8000000000000000000000000000aa00000000"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1.424343058s ago: executing program 0 (id=3254): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003bc0)=""/1, 0x1}, 0xb}], 0x1, 0x45833af92e4b39ff, 0x0) 1.353329269s ago: executing program 1 (id=3255): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), r0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x100, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005"], 0x34}}, 0x0) 1.257629681s ago: executing program 3 (id=3256): openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='i2c_reply\x00', r0, 0x0, 0x2}, 0x18) pipe(&(0x7f0000000c00)) epoll_create(0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) 1.161627352s ago: executing program 1 (id=3257): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&\x00'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.052396304s ago: executing program 3 (id=3258): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf250100000008000100030000002400048005000300010000000500acb100ffec000500030001000000050003000500000008000200"], 0x48}}, 0x0) 998.406015ms ago: executing program 2 (id=3259): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x140002, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfffc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x6}, {0x8, 0x100, 0xb, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004884}, 0x0) 897.830886ms ago: executing program 3 (id=3260): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 897.549046ms ago: executing program 1 (id=3261): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0xffffffff80802840}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x8000, 0x101) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xb0, 0x0, 0xa1, [{{0x6, 0x2, 0x3, 0x10000007, 0x0, 0xa, {0x8000000, 0x6, 0x5, 0x18, 0x2000005, 0x80, 0x6e, 0x30, 0x5, 0x8000, 0x10000, r2, 0xee01, 0xd0, 0x400}}, {0x6, 0x80000000, 0x1, 0x8, '\x18'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x18) 785.534298ms ago: executing program 0 (id=3262): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) creat(0x0, 0xecf86c37d53049cc) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0xce) ioctl$sock_ax25_SIOCDELRT(r5, 0x890c, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x644180, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) 326.990865ms ago: executing program 2 (id=3263): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000001000000a80c0000000000000a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000ff00000000000000010000000000000084010500fe8000000000000000000000000000bb000004d53c00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d43c00000000000000fe8000000000000000000000000000000000000000000000000800000000000001000000ff010000000000000000000000000001000000006c13000000000000ac1414aa000000000000000000000000fcffffff03000000000000000000000000000000fe8000000000000000000000000000aa00000000"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 149.757678ms ago: executing program 1 (id=3264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x691, 0x9, 0x0, 0x1, 0xcb00}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6, 0x11}, [@FRA_DST={0x14, 0x1, @local}]}, 0x30}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000280)=""/189, &(0x7f00000000c0)="ab99cb0bc5678648f6dd6dd65ecfe85a03f4087aea355188165227ed4f1c267e499eeef0ce54c6fc2e8edcca9ab016dba9e88486183427cb997b2084b56c3eca0a3937ec4ddd51bfc323f177e27377e26516c6", &(0x7f0000000000)="22d505ce37eeb88b138c9c89819203c1de6d0bc3277f8efc24d62467f7a17db9e25e529608521c9146f53dc5c34812a582c68b260d69e1e6ef7694f2cbe3eb2b752eb0459a537a6165e24aad2b78a1777487454071377dbdd6d446a49253dab1238bfe10b7a46ab0e83cb5b21ef79992aae93ce14a561353a76869acbaf69f", 0x8, r0}, 0x38) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x58, "53f47e507a6fee1f3457997cafdcd52af7aefd59be3e69c45b230cc3bfbca9a76f3672d3c9cc05fb625df9b95b000ff9e6cf0fdfdce7d18e634f094615712902e1b94ca55e4b763eac8d1b0e7575eacb189697eaa3dd24ca"}, &(0x7f0000000000)=0x60) bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@generic={&(0x7f0000000680)='.\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4001000) 94.089218ms ago: executing program 2 (id=3265): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="10000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) clock_gettime(0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000400)=@multiplanar_userptr={0x3, 0x9, 0x4, 0x4000, 0x800, {0x77359400}, {0x6, 0x0, 0x2, 0x7, 0x4, 0x8, "2264fa66"}, 0x4, 0x2, {&(0x7f0000000200)=[{0x4a74, 0x6, {0x0}, 0x100}, {0x5, 0xbc, {0x0}, 0x5}]}, 0x28}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0xffaa) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x40) connect$rose(r4, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000280)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000002240)}, 0xfffffffffffffed0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) 707.24µs ago: executing program 3 (id=3266): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/12, 0xc, 0x0, &(0x7f0000000340)=""/237, 0xed}, &(0x7f0000000200)=0x40) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) bind$ax25(r3, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x1, &(0x7f0000000240)=""/254) ioctl$TIOCVHANGUP(r5, 0x5437, 0x200000000000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000200630140000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) listen(0xffffffffffffffff, 0xfffffff7) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) openat$pfkey(0xffffff9c, 0x0, 0x14000, 0x0) unshare(0x6e060000) 0s ago: executing program 1 (id=3267): semctl$IPC_RMID(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) kernel console output (not intermixed with test programs): onfined pid=11574 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba0b8e9a9 code=0x7ffc0000 [ 677.802394][ T28] audit: type=1326 audit(1752855798.083:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f2ba0b8e9a9 code=0x7ffc0000 [ 677.832425][ T28] audit: type=1326 audit(1752855798.173:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11574 comm="syz.2.1616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ba0b8e9a9 code=0x7ffc0000 [ 678.402517][T11582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.472571][T11582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.061068][T11579] block nbd3: shutting down sockets [ 679.857985][T11600] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1622'. [ 680.710525][T11610] x_tables: ip_tables: osf match: only valid for protocol 6 [ 680.721065][T11610] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 682.233889][ C1] hrtimer: interrupt took 39426 ns [ 683.798158][T11652] sctp: [Deprecated]: syz.1.1631 (pid 11652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 683.798158][T11652] Use struct sctp_sack_info instead [ 684.944493][T11666] (null): rxe_set_mtu: Set mtu to 1024 [ 684.951922][T11666] rdma_rxe: rxe_newlink: failed to add wg1 [ 685.032623][T11666] pim6reg1: entered allmulticast mode [ 685.043035][T11666] pim6reg1: left allmulticast mode [ 686.281809][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.289313][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.404074][T11689] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 693.425776][T11736] (null): rxe_set_mtu: Set mtu to 1024 [ 693.432684][T11736] rdma_rxe: rxe_newlink: failed to add wg1 [ 693.481349][T11736] pim6reg1: entered allmulticast mode [ 693.505138][T11736] pim6reg1: left allmulticast mode [ 697.774571][T11746] can0: slcan on ptm0. [ 698.180485][T11742] can0 (unregistered): slcan off ptm0. [ 698.364952][ T788] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 699.216213][ T788] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 699.342104][ T788] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 699.683542][ T788] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 699.800839][ T788] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 699.998482][ T788] usb 4-1: Product: syz [ 700.048810][T11762] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 700.074304][ T788] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 700.363129][ T5823] usb 4-1: USB disconnect, device number 18 [ 701.271337][T11807] (null): rxe_set_mtu: Set mtu to 1024 [ 701.279752][T11807] rdma_rxe: rxe_newlink: failed to add wg1 [ 701.328813][T11807] pim6reg1: entered allmulticast mode [ 701.345366][T11807] pim6reg1: left allmulticast mode [ 702.969965][ T5823] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 703.338141][ T5823] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.361974][ T5823] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.372154][ T5823] usb 2-1: config 0 interface 0 has no altsetting 0 [ 703.378941][ T5823] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 703.388075][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.599232][ T5823] usb 2-1: config 0 descriptor?? [ 703.623469][T11839] vlan2: entered allmulticast mode [ 703.632218][T11839] erspan0: entered allmulticast mode [ 704.271343][ T5823] usb 2-1: string descriptor 0 read error: -22 [ 704.373862][T11845] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.279459][ T5823] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 706.838726][ T5823] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 706.912202][ T5823] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 707.034747][ T5823] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 707.069760][ T5823] uclogic: probe of 0003:256C:006D.0004 failed with error -71 [ 707.318167][ T5823] usb 2-1: USB disconnect, device number 11 [ 708.330920][T11862] netlink: 'syz.1.1686': attribute type 1 has an invalid length. [ 709.147861][ T5837] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 709.343459][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.357224][ T5837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.373835][ T5837] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 709.383707][ T5837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.418870][ T5837] usb 3-1: config 0 descriptor?? [ 710.687199][ T5837] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 710.720096][ T5837] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 711.503623][ T5837] cp2112 0003:10C4:EA90.0005: Part Number: 0x82 Device Version: 0xFE [ 713.622049][ T5830] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 715.746363][ T5837] usb 3-1: USB disconnect, device number 18 [ 720.583235][T11962] (null): rxe_set_mtu: Set mtu to 1024 [ 720.722399][T11962] rdma_rxe: rxe_newlink: failed to add wg1 [ 721.889234][T11962] pim6reg1: entered allmulticast mode [ 723.603100][T11982] netlink: 'syz.1.1716': attribute type 1 has an invalid length. [ 728.178634][T12015] syz0: rxe_newlink: already configured on wg1 [ 728.207804][T12015] pim6reg1: entered allmulticast mode [ 728.254083][T12015] pim6reg1: left allmulticast mode [ 734.677564][T12054] Illegal XDP return value 4294967274 on prog (id 279) dev syz_tun, expect packet loss! [ 737.535138][ T788] libceph: connect (1)[c::]:6789 error -101 [ 737.571282][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 738.662422][ T788] libceph: connect (1)[c::]:6789 error -101 [ 738.794353][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 739.083428][T12061] ceph: No mds server is up or the cluster is laggy [ 739.253998][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1740'. [ 739.303316][T12070] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1740'. [ 739.325383][T12078] netlink: 'syz.0.1741': attribute type 1 has an invalid length. [ 739.492540][T12082] binder: BINDER_SET_CONTEXT_MGR already set [ 739.504855][T12082] binder: 12079:12082 ioctl 4018620d 200000000040 returned -16 [ 743.827994][ T5784] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 744.577639][ T5784] usb 4-1: Using ep0 maxpacket: 32 [ 744.668042][ T5784] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 744.721720][ T5784] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 744.768231][ T5784] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 744.781120][ T5784] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 744.798178][ T5784] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 744.812506][ T5784] usb 4-1: config 0 interface 0 has no altsetting 0 [ 744.824266][ T5784] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 744.834235][ T5784] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 744.844168][ T5784] usb 4-1: Product: syz [ 744.848808][ T5784] usb 4-1: Manufacturer: syz [ 744.853616][ T5784] usb 4-1: SerialNumber: syz [ 744.867306][ T5784] usb 4-1: config 0 descriptor?? [ 744.878904][ T5784] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 744.910762][ T5784] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 745.340851][T12131] ldusb 4-1:0.0: Couldn't submit interrupt_in_urb -90 [ 747.016676][ T5823] usb 4-1: USB disconnect, device number 19 [ 747.025833][ T5823] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 747.499924][ T5823] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 747.641666][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.662717][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.409848][ T5823] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 748.434446][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.475263][ T5823] usb 4-1: config 0 descriptor?? [ 748.597611][T12171] netlink: 'syz.0.1765': attribute type 1 has an invalid length. [ 749.528734][ T5823] ath6kl: Failed to submit usb control message: -110 [ 749.577916][ T5823] ath6kl: unable to send the bmi data to the device: -110 [ 749.585601][ T5823] ath6kl: Unable to send get target info: -110 [ 749.626526][ T5823] ath6kl: Failed to init ath6kl core: -110 [ 749.640659][ T5823] ath6kl_usb: probe of 4-1:0.0 failed with error -110 [ 749.646336][ T7409] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 749.652588][ T5823] usb 4-1: USB disconnect, device number 20 [ 749.860130][ T7409] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 749.877504][ T7409] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 749.896648][ T7409] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 749.906635][ T7409] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 749.925463][ T7409] usb 3-1: Product: syz [ 749.958610][T12173] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 749.969715][ T7409] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 750.971546][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 750.971562][ T28] audit: type=1326 audit(1752855872.483:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff097f8e9a9 code=0x7ffc0000 [ 751.079808][ T7409] usb 3-1: USB disconnect, device number 19 [ 751.154008][ T28] audit: type=1326 audit(1752855872.543:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff097f8e9a9 code=0x7ffc0000 [ 751.230219][ T28] audit: type=1326 audit(1752855872.553:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff097f8e9a9 code=0x7ffc0000 [ 751.446793][ T28] audit: type=1326 audit(1752855872.563:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff097f8e9a9 code=0x7ffc0000 [ 751.771101][ T28] audit: type=1326 audit(1752855872.563:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff097f8e9a9 code=0x7ffc0000 [ 751.795399][ T28] audit: type=1326 audit(1752855872.563:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff097f8e9a9 code=0x7ffc0000 [ 751.825927][ T28] audit: type=1326 audit(1752855872.563:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff097f8e9a9 code=0x7ffc0000 [ 751.971622][ T28] audit: type=1326 audit(1752855872.573:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff097f8e9a9 code=0x7ffc0000 [ 751.994982][ T28] audit: type=1326 audit(1752855872.573:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff097f8e9a9 code=0x7ffc0000 [ 752.794862][ T28] audit: type=1326 audit(1752855872.583:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12202 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff097f8e9a9 code=0x7ffc0000 [ 754.163618][T12234] (null): rxe_set_mtu: Set mtu to 1024 [ 754.169656][T12234] rdma_rxe: rxe_newlink: failed to add wg1 [ 754.177020][T12234] pim6reg1: entered allmulticast mode [ 756.429041][T12264] netlink: 'syz.0.1785': attribute type 1 has an invalid length. [ 759.037100][T12286] pim6reg1: entered allmulticast mode [ 762.653699][T12319] netlink: 'syz.2.1807': attribute type 1 has an invalid length. [ 762.875282][T12323] (null): rxe_set_mtu: Set mtu to 1024 [ 762.882574][T12323] rdma_rxe: rxe_newlink: failed to add wg1 [ 767.674330][T12378] netlink: 'syz.1.1824': attribute type 1 has an invalid length. [ 774.628880][ T55] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 775.020081][ T55] usb 3-1: config 241 has an invalid interface number: 0 but max is -1 [ 775.216050][ T55] usb 3-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 775.284998][ T55] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 775.415675][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.606036][ T55] pcwd_usb: The device isn't a Human Interface Device [ 776.776760][ T5851] usb 3-1: USB disconnect, device number 20 [ 782.684207][T12561] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1878'. [ 783.885102][T12577] wg1 speed is unknown, defaulting to 1000 [ 784.096937][T12573] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nbd0": -EINTR [ 796.613515][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 796.613529][ T28] audit: type=1326 audit(1752855918.133:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb833d8e9a9 code=0x7ffc0000 [ 796.728061][ T28] audit: type=1326 audit(1752855918.183:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb833d8e9a9 code=0x7ffc0000 [ 797.297333][ T28] audit: type=1326 audit(1752855918.183:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb833d8e9a9 code=0x7ffc0000 [ 797.321504][ T28] audit: type=1326 audit(1752855918.183:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb833d8e9a9 code=0x7ffc0000 [ 797.321546][ T28] audit: type=1326 audit(1752855918.183:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb833d8e9a9 code=0x7ffc0000 [ 797.321581][ T28] audit: type=1326 audit(1752855918.183:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb833d8e9a9 code=0x7ffc0000 [ 797.321617][ T28] audit: type=1326 audit(1752855918.183:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb833d8e9a9 code=0x7ffc0000 [ 797.321652][ T28] audit: type=1326 audit(1752855918.183:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb833d8e9a9 code=0x7ffc0000 [ 797.321685][ T28] audit: type=1326 audit(1752855918.183:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb833d8e9a9 code=0x7ffc0000 [ 797.321718][ T28] audit: type=1326 audit(1752855918.183:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12692 comm="syz.0.1916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb833d8e9a9 code=0x7ffc0000 [ 798.207570][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.069774][T12716] input: syz1 as /devices/virtual/input/input15 [ 802.733393][T12737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1932'. [ 802.985852][T12740] netlink: 'syz.0.1931': attribute type 1 has an invalid length. [ 805.552956][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 805.552970][ T28] audit: type=1326 audit(1752855927.073:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999218e9a9 code=0x7ffc0000 [ 805.613129][ T28] audit: type=1326 audit(1752855927.103:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999218e9a9 code=0x7ffc0000 [ 805.801323][ T28] audit: type=1326 audit(1752855927.113:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f999218e9a9 code=0x7ffc0000 [ 806.003202][ T28] audit: type=1326 audit(1752855927.113:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999218e9a9 code=0x7ffc0000 [ 806.221355][ T28] audit: type=1326 audit(1752855927.113:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f999218e9a9 code=0x7ffc0000 [ 806.454839][ T28] audit: type=1326 audit(1752855927.113:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999218e9a9 code=0x7ffc0000 [ 806.596366][ T28] audit: type=1326 audit(1752855927.113:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999218e9a9 code=0x7ffc0000 [ 806.653732][T12762] input: syz1 as /devices/virtual/input/input16 [ 806.695465][ T28] audit: type=1326 audit(1752855927.123:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f999218e9a9 code=0x7ffc0000 [ 806.824832][ T28] audit: type=1326 audit(1752855927.123:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999218e9a9 code=0x7ffc0000 [ 806.884854][ T28] audit: type=1326 audit(1752855927.123:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12756 comm="syz.1.1937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f999218e9a9 code=0x7ffc0000 [ 809.054409][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.060917][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.285013][T12797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1950'. [ 809.453901][T12800] input: syz1 as /devices/virtual/input/input17 [ 810.867827][T12817] (null): rxe_set_mtu: Set mtu to 1024 [ 810.970940][T12817] rdma_rxe: rxe_newlink: failed to add wg1 [ 811.284307][T12826] netlink: 'syz.0.1953': attribute type 1 has an invalid length. [ 812.176837][T11167] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 812.380496][T11167] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 812.402183][T11167] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 812.419279][T11167] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 812.438109][T11167] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 812.503258][T11167] usb 4-1: Product: syz [ 812.526674][T12837] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 812.538792][T11167] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 813.480318][T11167] usb 4-1: USB disconnect, device number 21 [ 814.380938][T12858] input: syz1 as /devices/virtual/input/input18 [ 814.780075][T11167] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 815.179475][T11167] usb 3-1: config 241 has an invalid interface number: 0 but max is -1 [ 815.811791][T11167] usb 3-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 815.822788][T11167] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 815.997874][T12880] netlink: 'syz.3.1967': attribute type 1 has an invalid length. [ 816.005930][T11167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.063721][T11167] pcwd_usb: This driver only supports 1 device [ 818.689990][ T7647] usb 3-1: USB disconnect, device number 21 [ 818.765370][T12906] input: syz1 as /devices/virtual/input/input19 [ 823.425025][T12950] input: syz1 as /devices/virtual/input/input20 [ 823.653369][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 823.663711][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 823.941483][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 823.949150][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 823.955576][T12955] ceph: No mds server is up or the cluster is laggy [ 827.361700][T12992] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1994'. [ 828.637929][ T5784] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 828.828360][ T5784] usb 2-1: Using ep0 maxpacket: 32 [ 828.857406][ T5784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 828.873036][ T5784] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 828.891062][ T5784] usb 2-1: config 1 interface 0 has no altsetting 0 [ 828.915745][ T5784] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 828.925878][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.934853][ T5784] usb 2-1: Product: syz [ 828.940010][ T5784] usb 2-1: Manufacturer: syz [ 828.944770][ T5784] usb 2-1: SerialNumber: syz [ 830.745881][ T5784] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 831.392277][ T5784] usb 2-1: USB disconnect, device number 12 [ 831.538491][ T5784] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 831.903770][T13059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2006'. [ 833.418050][ T5851] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 833.738318][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 833.987585][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 833.998646][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 834.009117][ T5851] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 834.019564][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 834.075804][ T5851] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 834.092545][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 834.108608][ T5851] usb 4-1: config 0 descriptor?? [ 834.119045][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 834.150124][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 834.297267][T13095] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2016'. [ 834.366787][ T5851] usb 4-1: USB disconnect, device number 22 [ 834.416568][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 834.442614][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 834.959785][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 834.968386][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 835.377805][ T5830] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 835.634210][ T5830] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 835.702208][ T5830] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 835.732051][ T5830] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 835.769209][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 835.793173][ T5830] usb 3-1: Product: syz [ 835.873302][T13097] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 836.034179][ T5830] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 836.217266][T13088] ceph: No mds server is up or the cluster is laggy [ 836.339945][ T55] libceph: connect (1)[c::]:6789 error -101 [ 836.347132][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 836.945629][ T5830] usb 3-1: USB disconnect, device number 22 [ 837.921173][T13117] nbd: couldn't find a device at index 10158080 [ 840.637884][ T55] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 841.759322][T11167] libceph: connect (1)[c::]:6789 error -101 [ 841.765508][T11167] libceph: mon0 (1)[c::]:6789 connect error [ 842.030527][T11167] libceph: connect (1)[c::]:6789 error -101 [ 842.103294][T11167] libceph: mon0 (1)[c::]:6789 connect error [ 843.006587][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 843.013263][T13144] ceph: No mds server is up or the cluster is laggy [ 843.020465][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 843.807878][ T788] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 843.998467][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 844.032794][ T788] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 844.079831][ T788] usb 3-1: config 254 has no interface number 0 [ 844.120959][ T788] usb 3-1: config 254 interface 235 altsetting 2 has an invalid endpoint with address 0xFF, skipping [ 844.131716][ T55] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 844.185860][ T55] usb 4-1: can't read configurations, error -71 [ 844.237793][ T788] usb 3-1: config 254 interface 235 has no altsetting 0 [ 844.269903][ T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 844.279775][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.413566][ T788] usb 3-1: Product: syz [ 844.525946][ T788] usb 3-1: Manufacturer: syz [ 844.594279][ T788] usb 3-1: SerialNumber: syz [ 844.668480][ T788] usbtest 3-1:254.235: couldn't get endpoints, -22 [ 844.697040][ T788] usbtest: probe of 3-1:254.235 failed with error -22 [ 846.495450][T11167] usb 3-1: USB disconnect, device number 23 [ 849.965936][ T788] libceph: connect (1)[c::]:6789 error -101 [ 849.972639][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 850.958220][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 851.735470][T13200] ceph: No mds server is up or the cluster is laggy [ 851.965830][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 852.498144][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 852.504263][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 853.504071][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 853.510345][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 853.749038][T13227] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 853.799820][T13227] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 853.927816][ T55] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 858.767964][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 858.777974][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 859.048099][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 859.061799][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 859.674461][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 859.697948][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 861.314582][ T788] libceph: connect (1)[c::]:6789 error -101 [ 861.337275][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 861.592969][T13261] ceph: No mds server is up or the cluster is laggy [ 864.178747][T13307] input: syz1 as /devices/virtual/input/input21 [ 864.276512][T13309] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 866.004701][ T788] libceph: connect (1)[c::]:6789 error -101 [ 866.014869][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 866.278414][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 866.337461][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 866.879712][ T788] libceph: connect (1)[c::]:6789 error -101 [ 866.923405][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 868.920521][ T788] libceph: connect (1)[c::]:6789 error -101 [ 868.926758][T13324] ceph: No mds server is up or the cluster is laggy [ 869.048231][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 870.494456][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.501268][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.593836][T13389] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 874.195986][ T788] libceph: connect (1)[c::]:6789 error -101 [ 874.203332][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 875.250432][ T788] libceph: connect (1)[c::]:6789 error -101 [ 875.403994][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 876.137170][ T788] libceph: connect (1)[c::]:6789 error -101 [ 876.144417][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 877.168521][T13403] ceph: No mds server is up or the cluster is laggy [ 878.837891][T13462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 879.190408][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 879.196614][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 879.478075][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 879.500677][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 879.587767][ T7647] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 879.770074][ T7647] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.795466][ T7647] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 879.823766][ T7647] usb 3-1: string descriptor 0 read error: -22 [ 879.830877][ T7647] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 879.840908][ T7647] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.873874][ T7647] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 879.881861][ T7647] usb 3-1: MIDIStreaming interface descriptor not found [ 880.048066][ T788] libceph: connect (1)[c::]:6789 error -101 [ 880.117583][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 881.298281][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 881.309789][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 882.891970][T13504] vivid-006: kernel_thread() failed [ 883.019976][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 883.026057][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 883.262323][T13474] ceph: No mds server is up or the cluster is laggy [ 883.298314][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 883.343474][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 883.354973][ T788] usb 3-1: USB disconnect, device number 24 [ 884.624957][T13534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 885.151166][T13542] syz.3.2120 uses old SIOCAX25GETINFO [ 886.709061][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 886.715150][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 887.002077][ T7647] libceph: connect (1)[c::]:6789 error -101 [ 887.158749][ T7647] libceph: mon0 (1)[c::]:6789 connect error [ 887.679113][ T7647] libceph: connect (1)[c::]:6789 error -101 [ 887.724526][ T7647] libceph: mon0 (1)[c::]:6789 connect error [ 889.210149][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 889.674548][T13555] ceph: No mds server is up or the cluster is laggy [ 891.414753][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 891.424170][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 891.442318][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 891.887450][T13585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 894.457025][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 894.501345][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 894.811294][ T5830] libceph: connect (1)[c::]:6789 error -101 [ 895.699691][ T5830] libceph: mon0 (1)[c::]:6789 connect error [ 897.140716][T13609] ceph: No mds server is up or the cluster is laggy [ 897.301500][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 897.440691][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 898.223491][T13632] netlink: 'syz.3.2147': attribute type 1 has an invalid length. [ 898.295570][T13631] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 899.793779][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 899.799993][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 900.068004][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 901.160023][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 901.688315][ T788] libceph: connect (1)[c::]:6789 error -101 [ 901.694791][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 902.715442][T13651] ceph: No mds server is up or the cluster is laggy [ 906.997034][T13688] input: syz1 as /devices/virtual/input/input22 [ 907.575024][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 907.599845][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 907.898167][ T5837] libceph: connect (1)[c::]:6789 error -101 [ 908.376444][ T5837] libceph: mon0 (1)[c::]:6789 connect error [ 909.348188][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 909.354621][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 910.248405][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 910.254797][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 910.297313][T13693] ceph: No mds server is up or the cluster is laggy [ 912.730304][T13730] input: syz1 as /devices/virtual/input/input23 [ 914.033193][T13741] can: request_module (can-proto-0) failed. [ 914.859369][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 915.214576][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 916.418238][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 916.807821][T11047] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 917.137828][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 917.370642][T13757] ceph: No mds server is up or the cluster is laggy [ 918.279826][T13779] input: syz1 as /devices/virtual/input/input24 [ 919.016950][T13783] sctp: [Deprecated]: syz.2.2194 (pid 13783) Use of int in max_burst socket option. [ 919.016950][T13783] Use struct sctp_assoc_value instead [ 919.166038][T13787] capability: warning: `syz.2.2194' uses 32-bit capabilities (legacy support in use) [ 928.443711][T13863] xt_nfacct: accounting object `syz1' does not exists [ 931.997859][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.308198][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.580057][T13949] ucma_write: process 1650 (syz.0.2231) changed security contexts after opening file descriptor, this is not allowed. [ 947.844154][T14010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.045946][T14010] bond0: (slave rose0): Enslaving as an active interface with an up link [ 950.878000][T14034] (null): rxe_set_mtu: Set mtu to 1024 [ 950.885210][T14034] rdma_rxe: rxe_newlink: failed to add wg1 [ 950.915112][T14032] pim6reg1: entered allmulticast mode [ 950.922675][T14032] pim6reg1: left allmulticast mode [ 955.973788][T14088] (null): rxe_set_mtu: Set mtu to 1024 [ 955.982079][T14088] rdma_rxe: rxe_newlink: failed to add wg1 [ 957.652138][T14107] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 962.486163][T14156] (null): rxe_set_mtu: Set mtu to 1024 [ 962.494004][T14156] rdma_rxe: rxe_newlink: failed to add wg1 [ 962.558608][T14156] pim6reg1: entered allmulticast mode [ 962.586047][T14156] pim6reg1: left allmulticast mode [ 964.121517][T14169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 967.729218][ T55] libceph: connect (1)[c::]:6789 error -101 [ 967.747875][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 968.010796][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 968.101000][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 968.628078][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 970.123705][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 970.699586][T14208] ceph: No mds server is up or the cluster is laggy [ 974.804810][T14254] syz.1.2299: attempt to access beyond end of device [ 974.804810][T14254] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 974.807811][T14256] wg1 speed is unknown, defaulting to 1000 [ 977.065706][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 977.108265][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 977.508840][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 977.632989][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 977.993881][T14263] ceph: No mds server is up or the cluster is laggy [ 980.653220][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 980.659752][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 980.860670][T14318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2312'. [ 980.918939][ T7647] libceph: connect (1)[c::]:6789 error -101 [ 980.975493][ T7647] libceph: mon0 (1)[c::]:6789 connect error [ 981.043979][T14332] syz.3.2315: attempt to access beyond end of device [ 981.043979][T14332] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 981.205090][T14342] wg1 speed is unknown, defaulting to 1000 [ 981.662570][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 981.671661][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 982.962410][T14323] ceph: No mds server is up or the cluster is laggy [ 984.856711][T11047] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 984.875322][T11047] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 984.886290][T11047] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 984.898078][T11047] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 984.918258][T11047] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 984.925644][T11047] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 984.958457][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 984.968411][ T5796] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 984.980569][ T5796] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 985.018758][T14380] syz0: rxe_newlink: already configured on wg1 [ 985.025992][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 985.037335][ T5796] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 985.046377][ T5796] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 985.104811][T14376] wg1 speed is unknown, defaulting to 1000 [ 985.111296][T14380] pim6reg1: entered allmulticast mode [ 985.221710][T14380] pim6reg1: left allmulticast mode [ 985.946551][ T7647] libceph: connect (1)[c::]:6789 error -101 [ 985.959022][ T7647] libceph: mon0 (1)[c::]:6789 connect error [ 986.599857][ T7647] libceph: connect (1)[c::]:6789 error -101 [ 986.605951][ T7647] libceph: mon0 (1)[c::]:6789 connect error [ 986.947887][T11167] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 987.127881][T11047] Bluetooth: hci1: command tx timeout [ 987.136315][ T7647] libceph: connect (1)[c::]:6789 error -101 [ 987.142643][ T7647] libceph: mon0 (1)[c::]:6789 connect error [ 987.170163][T11167] usb 2-1: config 241 has an invalid interface number: 0 but max is -1 [ 987.196034][T11167] usb 2-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 987.239770][T11167] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 987.239816][T11167] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.254243][T11167] pcwd_usb: This driver only supports 1 device [ 987.427018][T14376] chnl_net:caif_netlink_parms(): no params data found [ 987.474070][T11167] usb 2-1: USB disconnect, device number 14 [ 987.535425][T14376] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.542890][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.550809][T14376] bridge_slave_0: entered allmulticast mode [ 987.558850][T14376] bridge_slave_0: entered promiscuous mode [ 987.566896][T14376] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.574730][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.582469][T14376] bridge_slave_1: entered allmulticast mode [ 987.590630][T14376] bridge_slave_1: entered promiscuous mode [ 987.624819][T14376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 987.637507][T14376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 987.677297][T14376] team0: Port device team_slave_0 added [ 987.685774][T14376] team0: Port device team_slave_1 added [ 987.716452][T14376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.724059][T14376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.751359][T14376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.764665][T14376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.772009][T14376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 987.799156][T14376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.844080][T14376] hsr_slave_0: entered promiscuous mode [ 987.850642][T14376] hsr_slave_1: entered promiscuous mode [ 987.860129][T14376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 987.868822][T14376] Cannot create hsr debugfs directory [ 988.042681][T14376] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.083843][T14428] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 988.161785][T14376] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.248329][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 988.258873][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 988.375828][T14376] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.741110][T14399] ceph: No mds server is up or the cluster is laggy [ 989.207978][T11047] Bluetooth: hci1: command tx timeout [ 989.235949][T14444] pim6reg1: entered allmulticast mode [ 989.242549][T14449] pim6reg1: left allmulticast mode [ 989.402047][T14376] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 989.438924][T14376] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 989.460888][T14376] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 989.476019][T14376] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 989.625250][T14376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.666480][T14376] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.694663][ T5909] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.701942][ T5909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.724699][T13858] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.731900][T13858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.071484][T14376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.260775][T14376] veth0_vlan: entered promiscuous mode [ 991.288465][T11047] Bluetooth: hci1: command tx timeout [ 991.644373][T14376] veth1_vlan: entered promiscuous mode [ 991.825356][ T5823] libceph: connect (1)[c::]:6789 error -101 [ 992.000028][ T5823] libceph: mon0 (1)[c::]:6789 connect error [ 992.120983][T14376] veth0_macvtap: entered promiscuous mode [ 992.237002][T14376] veth1_macvtap: entered promiscuous mode [ 992.279638][T11167] libceph: connect (1)[c::]:6789 error -101 [ 992.286851][T11167] libceph: mon0 (1)[c::]:6789 connect error [ 992.367849][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.426257][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.477276][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.497340][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.511793][T14376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.526635][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.556097][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.583347][T14376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.616926][T14376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.652349][T14376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.788004][T14376] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.808544][T11167] libceph: connect (1)[c::]:6789 error -101 [ 992.816757][T14376] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.825877][T11167] libceph: mon0 (1)[c::]:6789 connect error [ 992.832122][T14376] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.841185][T14376] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.304977][T14512] pim6reg1: entered allmulticast mode [ 993.337411][T14513] pim6reg1: left allmulticast mode [ 993.370861][T11047] Bluetooth: hci1: command tx timeout [ 993.377988][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.384411][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.444222][T11167] libceph: connect (1)[c::]:6789 error -101 [ 994.450446][T11167] libceph: mon0 (1)[c::]:6789 connect error [ 994.549813][T14484] ceph: No mds server is up or the cluster is laggy [ 994.728672][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.757606][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.853952][ T5909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.890279][ T5909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.929490][T14538] input: syz1 as /devices/virtual/input/input27 [ 995.178843][T14543] bridge_slave_0: left allmulticast mode [ 995.186213][T14543] bridge_slave_0: left promiscuous mode [ 995.194879][T14543] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.302972][T14543] bridge_slave_1: left allmulticast mode [ 995.342806][T14543] bridge_slave_1: left promiscuous mode [ 995.368466][T14543] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.522261][T14543] bond0: (slave bond_slave_0): Releasing backup interface [ 995.570073][T14543] bond_slave_0: left promiscuous mode [ 995.825100][T14543] bond0: (slave bond_slave_1): Releasing backup interface [ 995.900325][T14543] bond_slave_1: left promiscuous mode [ 995.960146][T14543] team_slave_0: left promiscuous mode [ 996.050461][T14543] team0: Port device team_slave_0 removed [ 996.068452][T14543] team_slave_1: left promiscuous mode [ 996.117839][T14543] team0: Port device team_slave_1 removed [ 996.152470][T14543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 996.199351][T14543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.229295][T14543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 996.252639][T14543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.546887][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 996.708280][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 996.727130][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 996.741037][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 996.854530][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 996.863695][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 997.840117][T14560] wg1 speed is unknown, defaulting to 1000 [ 998.673319][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.814484][T14576] pim6reg1: entered allmulticast mode [ 998.821713][T14579] pim6reg1: left allmulticast mode [ 998.891873][ T6827] infiniband syz0: set down [ 999.090768][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.128167][T11047] Bluetooth: hci3: command tx timeout [ 999.768272][ T5837] wg1 speed is unknown, defaulting to 1000 [ 999.778533][ T5837] wg1 speed is unknown, defaulting to 1000 [ 1000.007049][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.809776][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1001.025499][T14616] ax25_connect(): syz.1.2369 uses autobind, please contact jreuter@yaina.de [ 1001.213793][T14623] input: syz1 as /devices/virtual/input/input28 [ 1001.222515][T11047] Bluetooth: hci3: command tx timeout [ 1001.327708][ T7409] IPVS: starting estimator thread 0... [ 1001.425886][T14560] chnl_net:caif_netlink_parms(): no params data found [ 1001.437876][T14628] IPVS: using max 23 ests per chain, 55200 per kthread [ 1002.555391][T14560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.650650][T14560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.681346][T14560] bridge_slave_0: entered allmulticast mode [ 1002.701280][T14560] bridge_slave_0: entered promiscuous mode [ 1002.710116][T14560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.739062][T14560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.795828][T14560] bridge_slave_1: entered allmulticast mode [ 1002.869397][T14560] bridge_slave_1: entered promiscuous mode [ 1003.297818][T11047] Bluetooth: hci3: command tx timeout [ 1003.556263][T14646] pim6reg1: entered allmulticast mode [ 1003.601460][T14652] pim6reg1: left allmulticast mode [ 1003.890535][T14560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1005.386507][T11047] Bluetooth: hci3: command tx timeout [ 1005.529378][T14560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1006.747263][T14560] team0: Port device team_slave_0 added [ 1006.785602][T14560] team0: Port device team_slave_1 added [ 1009.358531][T14560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.386181][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.415711][T14560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1009.437220][T14560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.445622][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.473735][T14560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.660875][T14560] hsr_slave_0: entered promiscuous mode [ 1009.676429][T14560] hsr_slave_1: entered promiscuous mode [ 1009.727981][T14560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.735718][T14560] Cannot create hsr debugfs directory [ 1011.268714][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 1013.248516][ T59] hsr_slave_0: left promiscuous mode [ 1013.287712][T11047] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1015.019109][ T59] hsr_slave_1: left promiscuous mode [ 1015.087905][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1015.107783][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1015.134276][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1015.149728][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1015.332549][ T59] bridge_slave_1: left allmulticast mode [ 1015.403325][ T59] bridge_slave_1: left promiscuous mode [ 1015.709209][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.826187][ T59] bridge_slave_0: left allmulticast mode [ 1015.832335][ T59] bridge_slave_0: left promiscuous mode [ 1015.842094][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.936292][ T59] bridge0: left promiscuous mode [ 1015.944108][ T59] veth1_macvtap: left promiscuous mode [ 1015.951573][ T59] veth0_macvtap: left promiscuous mode [ 1015.959372][ T59] veth1_vlan: left promiscuous mode [ 1015.965088][ T59] veth0_vlan: left promiscuous mode [ 1016.041751][T14774] fuse: Bad value for 'fd' [ 1016.542819][ T59] infiniband syz0: set down [ 1017.016724][T14785] syz.0.2405: attempt to access beyond end of device [ 1017.016724][T14785] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1017.525784][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1017.583209][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1017.638928][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.709119][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.893824][T14704] smc: removing ib device syz0 [ 1018.762561][ T59] bond0 (unregistering): Released all slaves [ 1019.150143][ T7647] wg1 speed is unknown, defaulting to 1000 [ 1024.212055][T14560] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1024.253945][T14560] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1024.299237][T14560] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1024.328884][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 1024.337130][T14560] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1024.349857][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 1025.156500][ T7647] libceph: connect (1)[c::]:6789 error -101 [ 1025.190140][ T7647] libceph: mon0 (1)[c::]:6789 connect error [ 1025.196375][T14846] ceph: No mds server is up or the cluster is laggy [ 1025.646132][T14560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.862000][T14560] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.073830][T14704] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.081208][T14704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.122767][T14879] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1026.208569][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.215750][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.132125][T14560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.416821][T14560] veth0_vlan: entered promiscuous mode [ 1027.481918][T14560] veth1_vlan: entered promiscuous mode [ 1027.594335][T14560] veth0_macvtap: entered promiscuous mode [ 1027.632336][T14560] veth1_macvtap: entered promiscuous mode [ 1027.703582][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1027.734770][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.766934][T14560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.815564][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1027.841424][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1027.911251][T14560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1028.041259][T14560] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.050442][T14560] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.060617][T14560] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.070033][T14560] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.658065][T14739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.666313][T14739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.593833][T14739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.649810][T14739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.244909][T14939] lo: entered promiscuous mode [ 1032.292470][T14939] tunl0: entered promiscuous mode [ 1032.306009][T14939] gre0: entered promiscuous mode [ 1032.365232][T14939] gretap0: entered promiscuous mode [ 1032.406182][T14939] erspan0: entered promiscuous mode [ 1032.450190][T14939] ip_vti0: entered promiscuous mode [ 1033.009179][T14939] ip6_vti0: entered promiscuous mode [ 1033.063823][T14939] sit0: entered promiscuous mode [ 1033.088908][T14939] ip6tnl0: entered promiscuous mode [ 1033.150660][T14939] ip6gre0: entered promiscuous mode [ 1033.216966][T14939] syz_tun: entered promiscuous mode [ 1033.255008][T14939] ip6gretap0: entered promiscuous mode [ 1033.355608][T14939] bridge0: entered promiscuous mode [ 1033.414327][T14939] vcan0: entered promiscuous mode [ 1033.468619][T14939] bond0: entered promiscuous mode [ 1033.473747][T14939] bond_slave_0: entered promiscuous mode [ 1033.500620][T14939] bond_slave_1: entered promiscuous mode [ 1033.523282][T14939] team0: entered promiscuous mode [ 1033.529341][T14939] team_slave_0: entered promiscuous mode [ 1033.536837][T14939] team_slave_1: entered promiscuous mode [ 1033.556711][T14939] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.684175][T14939] dummy0: entered promiscuous mode [ 1033.695970][T14939] nlmon0: entered promiscuous mode [ 1033.752418][T14939] caif0: entered promiscuous mode [ 1033.797759][T14939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1037.169052][T11047] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1037.184220][T11047] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1037.214212][T11047] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1037.269729][T11047] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1037.282641][T11047] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1037.299539][T11047] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1038.033567][ T5910] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.272498][ T5910] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.527767][ T5796] Bluetooth: hci4: command tx timeout [ 1040.328816][ T5910] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.396376][T15019] lo: entered promiscuous mode [ 1040.538284][T15019] tunl0: entered promiscuous mode [ 1040.544566][T15019] gre0: entered promiscuous mode [ 1040.654614][T15019] gretap0: entered promiscuous mode [ 1040.666945][T15019] erspan0: entered promiscuous mode [ 1040.681537][T15019] ip_vti0: entered promiscuous mode [ 1040.696339][T15019] ip6_vti0: entered promiscuous mode [ 1040.708677][T15019] sit0: entered promiscuous mode [ 1040.722551][T15019] ip6tnl0: entered promiscuous mode [ 1040.812605][T15019] ip6gre0: entered promiscuous mode [ 1041.038443][T15019] syz_tun: entered promiscuous mode [ 1041.044843][T15019] ip6gretap0: entered promiscuous mode [ 1041.101791][T15019] bridge0: entered promiscuous mode [ 1041.150294][T15019] vcan0: entered promiscuous mode [ 1041.217221][T15019] bond0: entered promiscuous mode [ 1041.243923][T15019] bond_slave_0: entered promiscuous mode [ 1041.264768][T15019] bond_slave_1: entered promiscuous mode [ 1041.292924][T15019] team0: entered promiscuous mode [ 1041.301545][T15019] team_slave_0: entered promiscuous mode [ 1041.315291][T15019] team_slave_1: entered promiscuous mode [ 1041.339193][T15019] dummy0: entered promiscuous mode [ 1041.360989][T15019] nlmon0: entered promiscuous mode [ 1041.383049][T15019] caif0: entered promiscuous mode [ 1041.404217][T15019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1041.512099][ T5910] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.608527][ T5796] Bluetooth: hci4: command tx timeout [ 1042.886679][T14988] chnl_net:caif_netlink_parms(): no params data found [ 1043.689091][ T5796] Bluetooth: hci4: command tx timeout [ 1045.907443][T15089] pim6reg1: entered allmulticast mode [ 1045.918062][T15089] pim6reg1: left allmulticast mode [ 1045.946611][ T5796] Bluetooth: hci4: command tx timeout [ 1048.874725][T14988] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.886642][T14988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.935195][T14988] bridge_slave_0: entered allmulticast mode [ 1048.959469][T14988] bridge_slave_0: entered promiscuous mode [ 1049.113075][T15111] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1049.378686][T14988] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.386099][T14988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.435390][T14988] bridge_slave_1: entered allmulticast mode [ 1049.468257][T14988] bridge_slave_1: entered promiscuous mode [ 1050.601655][T14988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1050.683723][T14988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.952717][T14988] team0: Port device team_slave_0 added [ 1051.662402][T14988] team0: Port device team_slave_1 added [ 1054.136171][T14988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.147090][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.200795][T14988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.476458][T14988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.502331][T14988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.747747][T14988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.814679][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.821420][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.282381][ T5910] hsr_slave_0: left promiscuous mode [ 1057.301667][ T5910] hsr_slave_1: left promiscuous mode [ 1057.315832][ T5910] bridge_slave_1: left allmulticast mode [ 1057.332334][ T5910] bridge_slave_1: left promiscuous mode [ 1057.452870][ T5910] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.525890][ T5910] bridge_slave_0: left allmulticast mode [ 1057.564490][ T5910] bridge_slave_0: left promiscuous mode [ 1058.445837][ T5910] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.696439][ T5910] veth1_macvtap: left promiscuous mode [ 1058.703523][T15183] input: syz1 as /devices/virtual/input/input31 [ 1058.715481][ T5910] veth0_macvtap: left promiscuous mode [ 1058.767835][ T5910] veth1_vlan: left promiscuous mode [ 1058.777767][ T5910] veth0_vlan: left promiscuous mode [ 1059.886350][ T5910] net veth1_virt_wifi virt_wifi0 (unregistering): left promiscuous mode [ 1059.909304][ T5910] team0 (unregistering): Port device virt_wifi0 removed [ 1060.383241][ T5910] team_slave_1 (unregistering): left promiscuous mode [ 1060.394199][ T5910] team0 (unregistering): Port device team_slave_1 removed [ 1060.465696][ T5910] team_slave_0 (unregistering): left promiscuous mode [ 1060.479931][ T5910] team0 (unregistering): Port device team_slave_0 removed [ 1060.562180][ T5910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.572685][ T5910] bond_slave_1 (unregistering): left promiscuous mode [ 1060.627074][ T5910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.640428][ T5910] bond_slave_0 (unregistering): left promiscuous mode [ 1061.348164][ T5910] bond0 (unregistering): Released all slaves [ 1061.501406][T15181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1061.603208][T14988] hsr_slave_0: entered promiscuous mode [ 1061.629576][T14988] hsr_slave_1: entered promiscuous mode [ 1061.654288][T14988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1061.675471][T14988] Cannot create hsr debugfs directory [ 1063.997415][ T5910] IPVS: stop unused estimator thread 0... [ 1064.409334][T15232] pim6reg1: entered allmulticast mode [ 1064.442643][T15234] pim6reg1: left allmulticast mode [ 1065.661684][T15248] input: syz1 as /devices/virtual/input/input32 [ 1065.981636][T14988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1066.017166][T14988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1066.056981][T14988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1066.114552][T14988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1066.549932][T14988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.706820][T14988] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.753980][T15162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.761568][T15162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.841647][T15273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1066.955030][T15162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.962593][T15162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1067.458408][ T5784] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1067.680243][ T5784] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1067.717615][ T5784] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1067.800883][T14988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.917802][ T5784] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1067.951850][ T5784] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1067.966360][T14988] veth0_vlan: entered promiscuous mode [ 1067.977585][ T5784] usb 4-1: Product: syz [ 1067.992748][T15280] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1068.006963][ T5784] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1068.123385][T14988] veth1_vlan: entered promiscuous mode [ 1069.059461][T14988] veth0_macvtap: entered promiscuous mode [ 1069.202261][T14988] veth1_macvtap: entered promiscuous mode [ 1069.630344][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.687432][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.714049][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.727317][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.747171][ T5823] usb 4-1: USB disconnect, device number 25 [ 1070.339886][T14988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.584458][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.644275][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.660190][T15302] (null): rxe_set_mtu: Set mtu to 1024 [ 1070.800018][T14988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.832302][T14988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.865046][T14988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.868479][T15305] input: syz1 as /devices/virtual/input/input33 [ 1070.938032][T14988] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.030105][T14988] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.138493][T14988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.221627][T14988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.283978][T15302] wg1 speed is unknown, defaulting to 1000 [ 1071.311524][T15303] pim6reg1: entered allmulticast mode [ 1071.323828][T15307] pim6reg1: left allmulticast mode [ 1071.462569][T15302] wg1 speed is unknown, defaulting to 1000 [ 1072.253440][T15302] wg1 speed is unknown, defaulting to 1000 [ 1072.834826][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.758351][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.932376][T15302] infiniband syz0: set active [ 1073.937293][T15302] infiniband syz0: added wg1 [ 1073.943628][T15302] syz0: rxe_create_cq: returned err = -12 [ 1073.951705][T15302] infiniband syz0: Couldn't create ib_mad CQ [ 1073.958123][T15302] infiniband syz0: Couldn't open port 1 [ 1073.964250][ T788] wg1 speed is unknown, defaulting to 1000 [ 1074.103728][ T6827] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.121971][T15302] RDS/IB: syz0: added [ 1074.137719][T15302] smc: adding ib device syz0 with port count 1 [ 1074.163993][T15302] smc: ib device syz0 port 1 has pnetid [ 1074.170225][ T6827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.187160][ T788] wg1 speed is unknown, defaulting to 1000 [ 1074.197716][T15302] wg1 speed is unknown, defaulting to 1000 [ 1074.363887][T15324] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1074.673044][T15302] wg1 speed is unknown, defaulting to 1000 [ 1076.894659][T15302] wg1 speed is unknown, defaulting to 1000 [ 1078.808443][ T788] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1079.149762][ T788] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1079.161840][ T788] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1079.181155][ T788] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1079.215557][ T788] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1079.227437][T15302] wg1 speed is unknown, defaulting to 1000 [ 1079.235246][ T788] usb 2-1: Product: syz [ 1079.258384][T15357] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1079.271515][ T788] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1081.082458][T15302] wg1 speed is unknown, defaulting to 1000 [ 1083.779749][T15406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1084.835574][ T55] usb 2-1: USB disconnect, device number 15 [ 1087.375331][T15444] (null): rxe_set_mtu: Set mtu to 1024 [ 1087.421765][T15444] rdma_rxe: rxe_newlink: failed to add wg1 [ 1088.182425][T15444] pim6reg1: entered allmulticast mode [ 1088.215179][T15444] pim6reg1: left allmulticast mode [ 1094.564396][T15485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1098.756668][ T55] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1098.809217][T11047] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1098.818629][T11047] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1098.844746][T11047] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1098.858886][T11047] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1098.866966][T11047] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1098.874534][T11047] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1099.088674][ T55] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1099.278408][ T55] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1099.353045][ T55] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1099.380392][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.480739][ T55] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1099.527734][ T55] usb 4-1: Product: syz [ 1099.600294][T15527] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1099.707819][ T55] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 1099.931774][T14704] infiniband syz0: set down [ 1100.465250][ T7647] wg1 speed is unknown, defaulting to 1000 [ 1100.532109][ T788] usb 4-1: USB disconnect, device number 26 [ 1100.929797][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.967884][ T5796] Bluetooth: hci0: command tx timeout [ 1101.232162][ T5784] wg1 speed is unknown, defaulting to 1000 [ 1101.443542][T15548] udevd[15548]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1101.469120][T15534] wg1 speed is unknown, defaulting to 1000 [ 1101.662015][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.547714][T11047] Bluetooth: hci0: command tx timeout [ 1103.604613][T15559] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 1105.631614][T11047] Bluetooth: hci0: command tx timeout [ 1105.815886][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.487559][ T788] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1107.689606][T11047] Bluetooth: hci0: command tx timeout [ 1108.389267][T15596] input: syz1 as /devices/virtual/input/input34 [ 1108.409185][T15534] chnl_net:caif_netlink_parms(): no params data found [ 1108.442396][ T788] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1108.491264][ T788] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1108.513144][ T788] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1108.531354][ T788] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1108.541457][ T788] usb 2-1: Product: syz [ 1108.598470][T15583] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1108.620330][ T788] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1111.581132][ T7647] usb 2-1: USB disconnect, device number 16 [ 1112.029176][T15534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.989397][T15534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.275948][T15534] bridge_slave_0: entered allmulticast mode [ 1113.297719][T11047] Bluetooth: hci1: command 0x0406 tx timeout [ 1113.310522][T15534] bridge_slave_0: entered promiscuous mode [ 1114.455428][T15534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.475653][T15534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.511149][T15534] bridge_slave_1: entered allmulticast mode [ 1114.714112][T15534] bridge_slave_1: entered promiscuous mode [ 1115.984009][T15534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.125808][T15534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.257389][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.323754][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.802931][T15534] team0: Port device team_slave_0 added [ 1117.551879][T15534] team0: Port device team_slave_1 added [ 1118.682544][T15534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1118.781281][T15534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.134397][T15534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.337392][T15534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.435930][T15534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.521440][T15534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.575735][T15679] syz.2.2564: attempt to access beyond end of device [ 1119.575735][T15679] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1121.709023][T15685] wg1 speed is unknown, defaulting to 1000 [ 1121.725765][ T59] hsr_slave_0: left promiscuous mode [ 1121.777954][ T59] hsr_slave_1: left promiscuous mode [ 1121.843075][ T59] veth1_macvtap: left promiscuous mode [ 1121.859067][ T59] veth0_macvtap: left promiscuous mode [ 1121.877757][ T59] veth1_vlan: left promiscuous mode [ 1121.895447][ T59] veth0_vlan: left promiscuous mode [ 1122.384903][ T59] infiniband syz0: set down [ 1123.529314][ T5796] Bluetooth: hci3: command 0x0406 tx timeout [ 1125.301923][ T11] smc: removing ib device syz0 [ 1126.228567][ T59] bond0 (unregistering): Released all slaves [ 1126.446175][T15534] hsr_slave_0: entered promiscuous mode [ 1126.454579][T15534] hsr_slave_1: entered promiscuous mode [ 1126.472617][T15534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1126.500071][T15534] Cannot create hsr debugfs directory [ 1126.515720][ T55] wg1 speed is unknown, defaulting to 1000 [ 1129.049850][T15761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2575'. [ 1130.758517][T15534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1130.815893][T15534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1130.864320][T15534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1130.886375][T15534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1132.299308][T15534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.913560][T15534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.106351][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.113859][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.231102][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.238501][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1135.907397][T15534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1135.974630][T15534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1136.007639][T15128] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1136.700511][T15128] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1137.004066][T15128] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1137.587663][T15128] usb 4-1: string descriptor 0 read error: -71 [ 1137.593924][T15128] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1138.618588][T15128] usb 4-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1138.734869][T15128] usb 4-1: can't set config #27, error -71 [ 1138.765324][T15128] usb 4-1: USB disconnect, device number 27 [ 1141.570434][T15534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1141.890007][T15534] veth0_vlan: entered promiscuous mode [ 1141.921597][T15534] veth1_vlan: entered promiscuous mode [ 1141.987161][T15534] veth0_macvtap: entered promiscuous mode [ 1142.005767][T15534] veth1_macvtap: entered promiscuous mode [ 1142.075124][T15534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.106560][T15534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.119636][T15534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.135389][T15534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.167742][T15128] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1142.192781][T15534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.276450][T15534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.376992][T15128] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1142.402962][T15534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.469741][T15128] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1142.637358][T15534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.732119][T15128] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1142.753583][T15534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.779353][T15128] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1142.799852][T15534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.817470][T15128] usb 3-1: Product: syz [ 1142.831122][T15534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.841578][T15534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.849910][T15850] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1142.852353][T15534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.871707][T15534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.882316][T15128] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1142.882702][T15534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.909275][T15534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.931171][T15534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.947711][T15534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1143.681734][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.697925][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.829886][ T55] usb 3-1: USB disconnect, device number 25 [ 1143.897207][T14739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.962050][T14739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1144.873926][T15869] syz.3.2597: attempt to access beyond end of device [ 1144.873926][T15869] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1145.297735][T15884] (null): rxe_set_mtu: Set mtu to 1024 [ 1145.780067][T15884] wg1 speed is unknown, defaulting to 1000 [ 1145.818826][T15884] wg1 speed is unknown, defaulting to 1000 [ 1145.828661][T15884] wg1 speed is unknown, defaulting to 1000 [ 1148.146705][T15884] infiniband syz0: set active [ 1148.160657][T15128] wg1 speed is unknown, defaulting to 1000 [ 1148.176662][T15884] infiniband syz0: added wg1 [ 1148.182603][T15884] syz0: rxe_create_cq: returned err = -12 [ 1148.898196][T15884] infiniband syz0: Couldn't create ib_mad CQ [ 1148.929855][T15884] infiniband syz0: Couldn't open port 1 [ 1149.398686][T15884] RDS/IB: syz0: added [ 1149.402996][T15884] smc: adding ib device syz0 with port count 1 [ 1149.437739][T15884] smc: ib device syz0 port 1 has pnetid [ 1149.445254][T15128] wg1 speed is unknown, defaulting to 1000 [ 1149.457141][T15884] wg1 speed is unknown, defaulting to 1000 [ 1149.732115][T15884] wg1 speed is unknown, defaulting to 1000 [ 1150.552475][T15884] wg1 speed is unknown, defaulting to 1000 [ 1150.972883][T15884] wg1 speed is unknown, defaulting to 1000 [ 1153.166472][T15884] wg1 speed is unknown, defaulting to 1000 [ 1156.646447][T15961] syz.0.2615: attempt to access beyond end of device [ 1156.646447][T15961] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1156.944229][T15969] wg1 speed is unknown, defaulting to 1000 [ 1161.107811][T15995] (null): rxe_set_mtu: Set mtu to 1024 [ 1161.192247][T15995] rdma_rxe: rxe_newlink: failed to add wg1 [ 1161.767852][T11167] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1162.314388][T11167] usb 4-1: config 241 has an invalid interface number: 0 but max is -1 [ 1162.423432][T11167] usb 4-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 1162.501153][T11167] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1162.540726][T11167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.586537][T11167] pcwd_usb: This driver only supports 1 device [ 1164.057280][ T5830] usb 4-1: USB disconnect, device number 28 [ 1164.407626][T11047] Bluetooth: hci4: command 0x0406 tx timeout [ 1168.690903][T16046] syz.1.2634: attempt to access beyond end of device [ 1168.690903][T16046] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1168.772820][T16056] wg1 speed is unknown, defaulting to 1000 [ 1173.813013][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1173.901847][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1174.367250][T16101] ceph: No mds server is up or the cluster is laggy [ 1174.370014][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1174.403758][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1178.748309][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.754967][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.819183][ T5784] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1181.882277][T16155] syz.2.2657: attempt to access beyond end of device [ 1181.882277][T16155] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1182.019459][ T5784] usb 2-1: config 241 has an invalid interface number: 0 but max is -1 [ 1182.028385][ T5784] usb 2-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 1182.043134][ T5784] usb 2-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1182.059873][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.094176][ T5784] pcwd_usb: This driver only supports 1 device [ 1182.117770][T16160] wg1 speed is unknown, defaulting to 1000 [ 1182.302674][T15128] usb 2-1: USB disconnect, device number 17 [ 1187.342432][T15072] libceph: connect (1)[c::]:6789 error -101 [ 1187.348883][T15072] libceph: mon0 (1)[c::]:6789 connect error [ 1187.398048][T16205] ceph: No mds server is up or the cluster is laggy [ 1187.971767][T15072] libceph: connect (1)[c::]:6789 error -101 [ 1187.988826][T15072] libceph: mon0 (1)[c::]:6789 connect error [ 1188.212716][T16221] input: syz1 as /devices/virtual/input/input35 [ 1193.248742][T16248] syz.3.2678: attempt to access beyond end of device [ 1193.248742][T16248] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1193.429406][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1193.435448][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1193.483925][T16257] wg1 speed is unknown, defaulting to 1000 [ 1193.910217][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1193.917016][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1194.079884][T16259] ceph: No mds server is up or the cluster is laggy [ 1194.437946][ T55] libceph: connect (1)[c::]:6789 error -101 [ 1194.444071][ T55] libceph: mon0 (1)[c::]:6789 connect error [ 1195.852292][T16277] input: syz1 as /devices/virtual/input/input36 [ 1198.008237][ T55] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1198.283421][ T55] usb 4-1: config 241 has an invalid interface number: 0 but max is -1 [ 1198.294164][ T55] usb 4-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 1198.304266][ T55] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1198.313650][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.471248][ T55] pcwd_usb: This driver only supports 1 device [ 1198.695143][ T55] usb 4-1: USB disconnect, device number 29 [ 1200.565320][T16317] syz.1.2696: attempt to access beyond end of device [ 1200.565320][T16317] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1202.611970][T16332] input: syz1 as /devices/virtual/input/input37 [ 1202.621348][T16320] wg1 speed is unknown, defaulting to 1000 [ 1207.787752][T16387] input: syz1 as /devices/virtual/input/input38 [ 1210.769676][T16417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1213.795448][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1216.094538][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1216.654335][T16435] syz.0.2719: attempt to access beyond end of device [ 1216.654335][T16435] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1216.780938][T16441] wg1 speed is unknown, defaulting to 1000 [ 1216.817909][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 1216.826723][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 1217.678380][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1217.685240][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1218.071794][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1218.088932][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1218.117752][T16428] ceph: No mds server is up or the cluster is laggy [ 1224.944725][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 1226.169509][T11047] Bluetooth: hci0: command 0x0406 tx timeout [ 1227.218394][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 1227.487931][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 1227.494080][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 1229.305241][T16493] ceph: No mds server is up or the cluster is laggy [ 1229.323631][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 1229.357849][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 1233.139180][T15072] libceph: connect (1)[c::]:6789 error -101 [ 1233.150629][T15072] libceph: mon0 (1)[c::]:6789 connect error [ 1234.062924][T15072] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1234.078631][ T788] libceph: connect (1)[c::]:6789 error -101 [ 1234.084721][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 1234.424877][T15072] usb 3-1: config 241 has an invalid interface number: 0 but max is -1 [ 1234.486004][T15072] usb 3-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 1234.504766][T15072] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1234.540732][T15072] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.559197][T16528] ceph: No mds server is up or the cluster is laggy [ 1234.598617][T15128] libceph: connect (1)[c::]:6789 error -101 [ 1234.618332][T15072] pcwd_usb: This driver only supports 1 device [ 1234.624912][T15128] libceph: mon0 (1)[c::]:6789 connect error [ 1234.856162][T16546] lo: entered promiscuous mode [ 1234.913099][T16546] tunl0: entered promiscuous mode [ 1234.950263][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 1235.050754][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 1235.162515][T16546] gre0: entered promiscuous mode [ 1235.368168][T16546] gretap0: entered promiscuous mode [ 1235.378881][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 1235.410890][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 1235.516225][T16546] erspan0: entered promiscuous mode [ 1235.679219][T16546] ip_vti0: entered promiscuous mode [ 1235.867997][T16546] ip6_vti0: entered promiscuous mode [ 1235.980883][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1236.021106][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1236.064541][T16546] sit0: entered promiscuous mode [ 1236.201001][T16546] ip6tnl0: entered promiscuous mode [ 1236.283183][T16546] ip6gre0: entered promiscuous mode [ 1236.341300][T16546] syz_tun: entered promiscuous mode [ 1236.401000][T16546] ip6gretap0: entered promiscuous mode [ 1236.462506][T16546] bridge0: entered promiscuous mode [ 1236.523572][T16546] vcan0: entered promiscuous mode [ 1236.586840][T16546] bond0: entered promiscuous mode [ 1236.632979][T16546] bond_slave_0: entered promiscuous mode [ 1236.684013][T16546] bond_slave_1: entered promiscuous mode [ 1236.748841][T16546] team0: entered promiscuous mode [ 1236.789337][T16546] team_slave_0: entered promiscuous mode [ 1236.838569][T16546] team_slave_1: entered promiscuous mode [ 1236.907994][T16546] dummy0: entered promiscuous mode [ 1236.974228][T16546] nlmon0: entered promiscuous mode [ 1237.044025][T16546] caif0: entered promiscuous mode [ 1237.089014][T16546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1237.252194][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1237.323475][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1237.692816][ T5851] usb 3-1: USB disconnect, device number 26 [ 1237.847606][T16548] ceph: No mds server is up or the cluster is laggy [ 1238.962138][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1239.107413][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1239.142843][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.167637][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1242.061776][T16582] lo: entered promiscuous mode [ 1242.062392][T16582] tunl0: entered promiscuous mode [ 1242.063233][T16582] gre0: entered promiscuous mode [ 1242.065260][T16582] gretap0: entered promiscuous mode [ 1242.066288][T16582] erspan0: entered promiscuous mode [ 1242.067031][T16582] ip_vti0: entered promiscuous mode [ 1242.069576][T16582] ip6_vti0: entered promiscuous mode [ 1242.071812][T16582] sit0: entered promiscuous mode [ 1242.075090][T16582] ip6tnl0: entered promiscuous mode [ 1242.082886][T16582] ip6gre0: entered promiscuous mode [ 1242.084612][T16582] syz_tun: entered promiscuous mode [ 1242.096136][T16582] ip6gretap0: entered promiscuous mode [ 1242.096610][T16582] bridge0: entered promiscuous mode [ 1242.096946][T16582] vcan0: entered promiscuous mode [ 1242.102520][T16582] bond0: entered promiscuous mode [ 1242.102540][T16582] bond_slave_0: entered promiscuous mode [ 1242.102638][T16582] bond_slave_1: entered promiscuous mode [ 1242.108221][T16582] team0: entered promiscuous mode [ 1242.108243][T16582] team_slave_0: entered promiscuous mode [ 1242.108421][T16582] team_slave_1: entered promiscuous mode [ 1242.112026][T16582] dummy0: entered promiscuous mode [ 1242.114319][T16582] nlmon0: entered promiscuous mode [ 1242.117028][T16582] caif0: entered promiscuous mode [ 1242.117050][T16582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1244.917270][T15072] libceph: connect (1)[c::]:6789 error -101 [ 1245.000162][T15072] libceph: mon0 (1)[c::]:6789 connect error [ 1245.338175][T15072] libceph: connect (1)[c::]:6789 error -101 [ 1245.391025][T15072] libceph: mon0 (1)[c::]:6789 connect error [ 1245.958848][T11167] libceph: connect (1)[c::]:6789 error -101 [ 1246.009205][T11167] libceph: mon0 (1)[c::]:6789 connect error [ 1247.288899][T11167] libceph: connect (1)[c::]:6789 error -101 [ 1247.336215][T11167] libceph: mon0 (1)[c::]:6789 connect error [ 1247.782658][T16590] ceph: No mds server is up or the cluster is laggy [ 1250.985231][T16616] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 1252.212973][ T5784] libceph: connect (1)[c::]:6789 error -101 [ 1252.353966][ T5784] libceph: mon0 (1)[c::]:6789 connect error [ 1254.622614][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 1254.660430][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 1254.804092][T16628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1255.508920][ T5851] libceph: connect (1)[c::]:6789 error -101 [ 1255.523377][ T5851] libceph: mon0 (1)[c::]:6789 connect error [ 1255.887036][ T7409] libceph: connect (1)[c::]:6789 error -101 [ 1255.893347][ T7409] libceph: mon0 (1)[c::]:6789 connect error [ 1256.275028][T16621] ceph: No mds server is up or the cluster is laggy [ 1259.771120][T16683] xt_nfacct: accounting object `syz1' does not exists [ 1263.826621][T16719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1264.713678][T16737] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1264.813788][T16740] bridge_slave_0: left allmulticast mode [ 1264.910860][T16740] bridge_slave_0: left promiscuous mode [ 1264.930701][T16740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.980723][T16740] bridge_slave_1: left allmulticast mode [ 1264.986897][T16740] bridge_slave_1: left promiscuous mode [ 1265.014979][T16740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.047269][T16740] bond0: (slave bond_slave_0): Releasing backup interface [ 1265.063549][T16740] bond_slave_0: left promiscuous mode [ 1265.094946][T16740] bond0: (slave bond_slave_1): Releasing backup interface [ 1265.110338][T16740] bond_slave_1: left promiscuous mode [ 1265.130092][T16740] team_slave_0: left promiscuous mode [ 1265.226743][T16740] team0: Port device team_slave_0 removed [ 1265.246121][T16740] team_slave_1: left promiscuous mode [ 1265.286081][T16740] team0: Port device team_slave_1 removed [ 1265.302228][T16740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1265.310745][T16740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1265.321928][T16740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1265.332083][T16740] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1265.354296][T16741] netlink: 'syz.3.2797': attribute type 10 has an invalid length. [ 1265.363499][T16741] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 1265.411897][T16741] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1265.423493][T16741] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1269.123141][T16774] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1274.042371][T16856] vcan0: tx drop: invalid sa for name 0xfbfffffffffffffd [ 1274.108395][T16831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.116593][T16831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.267014][T16831] infiniband syz0: set down [ 1275.431192][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.471234][T16831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.775699][T16831] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.790343][T16831] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.800541][T16831] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.809777][T16831] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.896694][T16839] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1275.935128][T16856] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2822'. [ 1276.007960][ T5851] wg1 speed is unknown, defaulting to 1000 [ 1276.023726][ T5851] wg1 speed is unknown, defaulting to 1000 [ 1277.118005][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2827'. [ 1277.119600][T16868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1277.136807][T16868] 8021q: adding VLAN 0 to HW filter on device team0 [ 1277.149427][T16868] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1277.158921][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2827'. [ 1277.276315][T16882] netlink: 'syz.3.2827': attribute type 10 has an invalid length. [ 1277.486569][T16882] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1278.018300][T16882] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1278.048899][T16888] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1280.347045][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 1283.246891][T16925] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1285.842003][T16951] netlink: 'syz.3.2843': attribute type 10 has an invalid length. [ 1285.970417][T16951] dummy0: left promiscuous mode [ 1286.376707][T16951] dummy0: entered promiscuous mode [ 1286.539754][T16951] team0: Port device dummy0 added [ 1287.009746][T16957] netlink: 'syz.3.2843': attribute type 10 has an invalid length. [ 1287.255790][T16957] dummy0: left promiscuous mode [ 1287.317143][T16957] team0: Port device dummy0 removed [ 1287.340119][T16957] dummy0: entered promiscuous mode [ 1287.358772][T16957] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1287.485279][T16972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2848'. [ 1287.520314][T16955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1287.558841][T16974] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 1287.583445][T16963] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1289.487578][T16987] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1289.841673][T16998] Bluetooth: MGMT ver 1.22 [ 1291.927461][T11047] Bluetooth: hci0: command 0x0406 tx timeout [ 1293.041563][T17030] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1296.151871][T17055] netlink: 'syz.3.2867': attribute type 10 has an invalid length. [ 1296.188969][T17055] bridge0: left promiscuous mode [ 1296.278972][T17059] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2867'. [ 1296.309526][T17055] bridge0: entered promiscuous mode [ 1296.320206][T17055] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1296.434712][T17060] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1298.050355][T17081] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2873'. [ 1298.233534][T17081] gretap0: left promiscuous mode [ 1299.530767][T17089] syz.3.2876: attempt to access beyond end of device [ 1299.530767][T17089] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1299.686086][T17093] wg1 speed is unknown, defaulting to 1000 [ 1300.572656][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.579240][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.694585][T17128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1304.640704][T17148] mac80211_hwsim hwsim17 wlan1: entered allmulticast mode [ 1305.007057][T17148] bridge_slave_0: left allmulticast mode [ 1305.016968][T17148] bridge_slave_0: left promiscuous mode [ 1305.024385][T17148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.082174][T17148] bridge_slave_1: left allmulticast mode [ 1305.254157][T17148] bridge_slave_1: left promiscuous mode [ 1305.402625][T17148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.795657][T17148] bond0: (slave bond_slave_0): Releasing backup interface [ 1305.915032][T17148] bond_slave_0: left promiscuous mode [ 1305.933416][T17148] bond0: (slave bond_slave_1): Releasing backup interface [ 1305.949814][T17148] bond_slave_1: left promiscuous mode [ 1305.965347][T17148] team_slave_0: left promiscuous mode [ 1306.006133][T17148] team0: Port device team_slave_0 removed [ 1306.026341][T17148] team_slave_1: left promiscuous mode [ 1306.057042][T17148] team0: Port device team_slave_1 removed [ 1306.068863][T17148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.079178][T17148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1306.367139][T17167] tipc: Started in network mode [ 1306.389592][T17167] tipc: Node identity 025f28d0a622, cluster identity 4711 [ 1306.427700][T17167] tipc: Enabled bearer , priority 0 [ 1306.461691][T17174] syzkaller0: entered promiscuous mode [ 1306.480165][T17174] syzkaller0: entered allmulticast mode [ 1306.593985][T17167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2894'. [ 1306.607255][T17177] syz.0.2897: attempt to access beyond end of device [ 1306.607255][T17177] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1306.647966][T17167] tipc: Resetting bearer [ 1306.717889][T17186] wg1 speed is unknown, defaulting to 1000 [ 1306.814964][T17166] tipc: Resetting bearer [ 1307.820217][T16847] tipc: Node number set to 2759665872 [ 1307.890364][T17166] tipc: Disabling bearer [ 1308.207749][T17202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1312.537351][T17236] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1315.317704][T11167] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1315.960604][T11167] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1315.981121][T17272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1316.019554][T11167] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1316.058168][T11167] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1316.087594][T11167] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1316.117361][T11167] usb 2-1: Product: syz [ 1316.144755][T17260] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1316.157150][T11167] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1316.464992][ T5784] usb 2-1: USB disconnect, device number 18 [ 1330.678080][T17350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1331.046527][T17360] input: syz1 as /devices/virtual/input/input39 [ 1331.914580][ T5784] IPVS: starting estimator thread 0... [ 1332.007458][T17370] IPVS: using max 20 ests per chain, 48000 per kthread [ 1334.266646][T17369] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.277941][T17369] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.293069][T17369] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.302594][T17369] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1334.403188][T17376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2945'. [ 1335.177706][T17387] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1335.447769][T17411] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1335.449006][T17387] usb 3-1: config 241 has an invalid interface number: 0 but max is -1 [ 1335.551710][T17387] usb 3-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 1335.580190][T17387] usb 3-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1335.598897][T17387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.664628][T17387] pcwd_usb: This driver only supports 1 device [ 1336.009705][T17387] usb 3-1: USB disconnect, device number 27 [ 1336.664062][T17418] input: syz1 as /devices/virtual/input/input40 [ 1338.332284][T17447] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1338.497422][T17387] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1338.733726][T17387] usb 4-1: config 241 has an invalid interface number: 0 but max is -1 [ 1338.767678][T17387] usb 4-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 1338.777081][T17387] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1338.790163][T17387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.825661][T17455] input: syz1 as /devices/virtual/input/input41 [ 1338.849325][T17387] pcwd_usb: This driver only supports 1 device [ 1339.214951][T17387] usb 4-1: USB disconnect, device number 30 [ 1340.213793][T17463] xt_nfacct: accounting object `syz1' does not exists [ 1340.583935][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2971'. [ 1340.780413][T17483] input: syz1 as /devices/virtual/input/input42 [ 1340.849074][T17484] wg1 speed is unknown, defaulting to 1000 [ 1341.925099][T17509] xt_nfacct: accounting object `syz1' does not exists [ 1343.906486][ T78] Bluetooth: hci2: Frame reassembly failed (-84) [ 1344.196672][T17534] input: syz1 as /devices/virtual/input/input43 [ 1345.928000][T17000] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1347.806182][T17560] syz.2.2995: attempt to access beyond end of device [ 1347.806182][T17560] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1348.001260][T17568] wg1 speed is unknown, defaulting to 1000 [ 1349.506013][T17595] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1350.215272][T17605] batman_adv: batadv0: Adding interface: macvlan2 [ 1350.256378][T17605] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.301190][T17605] batman_adv: batadv0: Interface activated: macvlan2 [ 1350.408550][T17608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3008'. [ 1350.545290][ T788] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1350.727941][T17621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.741114][ T788] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1350.754677][T17621] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.773856][ T788] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1350.795293][T17621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1350.817527][ T788] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1350.826825][ T788] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1350.841103][ T788] usb 2-1: Product: syz [ 1350.869615][T17610] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1350.880683][ T788] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1351.732973][T17387] usb 2-1: USB disconnect, device number 19 [ 1352.347517][T17387] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1355.382464][T17387] usb 3-1: unable to read config index 0 descriptor/all [ 1355.409047][T17387] usb 3-1: can't read configurations, error -71 [ 1355.588453][T17666] gretap0: entered promiscuous mode [ 1355.631394][T17666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1356.137508][T17387] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1356.359602][T17387] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1356.402118][T17387] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1356.433459][T17387] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1356.461405][T17387] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1356.480687][T17387] usb 3-1: Product: syz [ 1356.500550][T17672] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1356.513522][T17387] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1357.658000][T17386] usb 3-1: USB disconnect, device number 29 [ 1358.897877][T17726] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1360.932331][T17760] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1362.011986][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.018841][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.230655][T17798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1363.323129][T17801] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3062'. [ 1363.487710][T15072] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1363.689578][T15072] usb 4-1: config 241 has an invalid interface number: 0 but max is -1 [ 1363.713175][T15072] usb 4-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 1363.752492][T15072] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 1363.782342][T15072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.817164][T15072] pcwd_usb: This driver only supports 1 device [ 1364.022121][T15072] usb 4-1: USB disconnect, device number 31 [ 1366.440231][T17848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1371.226885][T17900] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1371.724826][T17912] tipc: Started in network mode [ 1371.733999][T17912] tipc: Node identity 4, cluster identity 4711 [ 1371.743161][T17912] tipc: Node number set to 4 [ 1374.014156][T17937] batman_adv: batadv0: Adding interface: macvlan2 [ 1374.037445][T17937] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1374.082291][T17937] batman_adv: batadv0: Interface activated: macvlan2 [ 1374.391103][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1374.575504][T17946] wg1 speed is unknown, defaulting to 1000 [ 1374.962547][T17956] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 1374.996909][T17956] bridge_slave_0: left allmulticast mode [ 1375.008470][T17956] bridge_slave_0: left promiscuous mode [ 1375.214157][T17956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1375.486660][T17956] bridge_slave_1: left allmulticast mode [ 1375.562975][T17956] bridge_slave_1: left promiscuous mode [ 1375.629993][T17956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1375.659102][T17956] bond0: (slave bond_slave_0): Releasing backup interface [ 1375.713915][T17956] bond_slave_0: left promiscuous mode [ 1375.773738][T17956] bond0: (slave bond_slave_1): Releasing backup interface [ 1375.785971][T17956] bond_slave_1: left promiscuous mode [ 1375.807998][T17956] team_slave_0: left promiscuous mode [ 1375.836176][T17956] team0: Port device team_slave_0 removed [ 1375.843239][T17956] team_slave_1: left promiscuous mode [ 1375.864310][T17956] team0: Port device team_slave_1 removed [ 1375.871556][T17956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1375.879344][T17956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1375.888086][T17956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1375.895536][T17956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1376.106421][T17963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.113741][T17963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.475560][T17963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1376.499049][T17963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1376.815395][T17963] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.824809][T17963] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.834335][T17963] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.843393][T17963] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.132644][T17973] wg1 speed is unknown, defaulting to 1000 [ 1378.523363][T17978] wg1 speed is unknown, defaulting to 1000 [ 1379.231290][T18002] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1379.437810][ T27] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1379.629249][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1379.648590][ T27] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1379.661698][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1379.675327][ T27] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 1379.693405][ T27] usb 3-1: Product: syz [ 1379.715586][T18007] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1379.738495][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1380.028256][ T27] usb 3-1: USB disconnect, device number 30 [ 1380.141674][T17691] udevd[17691]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1380.625451][T18025] batman_adv: batadv0: Removing interface: macvlan2 [ 1380.671062][T18025] netlink: 'syz.0.3137': attribute type 10 has an invalid length. [ 1380.688378][T18025] mac80211_hwsim hwsim17 wlan1: left allmulticast mode [ 1380.702332][T18025] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1380.708683][T18027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3138'. [ 1380.710333][T18025] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1380.980016][T18033] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1382.152673][T18054] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 1382.169141][T18054] bridge_slave_0: left allmulticast mode [ 1382.177681][T18054] bridge_slave_0: left promiscuous mode [ 1382.183693][T18054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.194933][T18054] bridge_slave_1: left allmulticast mode [ 1382.200981][T18054] bridge_slave_1: left promiscuous mode [ 1382.207018][T18054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.221369][T18054] bond0: (slave bond_slave_0): Releasing backup interface [ 1382.230557][T18054] bond_slave_0: left promiscuous mode [ 1382.239438][T18054] bond0: (slave bond_slave_1): Releasing backup interface [ 1382.248637][T18054] bond_slave_1: left promiscuous mode [ 1382.255258][T18054] team_slave_0: left promiscuous mode [ 1382.270061][T18054] team0: Port device team_slave_0 removed [ 1382.277019][T18054] team_slave_1: left promiscuous mode [ 1382.293296][T18054] team0: Port device team_slave_1 removed [ 1382.302552][T18054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.318297][T18054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.340374][T18055] netlink: 'syz.2.3147': attribute type 10 has an invalid length. [ 1382.349047][T18055] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 1382.361121][T18055] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 1382.373455][T18055] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1382.401560][T18059] netlink: 'syz.0.3146': attribute type 1 has an invalid length. [ 1383.813626][T18059] bond1: entered promiscuous mode [ 1383.827881][T18059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1384.014176][T18052] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1384.072899][T18052] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 1384.084982][T18052] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1384.099470][T18052] bond1: (slave vcan1): making interface the new active one [ 1384.107163][T18052] vcan1: entered promiscuous mode [ 1384.114640][T18052] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 1384.470755][T18074] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1385.368147][T18092] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1385.941668][T18097] input: syz1 as /devices/virtual/input/input44 [ 1386.207382][T18103] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3161'. [ 1386.220163][T18103] gretap0: left promiscuous mode [ 1388.023607][T18126] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1388.564047][T18131] input: syz1 as /devices/virtual/input/input45 [ 1389.324352][T18129] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1389.455374][T18142] bond0: (slave wlan1): Releasing backup interface [ 1389.487110][T18142] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 1389.545608][T18143] netlink: 'syz.2.3173': attribute type 10 has an invalid length. [ 1389.604206][T18143] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 1389.678691][T18143] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1392.128466][T18202] bond0: (slave wlan1): Releasing backup interface [ 1392.136319][T18202] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1392.226225][T18202] bond1: (slave vcan1): Releasing backup interface [ 1392.268972][T18202] vcan1: left promiscuous mode [ 1392.409004][T18205] netlink: 'syz.0.3188': attribute type 10 has an invalid length. [ 1392.448081][T18205] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1392.473963][T18205] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1393.084274][T18210] tipc: Enabled bearer , priority 0 [ 1393.233453][T18213] syzkaller0: entered promiscuous mode [ 1393.309459][T18213] syzkaller0: entered allmulticast mode [ 1393.369371][T18210] tipc: Resetting bearer [ 1393.525516][T18208] tipc: Resetting bearer [ 1393.784131][T18208] tipc: Disabling bearer [ 1394.754066][T18254] bond0: (slave wlan1): Releasing backup interface [ 1394.766841][T18254] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 1394.783729][T18254] netlink: 'syz.2.3200': attribute type 10 has an invalid length. [ 1394.795228][T18254] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 1394.809501][T18254] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1395.732329][T18265] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1395.778234][T18265] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1395.915037][T18274] bond0: (slave wlan1): Releasing backup interface [ 1395.924477][T18274] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1395.946442][T18274] netlink: 'syz.0.3209': attribute type 10 has an invalid length. [ 1395.961695][T18274] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1395.970110][T18274] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1397.151613][T18304] Bluetooth: MGMT ver 1.22 [ 1398.285364][T18282] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.296103][T18282] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.305668][T18282] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.315351][T18282] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.412424][T18306] bond0: (slave bridge0): Releasing backup interface [ 1398.438148][T18306] bond0: (slave dummy0): Releasing backup interface [ 1398.459337][T18306] bond0: (slave netdevsim0): Releasing backup interface [ 1398.492250][T18306] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1398.515381][T18306] bond0: (slave wlan1): Releasing backup interface [ 1398.535444][T18306] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 1398.560006][T18306] batman_adv: batadv0: Removing interface: macvlan2 [ 1398.576544][T18309] netlink: 'syz.3.3220': attribute type 10 has an invalid length. [ 1398.599143][T18309] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1398.629392][T18309] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1398.711320][T18326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1398.720053][T18326] IPv6: NLM_F_CREATE should be set when creating new route [ 1398.728292][T18326] IPv6: NLM_F_CREATE should be set when creating new route [ 1398.968573][T18337] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3233'. [ 1399.207447][T17000] Bluetooth: hci0: command 0x0406 tx timeout [ 1399.656190][T18352] bond0: (slave wlan1): Releasing backup interface [ 1399.665518][T18352] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 1399.691757][T18352] netlink: 'syz.0.3239': attribute type 10 has an invalid length. [ 1399.738580][T18352] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 1399.757698][T18352] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1400.784406][T18379] netlink: 'syz.1.3251': attribute type 10 has an invalid length. [ 1400.819683][T18379] mac80211_hwsim hwsim15 wlan1: left allmulticast mode [ 1400.841123][T18379] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 1400.862806][T18379] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1402.483881][T18411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1402.679249][T18414] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1402.967271][ C1] ================================================================== [ 1402.975484][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x46a/0x4b0 [ 1402.983514][ C1] Read of size 2 at addr ffff88802c9b8c2a by task swapper/1/0 [ 1402.991065][ C1] [ 1402.993658][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.99-syzkaller #0 [ 1403.001289][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1403.011535][ C1] Call Trace: [ 1403.014813][ C1] [ 1403.017775][ C1] dump_stack_lvl+0x16c/0x230 [ 1403.022501][ C1] ? __lock_acquire+0x7c80/0x7c80 [ 1403.027535][ C1] ? show_regs_print_info+0x20/0x20 [ 1403.032734][ C1] ? load_image+0x3b0/0x3b0 [ 1403.037326][ C1] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 1403.042833][ C1] ? __virt_addr_valid+0x18c/0x540 [ 1403.047937][ C1] ? __virt_addr_valid+0x469/0x540 [ 1403.053065][ C1] print_report+0xac/0x200 [ 1403.057514][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 1403.062613][ C1] kasan_report+0x117/0x150 [ 1403.067105][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 1403.072314][ C1] rose_timer_expiry+0x46a/0x4b0 [ 1403.077271][ C1] call_timer_fn+0x16e/0x530 [ 1403.081951][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1403.087078][ C1] ? call_timer_fn+0xbf/0x530 [ 1403.092099][ C1] ? __run_timers+0x7d0/0x7d0 [ 1403.096964][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1403.102261][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1403.107476][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1403.112590][ C1] __run_timers+0x52d/0x7d0 [ 1403.117098][ C1] ? detach_timer+0x2b0/0x2b0 [ 1403.121829][ C1] ? lock_chain_count+0x20/0x20 [ 1403.126717][ C1] run_timer_softirq+0x67/0xf0 [ 1403.131575][ C1] handle_softirqs+0x280/0x820 [ 1403.136944][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1403.141711][ C1] ? do_softirq+0x180/0x180 [ 1403.146477][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1403.151679][ C1] __irq_exit_rcu+0xc7/0x190 [ 1403.156605][ C1] ? irq_exit_rcu+0x20/0x20 [ 1403.161148][ C1] irq_exit_rcu+0x9/0x20 [ 1403.165651][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1403.171650][ C1] [ 1403.174576][ C1] [ 1403.177499][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1403.183491][ C1] RIP: 0010:finish_task_switch+0x26a/0x920 [ 1403.189315][ C1] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 60 6b 1a 09 e8 8b a4 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1403.208954][ C1] RSP: 0018:ffffc90000187b58 EFLAGS: 00000282 [ 1403.215037][ C1] RAX: ad7e65ece7812900 RBX: 0000000000000000 RCX: ad7e65ece7812900 [ 1403.223008][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6680 [ 1403.231107][ C1] RBP: ffffc90000187bb0 R08: ffffffff8e4a7cef R09: 1ffffffff1c94f9d [ 1403.239184][ C1] R10: dffffc0000000000 R11: fffffbfff1c94f9e R12: ffff88801b273c00 [ 1403.247153][ C1] R13: dffffc0000000000 R14: ffff88802c418000 R15: ffff8880b8f3cf08 [ 1403.255236][ C1] ? finish_task_switch+0x265/0x920 [ 1403.260629][ C1] __schedule+0x14ea/0x4580 [ 1403.265234][ C1] ? asan.module_dtor+0x20/0x20 [ 1403.270105][ C1] ? flush_smp_call_function_queue+0x117/0x240 [ 1403.276348][ C1] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 1403.282516][ C1] schedule_idle+0x4e/0x80 [ 1403.287054][ C1] do_idle+0x4ac/0x510 [ 1403.291136][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1403.296432][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1403.302689][ C1] cpu_startup_entry+0x43/0x60 [ 1403.307460][ C1] start_secondary+0xee/0xf0 [ 1403.312050][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1403.318214][ C1] [ 1403.321308][ C1] [ 1403.323632][ C1] Allocated by task 5155: [ 1403.328148][ C1] kasan_set_track+0x4e/0x70 [ 1403.332870][ C1] __kasan_kmalloc+0x8f/0xa0 [ 1403.337585][ C1] kernfs_fop_open+0x3f5/0xcc0 [ 1403.342641][ C1] do_dentry_open+0x8c6/0x1500 [ 1403.347531][ C1] path_openat+0x274b/0x3190 [ 1403.352299][ C1] do_filp_open+0x1c5/0x3d0 [ 1403.356903][ C1] do_sys_openat2+0x12c/0x1c0 [ 1403.361586][ C1] __x64_sys_openat+0x139/0x160 [ 1403.366919][ C1] do_syscall_64+0x55/0xb0 [ 1403.371371][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1403.377272][ C1] [ 1403.379618][ C1] Freed by task 5155: [ 1403.383768][ C1] kasan_set_track+0x4e/0x70 [ 1403.388408][ C1] kasan_save_free_info+0x2e/0x50 [ 1403.393619][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1403.398953][ C1] slab_free_freelist_hook+0x130/0x1b0 [ 1403.404822][ C1] __kmem_cache_free+0xba/0x1f0 [ 1403.410239][ C1] kernfs_fop_release+0x166/0x190 [ 1403.415443][ C1] __fput+0x234/0x970 [ 1403.419648][ C1] __se_sys_close+0x15f/0x220 [ 1403.424686][ C1] do_syscall_64+0x55/0xb0 [ 1403.429109][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1403.435008][ C1] [ 1403.437402][ C1] Last potentially related work creation: [ 1403.443354][ C1] kasan_save_stack+0x3e/0x60 [ 1403.448018][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 1403.453618][ C1] insert_work+0x3d/0x310 [ 1403.458208][ C1] __queue_work+0xd2c/0x1020 [ 1403.462815][ C1] call_timer_fn+0x16e/0x530 [ 1403.467412][ C1] __run_timers+0x558/0x7d0 [ 1403.471938][ C1] run_timer_softirq+0x67/0xf0 [ 1403.476778][ C1] handle_softirqs+0x280/0x820 [ 1403.481536][ C1] __irq_exit_rcu+0xc7/0x190 [ 1403.486126][ C1] irq_exit_rcu+0x9/0x20 [ 1403.490455][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1403.496353][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1403.502543][ C1] [ 1403.504904][ C1] Second to last potentially related work creation: [ 1403.511668][ C1] kasan_save_stack+0x3e/0x60 [ 1403.516594][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 1403.522138][ C1] call_rcu+0x158/0x930 [ 1403.526275][ C1] __ip6_del_rt+0xf1/0x150 [ 1403.530857][ C1] ip6_del_rt+0xb4/0x100 [ 1403.535086][ C1] __ipv6_ifa_notify+0x5be/0xaa0 [ 1403.540029][ C1] addrconf_ifdown+0xe6a/0x1880 [ 1403.544966][ C1] addrconf_notify+0x6c6/0x1010 [ 1403.549812][ C1] notifier_call_chain+0x197/0x390 [ 1403.555109][ C1] dev_close_many+0x297/0x400 [ 1403.559915][ C1] unregister_netdevice_many_notify+0x4c1/0x1810 [ 1403.566354][ C1] unregister_netdevice_queue+0x324/0x360 [ 1403.572095][ C1] __tun_detach+0xd45/0x1500 [ 1403.576699][ C1] tun_chr_close+0x10d/0x1c0 [ 1403.581517][ C1] __fput+0x234/0x970 [ 1403.585683][ C1] task_work_run+0x1ce/0x250 [ 1403.590355][ C1] exit_to_user_mode_loop+0xe6/0x110 [ 1403.595655][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 1403.601307][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 1403.608035][ C1] do_syscall_64+0x61/0xb0 [ 1403.612912][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1403.619437][ C1] [ 1403.621781][ C1] The buggy address belongs to the object at ffff88802c9b8c00 [ 1403.621781][ C1] which belongs to the cache kmalloc-512 of size 512 [ 1403.636268][ C1] The buggy address is located 42 bytes inside of [ 1403.636268][ C1] freed 512-byte region [ffff88802c9b8c00, ffff88802c9b8e00) [ 1403.650331][ C1] [ 1403.652740][ C1] The buggy address belongs to the physical page: [ 1403.659514][ C1] page:ffffea0000b26e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c9b8 [ 1403.669839][ C1] head:ffffea0000b26e00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1403.678774][ C1] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1403.687626][ C1] page_type: 0xffffffff() [ 1403.692064][ C1] raw: 00fff00000000840 ffff888017841c80 ffffea00007bab00 dead000000000002 [ 1403.700815][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1403.709385][ C1] page dumped because: kasan: bad access detected [ 1403.715974][ C1] page_owner tracks the page as allocated [ 1403.721670][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 14902304452, free_ts 0 [ 1403.741820][ C1] post_alloc_hook+0x1cd/0x210 [ 1403.746594][ C1] get_page_from_freelist+0x195c/0x19f0 [ 1403.752155][ C1] __alloc_pages+0x1e3/0x460 [ 1403.756735][ C1] alloc_page_interleave+0x24/0x1e0 [ 1403.762206][ C1] alloc_slab_page+0x5d/0x170 [ 1403.767069][ C1] new_slab+0x87/0x2e0 [ 1403.771224][ C1] ___slab_alloc+0xc6d/0x12f0 [ 1403.776437][ C1] __kmem_cache_alloc_node+0x1a2/0x260 [ 1403.782178][ C1] kmalloc_trace+0x2a/0xe0 [ 1403.786588][ C1] snd_mixer_oss_build_test+0xa2/0x2f0 [ 1403.792036][ C1] snd_mixer_oss_build_input+0x574/0x1300 [ 1403.797832][ C1] snd_mixer_oss_notify_handler+0x90b/0x1010 [ 1403.803884][ C1] snd_card_register+0x549/0x6d0 [ 1403.809089][ C1] snd_dummy_probe+0x1090/0x1870 [ 1403.814118][ C1] platform_probe+0x13b/0x1c0 [ 1403.819539][ C1] really_probe+0x25b/0xb40 [ 1403.824066][ C1] page_owner free stack trace missing [ 1403.829416][ C1] [ 1403.832032][ C1] Memory state around the buggy address: [ 1403.837645][ C1] ffff88802c9b8b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1403.846303][ C1] ffff88802c9b8b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1403.854351][ C1] >ffff88802c9b8c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1403.863458][ C1] ^ [ 1403.868921][ C1] ffff88802c9b8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1403.877177][ C1] ffff88802c9b8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1403.885239][ C1] ================================================================== [ 1403.894203][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1403.901453][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.6.99-syzkaller #0 [ 1403.909087][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1403.919261][ C1] Call Trace: [ 1403.922861][ C1] [ 1403.925800][ C1] dump_stack_lvl+0x16c/0x230 [ 1403.930499][ C1] ? show_regs_print_info+0x20/0x20 [ 1403.935714][ C1] ? load_image+0x3b0/0x3b0 [ 1403.940562][ C1] panic+0x2c0/0x710 [ 1403.944569][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1403.949085][ C1] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 1403.954971][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1403.960983][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1403.965936][ C1] ? print_memory_metadata+0x314/0x400 [ 1403.971666][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 1403.977098][ C1] check_panic_on_warn+0x84/0xa0 [ 1403.982133][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 1403.987858][ C1] end_report+0x6f/0x140 [ 1403.992203][ C1] kasan_report+0x128/0x150 [ 1403.996966][ C1] ? rose_timer_expiry+0x46a/0x4b0 [ 1404.002190][ C1] rose_timer_expiry+0x46a/0x4b0 [ 1404.007152][ C1] call_timer_fn+0x16e/0x530 [ 1404.012088][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1404.017102][ C1] ? call_timer_fn+0xbf/0x530 [ 1404.021996][ C1] ? __run_timers+0x7d0/0x7d0 [ 1404.026672][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1404.031899][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1404.037278][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1404.042304][ C1] __run_timers+0x52d/0x7d0 [ 1404.046886][ C1] ? detach_timer+0x2b0/0x2b0 [ 1404.052008][ C1] ? lock_chain_count+0x20/0x20 [ 1404.057231][ C1] run_timer_softirq+0x67/0xf0 [ 1404.062002][ C1] handle_softirqs+0x280/0x820 [ 1404.066952][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 1404.071809][ C1] ? do_softirq+0x180/0x180 [ 1404.076586][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1404.081961][ C1] __irq_exit_rcu+0xc7/0x190 [ 1404.086622][ C1] ? irq_exit_rcu+0x20/0x20 [ 1404.091134][ C1] irq_exit_rcu+0x9/0x20 [ 1404.095374][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1404.101031][ C1] [ 1404.103959][ C1] [ 1404.106893][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1404.112972][ C1] RIP: 0010:finish_task_switch+0x26a/0x920 [ 1404.118873][ C1] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 60 6b 1a 09 e8 8b a4 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1404.138919][ C1] RSP: 0018:ffffc90000187b58 EFLAGS: 00000282 [ 1404.144976][ C1] RAX: ad7e65ece7812900 RBX: 0000000000000000 RCX: ad7e65ece7812900 [ 1404.153032][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: ffffffff8afc6680 [ 1404.161012][ C1] RBP: ffffc90000187bb0 R08: ffffffff8e4a7cef R09: 1ffffffff1c94f9d [ 1404.169072][ C1] R10: dffffc0000000000 R11: fffffbfff1c94f9e R12: ffff88801b273c00 [ 1404.177237][ C1] R13: dffffc0000000000 R14: ffff88802c418000 R15: ffff8880b8f3cf08 [ 1404.185353][ C1] ? finish_task_switch+0x265/0x920 [ 1404.190694][ C1] __schedule+0x14ea/0x4580 [ 1404.195220][ C1] ? asan.module_dtor+0x20/0x20 [ 1404.200085][ C1] ? flush_smp_call_function_queue+0x117/0x240 [ 1404.206256][ C1] ? tick_nohz_restart_sched_tick+0x200/0x200 [ 1404.212564][ C1] schedule_idle+0x4e/0x80 [ 1404.217068][ C1] do_idle+0x4ac/0x510 [ 1404.221217][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1404.226495][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1404.232804][ C1] cpu_startup_entry+0x43/0x60 [ 1404.237994][ C1] start_secondary+0xee/0xf0 [ 1404.242668][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1404.248739][ C1] [ 1404.252148][ C1] Kernel Offset: disabled [ 1404.256502][ C1] Rebooting in 86400 seconds..