last executing test programs: 2m41.782367947s ago: executing program 0 (id=4700): socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) shutdown(r1, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) 2m40.46551729s ago: executing program 0 (id=4711): r0 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x0, 0x0}) sendmsg$nl_route(r0, 0x0, 0x60800) socket$unix(0x1, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x24, &(0x7f0000000300)=@raw=[@alu={0x7, 0x0, 0x3, 0x7, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @snprintf], &(0x7f0000000440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x20980, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x2, 0x5, 0xa, 0x5}, {0x1, 0x4, 0x8, 0xc}], 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local}}}}}}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r3, 0xc0285628, &(0x7f0000000080)={0x0, @win={{0x1, 0x4, 0x9, 0x4}, 0x2, 0x4, &(0x7f0000000880)={{0xc, 0x2, 0x6, 0x2}}, 0xffffffff, 0x0, 0x3}}) close(r2) inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000000c0)='./control\x00', 0x40000c17) rmdir(&(0x7f0000000100)='./control\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 2m39.243300133s ago: executing program 2 (id=4720): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 2m39.127314819s ago: executing program 0 (id=4721): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000000002) 2m39.12204134s ago: executing program 2 (id=4722): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffe0, 0xa}, {0x8, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x18, 0x7, 0x8, 0x800, 0x5}, 0x4, 0x0, 0x75541b46, 0x4, 0x8, 0x18, 0x12, 0x8, 0x1, 0x1, {0x4, 0x38e5, 0xfffffc00, 0x5, 0x7, 0x80000001}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r0, 0x1) 2m39.037168412s ago: executing program 2 (id=4726): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m38.987167266s ago: executing program 0 (id=4727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m38.947858115s ago: executing program 0 (id=4729): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x9}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x338) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) sendmmsg$inet(r2, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010100}}) 2m38.139528776s ago: executing program 2 (id=4733): socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_256={{0x303}, "0200", "ab02a1a449283e8a3bc95815ece487ebcc5bb6a8d8a744e4b7edb45c7e7336ab", 'vb q', "9900000100"}, 0x38) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) 2m38.062221011s ago: executing program 0 (id=4734): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 2m37.980800837s ago: executing program 1 (id=4736): setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x3c}, 0x1, 0x11, 0x0, 0x20040005}, 0x0) socket(0x2c, 0x1, 0x80) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0xffffffff, 0x0, 0x80000}, &(0x7f0000000340), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xa400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r5, r4, r4], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 2m37.972074812s ago: executing program 1 (id=4737): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m37.91102743s ago: executing program 2 (id=4738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2m37.86375113s ago: executing program 1 (id=4739): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0x10}, {0xffe0, 0xa}, {0x8, 0xe}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x18, 0x7, 0x8, 0x800, 0x5}, 0x4, 0x0, 0x75541b46, 0x4, 0x8, 0x18, 0x12, 0x8, 0x1, 0x1, {0x4, 0x38e5, 0xfffffc00, 0x5, 0x7, 0x80000001}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x55}, 0xc010) shutdown(r0, 0x1) 2m37.780871771s ago: executing program 1 (id=4740): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'ip6_vti0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 2m37.780568475s ago: executing program 2 (id=4741): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000006c0)={@val={0xa}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) 2m37.779023139s ago: executing program 1 (id=4742): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) r3 = socket$inet(0x2, 0x3, 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 2m37.774800812s ago: executing program 1 (id=4743): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m42.581135137s ago: executing program 32 (id=4734): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001700)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1m42.547169208s ago: executing program 33 (id=4743): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xd}}}, 0x24}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m42.518021305s ago: executing program 34 (id=4741): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000006c0)={@val={0xa}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) 2.206407727s ago: executing program 5 (id=5699): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) 2.118745566s ago: executing program 5 (id=5701): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e1205", 0x29}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 2.044523575s ago: executing program 5 (id=5702): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$hid(0x7, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f000001f000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000000)="b842068ec80f79c666b9800000c00f326635008000000f30658b9299ebf000bfaa80260fc731baf80c66efbafc0c66b8f5ee91dd66efbaf80c66b8c076cd8066efbafc0c66b80000000066ef0f22666466f30f09", 0x54}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.450227062s ago: executing program 5 (id=5724): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000005c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.43951987s ago: executing program 5 (id=5725): pwritev(0xffffffffffffffff, 0x0, 0x0, 0x80002, 0x7f) r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(0x0, 0x0, 0x0, 0x208000, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x1, 0x400002d8}, 0x0, &(0x7f0000000200), 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r2, &(0x7f0000000180)=0xfe5f, 0x12) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000040)=""/58, 0x3a}], 0x1) 1.286266332s ago: executing program 4 (id=5729): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) 1.251767456s ago: executing program 4 (id=5732): ioctl$CDROMPLAYMSF(0xffffffffffffffff, 0x5303, &(0x7f0000000140)={0x3, 0xf8, 0x4, 0xe6, 0xa}) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x80, 0x0, 0x359}, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x3, 0x2, 0x6000, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x4000003, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.241505105s ago: executing program 5 (id=5733): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect$hid(0x7, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 514.839868ms ago: executing program 4 (id=5735): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet6(0xa, 0x80002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) pipe(&(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x0) 458.051159ms ago: executing program 3 (id=5737): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 414.463484ms ago: executing program 4 (id=5738): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) open(0x0, 0x14927e, 0xa0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xda, 0x0, 0x7fff0023}]}) close_range(r1, 0xffffffffffffffff, 0x0) 409.68822ms ago: executing program 3 (id=5739): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 371.681825ms ago: executing program 4 (id=5740): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) 351.801009ms ago: executing program 6 (id=5741): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$sg(0x0, 0x0, 0x101005) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) 289.914014ms ago: executing program 3 (id=5742): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f00000004c0)='./file1\x00') creat(&(0x7f00000002c0)='./file1\x00', 0x2) 289.426117ms ago: executing program 6 (id=5743): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(r1, &(0x7f0000007400), 0x0, 0x20007f44) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000007000000000000000000000d0a0000000000000001000006040100"], 0x0, 0x3f, 0x0, 0x5}, 0x28) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, 0x0) r3 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x8, 0x4c, 0x2ba5, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7500}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast=0xffff0011}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x1, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000180)={r4}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f00000001c0)={r4}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x7fffffff, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELRULE={0xd0, 0x8, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_USERDATA={0x9f, 0x7, 0x1, 0x0, "26965ede290f5820b9de68890b9a7dedde2dbafa6134607df7aba6fb3c1f47ef7cf4c667f2b4ec630d7608ff507cd532eb6f0f8324798388e21f0582ee634b1bbd55c5e299ea3cbee8dafed0ccb22e428fb9b8c52d8f45e910cb2a42135c5c94a32790f9cc14df6b3f90f710e3e4df94ee4462707342d960842ec1fca29f3c2f476e427f919bb799b0b81c47397ac6ce5eb9fcceed30829941c534"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, @NFT_MSG_DELCHAIN={0xb4, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0x71, 0xc, "6cf2824f3f67d49ae49a1914653a3aa8f479de32f8bd2e9f71374dadcab354c91fca8822167dd84a11bd5884996b3b0f87525996f9cdc0b8c67c1997168fd4e626fb82776845579be8d7d089f8d56ab9a2cbbc48c1b87c568eb2d181dca5dfade9474ec57870e052eeeffbe240"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x1f8, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0xf5, 0x6, "f385e353b16ab31d7747da37ec6725d5ae19ff7305a052b94da89394c73df4ec7199caee003362f202215dd860cec91dc66c94f279308aacf2708d062749246b3acd6dcf79bfe0481e3b494f42224acd48017356a8950c71c27e754149d1d5f8590c7d9a6937b739eee513e6af1bfbf233cf2a7fa4a977b3d6018dac7b91d56428de24f164b6ede239ffc92ef75c7e961dd1385986671ad82c3d3751ce9ba2e960b6a4a39204aefe8c334f6ea59bfa78c94c19921ea274c64f42a51b3d3b20f954340464981e292ac2f083db6a97ec1cd25781595f54f59324f12fb0771e72941c6eb0abeff406cb7971cbe4c692d1f87f"}, @NFTA_TABLE_USERDATA={0xa5, 0x6, "290de86c0d8008cfe1dfc0f7ac6f23d74d22c42f13cb555aaf5a77983f14782a257797570c1e5394e5323e78f78d8371bfcf97f7dfe3fb4ab25433b42abe1c3cf0d2ed0f07a35e82d58b9a2338624055d73483ea63bcec4bfc339a81afe4ff703f2f1f2d2fd6108e30b875b62f081a3b32be21147e7918433bd99e185203e76f56351e8dac7d7ab4ee01bd5a013eea3de743a0a02f689c2b6e787210bd6b864ce9"}, @NFTA_TABLE_USERDATA={0x39, 0x6, "3b2b6bdd5135ce87e5311eefa5d03cc66b2ea9f72dbdccc36c53714a4ea99e2fdb48a146258a95f6168fa97ab621d53a0eb96f3f0c"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3a4}, 0x1, 0x0, 0x0, 0x804}, 0x8050) open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000020000000500000000000024e6848a8fd21250b862b4153b51002900000000000000"], 0x800) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0b1600000000000000004a0000000800b8"], 0x3c}}, 0x0) mmap(&(0x7f000020a000/0x1000)=nil, 0x1000, 0x2, 0x12, r0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x9, 0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) 222.333614ms ago: executing program 3 (id=5744): syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) 221.856962ms ago: executing program 4 (id=5745): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x2, 0x69100f4f, 0xd, 0xe000, 0x10, 0x2, 0x0, 0x0, 0x80, 0x5}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) 208.075178ms ago: executing program 6 (id=5746): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffff9c, 0x0, 0x800, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0x4000003, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x840) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc4a, 0x9, 0xfffffffffffffffd, 0x1, 0x10000, 0x3, 0x4002004c2, 0x1000, 0x9, 0x100, 0xfffffffffffffffb, 0x8, 0x71dd, 0x0, 0x8, 0x8d], 0x100000, 0x2008c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 146.578796ms ago: executing program 3 (id=5747): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 142.761536ms ago: executing program 3 (id=5748): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x208240, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0xa4b6, 0x1, 0xc}, 0xb, 0x4, 0x32, 0x5, 0xb, 0x7, 0x9, 0x1a, 0x1, 0xffffff5c, {0xffff1c72, 0x23, 0x4, 0x6, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x44000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 90.089313ms ago: executing program 6 (id=5749): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$rds(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) 88.160102ms ago: executing program 6 (id=5750): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) 0s ago: executing program 6 (id=5751): openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) syz_open_dev$sg(0x0, 0x0, 0x101005) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x80800, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x6f1dd9aa, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000280)=[0x1], &(0x7f0000000200), &(0x7f0000000040), 0x0, 0x7f}) kernel console output (not intermixed with test programs): ributes in process `syz.3.3642'. [ 1589.831028][T26274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3642'. [ 1590.682797][T26256] 9pnet_virtio: no channels available for device syz [ 1593.882196][T26320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3650'. [ 1593.909727][T26320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3650'. [ 1594.074483][T26327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3652'. [ 1594.082181][T26327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3652'. [ 1595.331308][T26345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3655'. [ 1595.337804][T26345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3655'. [ 1595.961672][T26353] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3656'. [ 1595.973378][T26353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3656'. [ 1596.649899][T26361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3659'. [ 1596.656022][T26361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3659'. [ 1597.058746][T26365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1600.426939][T26420] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3672'. [ 1600.431618][T26420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3672'. [ 1603.741507][T26469] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1603.776656][T26469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3682'. [ 1605.213365][T26492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3688'. [ 1605.226782][T26492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3688'. [ 1608.201008][T26547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3700'. [ 1608.205090][T26547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3700'. [ 1609.201194][T26564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1610.564443][T26595] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1611.348994][T26607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1611.357451][T26607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3713'. [ 1612.000357][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.002976][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 1615.532379][T26688] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1617.263313][T26725] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3735'. [ 1617.266913][T26725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3735'. [ 1617.864497][T26732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1618.170060][T26748] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3738'. [ 1618.173815][T26748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3738'. [ 1619.493203][T26782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3744'. [ 1619.497892][T26782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'. [ 1620.689040][T26816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3751'. [ 1620.703732][T26816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3751'. [ 1622.994535][T26859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3760'. [ 1622.998871][T26859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'. [ 1623.041527][T26862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3762'. [ 1623.044667][T26862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3762'. [ 1623.375974][T26871] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3764'. [ 1623.380056][T26871] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3764'. [ 1623.975635][T26881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1623.981046][T26881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'. [ 1625.281853][T26903] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1625.288428][T26903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1625.818824][T26917] 9pnet_virtio: no channels available for device syz [ 1628.260464][T26944] 9pnet_virtio: no channels available for device syz [ 1630.184947][T26976] __nla_validate_parse: 4 callbacks suppressed [ 1630.184961][T26976] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3791'. [ 1630.199310][T26976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3791'. [ 1630.365245][T26982] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1630.371499][T26982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3792'. [ 1633.714154][T27036] 9pnet_virtio: no channels available for device syz [ 1636.291622][T27072] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3817'. [ 1636.346950][T27072] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3817'. [ 1636.878859][T27077] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3818'. [ 1636.883955][T27077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'. [ 1652.785213][T27321] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3866'. [ 1652.792529][T27321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3866'. [ 1654.888422][T27352] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1658.820024][T27389] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1658.824022][T27389] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1658.828203][T27389] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1660.424481][T27426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1660.430419][T27426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3886'. [ 1660.441828][T27427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3887'. [ 1660.449034][T27427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 1662.154449][T27454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1662.162866][T27454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3892'. [ 1664.837480][T27493] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3900'. [ 1664.842482][T27493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3900'. [ 1668.265673][T27554] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3912'. [ 1668.272370][T27554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 1669.165295][T27563] 9pnet_virtio: no channels available for device syz [ 1670.575238][T27579] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3918'. [ 1670.578393][T27579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3918'. [ 1671.140035][T27589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1671.147326][T27589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1671.488168][T27594] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3921'. [ 1671.496273][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3921'. [ 1672.172063][T27607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1672.175393][T27607] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3924'. [ 1673.437221][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1673.440064][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.817572][T27635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3930'. [ 1674.825922][T27635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3930'. [ 1675.349419][T27639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1675.692544][T27651] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 1675.760529][T27655] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1675.764023][T27655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3934'. [ 1676.872024][T27670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1676.875857][T27670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3938'. [ 1678.720575][T27688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3942'. [ 1678.728679][T27688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3942'. [ 1678.788320][T27691] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 1680.355211][T27714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3950'. [ 1680.374801][T27714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3950'. [ 1680.710673][T27718] 9pnet_virtio: no channels available for device syz [ 1684.698184][T27781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3962'. [ 1684.706915][T27781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3962'. [ 1686.653851][T27815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3969'. [ 1686.663577][T27815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3969'. [ 1687.682209][T27834] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1687.689590][T27834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3971'. [ 1689.035713][T27855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1689.050713][T27855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1691.668841][T27905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1693.482602][T27934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1693.488430][T27934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3995'. [ 1695.378247][T27951] 9pnet_virtio: no channels available for device syz [ 1698.974082][T28002] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4009'. [ 1698.983619][T28002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4009'. [ 1700.639464][T28032] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4015'. [ 1700.654400][T28032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4015'. [ 1701.091565][T28040] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1701.098344][T28040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4016'. [ 1702.240129][T28066] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4022'. [ 1702.251468][T28066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4022'. [ 1709.622855][T28186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4049'. [ 1709.626132][T28186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'. [ 1715.177671][T28285] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4067'. [ 1715.181903][T28285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4067'. [ 1716.100873][T28302] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4071'. [ 1716.108853][T28302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4071'. [ 1719.341298][T28335] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4078'. [ 1719.356066][T28335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4078'. [ 1720.069539][T28352] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1720.075241][T28352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4082'. [ 1725.772881][T28418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4097'. [ 1725.785635][T28418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4097'. [ 1726.675471][T28427] 9pnet_virtio: no channels available for device syz [ 1728.684528][T28443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4102'. [ 1728.701229][T28443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4102'. [ 1730.438972][T28471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4106'. [ 1730.459108][T28471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4106'. [ 1731.812398][T28486] 9pnet_virtio: no channels available for device syz [ 1731.951627][T28485] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1731.956205][T28485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4108'. [ 1734.877745][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1734.880496][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.667911][T28532] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4116'. [ 1735.686749][T28532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4116'. [ 1740.389441][T28601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4125'. [ 1740.401357][T28601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4125'. [ 1741.470663][T28620] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4129'. [ 1741.474061][T28620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4129'. [ 1742.745437][T28636] 9pnet_virtio: no channels available for device syz [ 1743.639380][T28636] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1743.643317][T28636] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1743.647463][T28636] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1744.171355][T28645] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4135'. [ 1744.178653][T28645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4135'. [ 1744.811884][T28656] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1744.816039][T28656] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4136'. [ 1753.937120][T28785] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1754.548456][T28808] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4160'. [ 1754.556055][T28808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4160'. [ 1762.096264][T28949] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 1762.098466][T28949] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1762.102488][T28949] vhci_hcd vhci_hcd.0: Device attached [ 1762.386032][T14079] usb 42-1: SetAddress Request (2) to port 0 [ 1762.399339][T14079] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1762.867696][T28952] vhci_hcd: connection reset by peer [ 1762.872067][ T1191] vhci_hcd vhci_hcd.2: stop threads [ 1762.874775][ T1191] vhci_hcd vhci_hcd.2: release socket [ 1762.882432][ T1191] vhci_hcd vhci_hcd.2: disconnect device [ 1763.924540][T28982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4189'. [ 1765.156636][T29000] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4191'. qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x86000) [ 1767.149006][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 1767.152951][ T1124] ata1: failed to read log page 10h (errno=-5) [ 1767.157162][ T1124] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 1767.168920][ T1124] ata1.00: irq_stat 0x41000008 [ 1767.170965][ T1124] ata1.00: failed command: WRITE FPDMA QUEUED [ 1767.178042][ T1124] ata1.00: cmd 61/30:70:06:ed:0c/04:00:00:00:00/40 tag 14 ncq dma 548864 out [ 1767.178042][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1767.186060][ T1124] ata1.00: status: { DRDY } [ 1767.192298][ T1124] ata1.00: error: { ABRT } [ 1767.198487][ T1124] ata1.00: configured for UDMA/100 [ 1767.204177][ T1124] ata1: EH complete [ 1767.446630][T14079] usb 42-1: device descriptor read/8, error -110 [ 1767.469146][T29038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4198'. [ 1767.867238][T14079] usb usb42-port1: attempt power cycle [ 1768.466403][T14079] usb usb42-port1: unable to enumerate USB device [ 1769.725522][T29073] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4203'. [ 1770.903744][T29087] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4208'. [ 1771.900795][T29107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4212'. [ 1772.118001][T29111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4214'. [ 1772.863919][T29120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4215'. [ 1773.210148][T29125] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4216'. [ 1773.368867][T29132] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4218'. [ 1774.053065][T29140] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4219'. [ 1774.401984][T29149] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4221'. [ 1775.792550][T29172] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4225'. [ 1776.794843][T29188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4227'. [ 1777.029702][T29195] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4229'. [ 1778.277801][T29218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 1779.438266][T29241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4237'. [ 1779.519756][T29244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4239'. [ 1779.526179][T29244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4239'. [ 1779.529167][T29244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4239'. [ 1779.562283][T29244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4239'. [ 1780.812085][T29268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4243'. [ 1784.572508][T29312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4250'. [ 1785.405314][T29324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1786.535131][T29348] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4256'. [ 1787.013072][T29358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1787.307237][T29364] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4259'. [ 1790.850624][T29413] 9pnet_virtio: no channels available for device syz [ 1791.917307][T29411] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1791.920277][T29411] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1791.923131][T29411] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1793.920898][T29453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4273'. [ 1793.927027][T29453] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4273'. [ 1794.445689][T29464] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1794.447788][T29464] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1794.455601][T29464] vhci_hcd vhci_hcd.0: Device attached [ 1794.715918][T18186] usb 44-1: SetAddress Request (2) to port 0 [ 1794.717972][T18186] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1794.818690][T29473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4276'. [ 1794.826514][T29473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4276'. [ 1794.832029][T29473] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4276'. [ 1794.837410][T29473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4276'. [ 1794.976704][T29465] vhci_hcd: connection reset by peer [ 1794.987219][ T12] vhci_hcd vhci_hcd.3: stop threads [ 1794.989569][ T12] vhci_hcd vhci_hcd.3: release socket [ 1794.994450][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 1796.317043][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.440254][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.186748][T29494] 9pnet_virtio: no channels available for device syz [ 1798.481712][T29508] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4282'. [ 1798.490889][T29508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4282'. [ 1799.767930][T18186] usb 44-1: device descriptor read/8, error -110 [ 1800.167742][T18186] usb usb44-port1: attempt power cycle [ 1800.170994][T29541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4287'. [ 1800.714193][T29551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4289'. [ 1800.719943][T29551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4289'. [ 1800.722856][T29551] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4289'. [ 1800.725984][T29551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4289'. [ 1800.806361][T18186] usb usb44-port1: unable to enumerate USB device [ 1801.812911][T29569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1801.817104][T29569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4292'. [ 1802.081218][T29574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4293'. [ 1802.765703][T29584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4295'. [ 1802.772740][T29584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4295'. [ 1802.915373][T29587] syzkaller0: entered promiscuous mode [ 1802.918214][T29587] syzkaller0: entered allmulticast mode [ 1805.652246][T29636] __nla_validate_parse: 6 callbacks suppressed [ 1805.652265][T29636] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4305'. [ 1805.668926][T29636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4305'. [ 1809.253373][T29678] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4314'. [ 1809.260826][T29678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4314'. [ 1810.061268][T29674] 9pnet_virtio: no channels available for device syz [ 1810.572360][T29698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4317'. [ 1810.579114][T29698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4317'. [ 1810.583047][T29698] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4317'. [ 1810.588525][T29698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4317'. [ 1810.646830][T29702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4319'. [ 1810.651289][T29702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4319'. [ 1813.517861][T29728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4324'. [ 1813.522465][T29728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4324'. [ 1813.822465][T29734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4326'. [ 1813.902089][T29738] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4325'. [ 1813.906864][T29738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4325'. [ 1814.121983][T29744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4327'. [ 1814.125418][T29744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4327'. [ 1814.492571][T29752] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1814.494694][T29752] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1814.504752][T29752] vhci_hcd vhci_hcd.0: Device attached [ 1814.786715][T13567] usb 44-1: SetAddress Request (6) to port 0 [ 1814.788763][T13567] usb 44-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1814.921588][T29759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4330'. [ 1814.936223][T29759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'. [ 1814.973626][T29753] vhci_hcd: connection reset by peer [ 1814.979945][ T1154] vhci_hcd vhci_hcd.3: stop threads [ 1814.981945][ T1154] vhci_hcd vhci_hcd.3: release socket [ 1814.987875][ T1154] vhci_hcd vhci_hcd.3: disconnect device [ 1815.300165][T29768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4332'. [ 1820.472515][T13567] usb 44-1: device descriptor read/8, error -110 [ 1820.877440][T13567] usb usb44-port1: attempt power cycle [ 1821.469800][T13567] usb usb44-port1: unable to enumerate USB device [ 1821.653907][T29829] 9pnet_virtio: no channels available for device syz [ 1822.252772][T29845] __nla_validate_parse: 3 callbacks suppressed [ 1822.252791][T29845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1822.264687][T29845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4349'. [ 1824.618910][T29865] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4353'. [ 1824.629012][T29865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4353'. [ 1825.855765][T29882] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4357'. [ 1825.879855][T29882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4357'. [ 1826.382420][T29890] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4358'. [ 1826.388141][T29890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4358'. [ 1828.883636][T29913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4364'. [ 1828.899211][T29913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4364'. [ 1829.497711][T29925] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4367'. [ 1829.504456][T29925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4367'. [ 1830.935371][T29942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4370'. [ 1830.944287][T29942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4370'. [ 1831.003592][T29945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1831.009832][T29945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4371'. [ 1831.876371][T29954] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4374'. [ 1831.891839][T29954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4374'. [ 1834.000129][T29988] __nla_validate_parse: 3 callbacks suppressed [ 1834.000147][T29988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4384'. [ 1834.604920][T30001] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4386'. [ 1834.612678][T30001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4386'. [ 1835.078533][T30009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4389'. [ 1835.091637][T30009] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4389'. [ 1836.688537][T30025] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4393'. [ 1836.818199][T30025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4393'. [ 1837.492370][T30033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1837.497772][T30033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4395'. [ 1837.711772][T30041] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4397'. [ 1840.946041][T30071] __nla_validate_parse: 1 callbacks suppressed [ 1840.946073][T30071] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4404'. [ 1840.952842][T30071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4404'. [ 1841.817257][T30085] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4408'. [ 1841.822419][T30085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'. [ 1843.056093][T30103] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1843.061048][T30103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4413'. [ 1844.312975][T30118] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4417'. [ 1844.336049][T30118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4417'. [ 1844.424511][T30125] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4419'. [ 1844.428498][T30125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4419'. [ 1846.874613][T30149] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4425'. [ 1846.893497][T30149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4425'. [ 1847.708534][T30157] 9pnet_virtio: no channels available for device syz [ 1848.213816][T30159] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4427'. [ 1848.219277][T30159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4427'. [ 1849.352704][T30169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4429'. [ 1849.359477][T30169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4429'. [ 1849.859166][T30179] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4432'. [ 1849.863951][T30179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4432'. [ 1850.763996][T30192] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1850.768594][T30192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4433'. [ 1852.084119][T30212] __nla_validate_parse: 4 callbacks suppressed [ 1852.084136][T30212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4439'. [ 1852.093901][T30212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4439'. [ 1852.410411][T30217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1852.419466][T30217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1852.865250][T30221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4443'. [ 1852.873316][T30221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4443'. [ 1854.681408][T30247] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4451'. [ 1854.684582][T30247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4451'. [ 1856.416826][T30250] 9pnet_virtio: no channels available for device syz [ 1857.142921][T30251] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1857.145522][T30251] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1857.149496][T30251] vhci_hcd vhci_hcd.0: Device attached [ 1857.263006][T30255] vhci_hcd: connection closed [ 1857.263207][ T1191] vhci_hcd vhci_hcd.3: stop threads [ 1857.267669][ T1191] vhci_hcd vhci_hcd.3: release socket [ 1857.269758][ T1191] vhci_hcd vhci_hcd.3: disconnect device [ 1857.276598][T30264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1857.280395][T30264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1857.383653][T30266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4452'. [ 1857.394707][T30266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4452'. [ 1857.757374][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1857.761513][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.333457][T30280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4457'. [ 1858.339001][T30280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4457'. [ 1859.421368][T30296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4460'. [ 1859.435955][T30296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4460'. [ 1860.586679][T30310] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4464'. [ 1860.595735][T30310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4464'. [ 1862.623703][T30331] __nla_validate_parse: 2 callbacks suppressed [ 1862.623715][T30331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4470'. [ 1862.635115][T30331] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4470'. [ 1863.097559][T30336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4472'. [ 1863.101624][T30336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4472'. [ 1864.430796][T30356] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4476'. [ 1864.434554][T30356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4476'. [ 1864.752430][T30364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4478'. [ 1864.757966][T30364] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4478'. [ 1865.350354][T30368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1865.353597][T30368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4479'. [ 1865.833909][T30376] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1865.836542][T30376] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1865.845456][T30376] vhci_hcd vhci_hcd.0: Device attached [ 1866.116033][T13567] usb 44-1: SetAddress Request (10) to port 0 [ 1866.119794][T13567] usb 44-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1866.392351][T30377] vhci_hcd: connection reset by peer [ 1866.398875][ T1159] vhci_hcd vhci_hcd.3: stop threads [ 1866.403199][ T1159] vhci_hcd vhci_hcd.3: release socket [ 1866.405479][ T1159] vhci_hcd vhci_hcd.3: disconnect device [ 1868.382600][T30412] __nla_validate_parse: 6 callbacks suppressed [ 1868.382696][T30412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4488'. [ 1868.392430][T30412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4488'. [ 1868.416421][T30415] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4489'. [ 1868.419831][T30415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4489'. [ 1869.676763][T30434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4495'. [ 1869.680024][T30434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4495'. [ 1870.049537][T30438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4496'. [ 1870.053539][T30438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4496'. [ 1870.731204][T30449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4498'. [ 1870.757637][T30449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4498'. [ 1871.277885][T13567] usb 44-1: device descriptor read/8, error -110 [ 1871.797978][T13567] usb usb44-port1: attempt power cycle [ 1872.487573][T13567] usb usb44-port1: unable to enumerate USB device [ 1873.592821][T30485] __nla_validate_parse: 6 callbacks suppressed [ 1873.592833][T30485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4506'. [ 1873.601832][T30485] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4506'. [ 1874.367187][T30491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4508'. [ 1874.373055][T30491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4508'. [ 1875.041812][T30499] 9pnet_virtio: no channels available for device syz [ 1876.222415][T30505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4511'. [ 1876.226826][T30505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4511'. [ 1876.863299][T30515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1876.868860][T30515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4514'. [ 1878.205284][T30523] 9pnet_virtio: no channels available for device syz [ 1878.902755][T30529] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4518'. [ 1878.909391][T30529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4518'. [ 1879.451791][T30537] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4517'. [ 1879.457512][T30537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4517'. [ 1880.068574][T30544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1880.073858][T30545] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4521'. [ 1880.081772][T30545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4521'. [ 1880.094474][T30544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4520'. [ 1880.391711][T30553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4523'. [ 1880.395063][T30553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4523'. [ 1884.962173][T30600] __nla_validate_parse: 10 callbacks suppressed [ 1884.962191][T30600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4534'. [ 1884.973493][T30600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4534'. [ 1885.350477][T30604] 9pnet_virtio: no channels available for device syz [ 1885.856582][T30608] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4537'. [ 1885.879067][T30608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4537'. [ 1888.424227][T30625] 9pnet_virtio: no channels available for device syz [ 1888.646505][T30626] 9pnet_virtio: no channels available for device syz [ 1890.526053][T30633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1890.530024][T30633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4541'. [ 1890.617305][T30637] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4543'. [ 1890.624643][T30637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4543'. [ 1890.852687][T30646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1890.859551][T30646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1891.578891][T30653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4545'. [ 1891.586179][T30653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4545'. [ 1893.449016][T30667] 9pnet_virtio: no channels available for device syz [ 1893.481204][T30666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4549'. [ 1893.484882][T30666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4549'. [ 1895.633680][T30702] __nla_validate_parse: 10 callbacks suppressed [ 1895.633725][T30702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4556'. [ 1895.642059][T30702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4556'. [ 1895.665857][T30704] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4557'. [ 1895.669984][T30704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4557'. [ 1896.074637][T30709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4559'. [ 1896.081281][T30709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4559'. [ 1896.585054][T30717] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4561'. [ 1896.590466][T30717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4561'. [ 1896.611698][T30717] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4561'. [ 1896.913232][T30724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4562'. [ 1898.600770][T30749] bond1: entered promiscuous mode [ 1898.602887][T30749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1898.628225][T30749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1898.630607][T30749] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 1898.634151][T30749] bond1: (slave sit1): Error -95 calling set_mac_address [ 1900.768024][T30800] __nla_validate_parse: 17 callbacks suppressed [ 1900.768036][T30800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1900.778235][T30800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1900.804247][T30801] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4585'. [ 1900.811070][T30801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4585'. [ 1901.707533][T30810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4586'. [ 1901.713905][T30810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4586'. [ 1901.929994][T30819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1901.936493][T30819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1901.992212][T30819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4589'. [ 1903.390324][T30846] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1903.393761][T30846] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1903.432952][T30846] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1903.434945][T30846] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1903.470240][T30846] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1903.474925][T30846] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1903.503189][T30846] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1903.505142][T30846] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1910.003828][T30969] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1910.627939][T30983] smc: net device vcan0 applied user defined pnetid SYZ1 [ 1913.866706][T31025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4649'. [ 1913.899654][T31025] bond1: entered promiscuous mode [ 1913.901610][T31025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1913.918624][T31028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4650'. [ 1913.925443][T31025] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1913.928510][T31025] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 1913.932733][T31025] bond1: (slave sit1): Error -95 calling set_mac_address [ 1913.959890][T31028] bond1: entered promiscuous mode [ 1913.962361][T31028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1913.996221][T31028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1913.999349][T31028] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 1914.004063][T31028] bond1: (slave sit1): Error -95 calling set_mac_address [ 1914.182780][T31036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4653'. [ 1914.581512][T31051] netlink: 'syz.2.4659': attribute type 12 has an invalid length. [ 1914.645922][T28561] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1914.807523][T28561] usb 6-1: Using ep0 maxpacket: 32 [ 1914.814306][T28561] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1914.826145][T28561] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1914.829971][T28561] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1914.837218][T28561] usb 6-1: Product: syz [ 1914.838581][T28561] usb 6-1: Manufacturer: syz [ 1914.841326][T28561] usb 6-1: SerialNumber: syz [ 1914.847745][T28561] usb 6-1: config 0 descriptor?? [ 1914.850365][T31047] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x2a7000) [ 1915.065497][T31047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.070738][T31047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.078933][T19645] usb 6-1: USB disconnect, device number 8 [ 1915.785679][T31069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4665'. [ 1916.065903][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1916.081168][T31075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4667'. [ 1916.140450][T31075] bond1: entered promiscuous mode [ 1916.145382][T31075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1916.215873][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 1916.224585][ T34] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1916.239088][T31081] netlink: 'syz.0.4670': attribute type 12 has an invalid length. [ 1916.242612][ T34] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1916.246487][ T34] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1916.249268][ T34] usb 6-1: Product: syz [ 1916.250743][ T34] usb 6-1: Manufacturer: syz [ 1916.252343][ T34] usb 6-1: SerialNumber: syz [ 1916.257461][ T34] usb 6-1: config 0 descriptor?? [ 1916.259923][T31071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1916.522238][T31071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.528239][T31071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.534791][T19645] usb 6-1: USB disconnect, device number 9 [ 1918.588931][T22187] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1919.196670][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.200207][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.235954][T22187] usb 7-1: Using ep0 maxpacket: 32 [ 1919.238917][T22187] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1919.243690][T22187] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1919.246951][T22187] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1919.249688][T22187] usb 7-1: Product: syz [ 1919.251065][T22187] usb 7-1: Manufacturer: syz [ 1919.252462][T22187] usb 7-1: SerialNumber: syz [ 1919.255142][T22187] usb 7-1: config 0 descriptor?? [ 1919.259131][T31114] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1919.474224][T31138] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1919.476662][T31114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1919.480703][T31114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1919.487825][ T10] usb 7-1: USB disconnect, device number 11 [ 1919.607155][T31143] netlink: 'syz.0.4692': attribute type 12 has an invalid length. [ 1920.474263][T31157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4697'. [ 1920.937549][T31179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4705'. [ 1921.049561][T31182] netlink: 'syz.3.4706': attribute type 12 has an invalid length. [ 1921.757552][T31187] netlink: 'syz.2.4708': attribute type 10 has an invalid length. [ 1921.761255][T31187] macvlan1: entered promiscuous mode [ 1921.763255][T31187] macvlan1: entered allmulticast mode [ 1921.768128][T31187] veth1_vlan: entered allmulticast mode [ 1921.772551][T31187] team0: Port device macvlan1 added [ 1922.947815][T31209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4716'. [ 1923.070360][T31215] netlink: 'syz.3.4719': attribute type 10 has an invalid length. [ 1923.156601][T31215] macvlan1: entered promiscuous mode [ 1923.158177][T31215] macvlan1: entered allmulticast mode [ 1923.171440][T31215] veth1_vlan: entered allmulticast mode [ 1923.175297][T31215] team0: Port device macvlan1 added [ 1923.268896][T31222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4721'. [ 1923.338918][ T5754] block nbd0: Receive control failed (result -1) [ 1923.347869][T31232] netlink: 'syz.3.4725': attribute type 12 has an invalid length. [ 1923.455095][T31240] netlink: 'syz.0.4729': attribute type 12 has an invalid length. [ 1924.434002][T31268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4737'. [ 1924.732696][T31287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4743'. [ 1929.735027][T24412] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.807711][T24412] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.881108][T24412] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1929.981713][T24412] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1930.094910][T24412] bridge_slave_1: left allmulticast mode [ 1930.096879][T24412] bridge_slave_1: left promiscuous mode [ 1930.099153][T24412] bridge0: port 2(bridge_slave_1) entered disabled state [ 1930.102684][T24412] bridge_slave_0: left allmulticast mode [ 1930.104510][T24412] bridge_slave_0: left promiscuous mode [ 1930.106836][T24412] bridge0: port 1(bridge_slave_0) entered disabled state [ 1930.176323][T24412] batman_adv: batadv0: Removing interface: gretap1 [ 1930.290284][T24412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1930.294619][T24412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1930.298264][T24412] bond0 (unregistering): Released all slaves [ 1930.303176][T24412] bond1 (unregistering): Released all slaves [ 1930.604557][T24412] hsr_slave_0: left promiscuous mode [ 1930.607259][T24412] hsr_slave_1: left promiscuous mode [ 1930.609309][T24412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1930.611685][T24412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1930.614380][T24412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1930.616909][T24412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1930.621812][T24412] veth0_macvtap: left promiscuous mode [ 1930.623603][T24412] veth1_vlan: left allmulticast mode [ 1930.625309][T24412] veth1_vlan: left promiscuous mode [ 1930.627529][T24412] veth0_vlan: left promiscuous mode [ 1930.690674][T24412] team0 (unregistering): Port device macvlan1 removed [ 1930.758747][T24412] team0 (unregistering): Port device team_slave_1 removed [ 1930.770584][T24412] team0 (unregistering): Port device team_slave_0 removed [ 1979.396058][ T1124] ata1.00: exception Emask 0x0 SAct 0x800 SErr 0x0 action 0x6 frozen [ 1979.399064][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 1979.401515][ T1124] ata1.00: cmd 60/38:58:36:46:01/15:00:00:00:00/40 tag 11 ncq dma 2781184 in [ 1979.401515][ T1124] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 1979.408214][ T1124] ata1.00: status: { DRDY } [ 1979.410102][ T1124] ata1: hard resetting link [ 1979.730313][ T1124] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 1979.734217][ T1124] ata1.00: configured for UDMA/100 [ 1979.736802][ T1124] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=64s [ 1979.740814][ T1124] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 1979.743990][ T1124] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 1979.747581][ T1124] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 01 46 36 00 15 38 00 [ 1979.750890][ T1124] I/O error, dev sda, sector 83510 op 0x0:(READ) flags 0x80700 phys_seg 82 prio class 2 [ 1979.754739][ T1124] ata1: EH complete [ 1979.764963][ T5146] udevd[5146]: worker [31049] /devices/platform/dummy_hcd.1/usb6/6-1 is taking a long time qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xac000) [ 1979.858235][ T1124] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 1979.865831][ T1124] ata1: failed to read log page 10h (errno=-5) [ 1979.878182][ T1124] ata1.00: NCQ disabled due to excessive errors [ 1979.880322][ T1124] ata1.00: exception Emask 0x1 SAct 0x40000001 SErr 0x0 action 0x0 [ 1979.891369][ T1124] ata1.00: irq_stat 0x40000000 [ 1979.893020][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 1979.895055][ T1124] ata1.00: cmd 60/e8:00:ce:60:01/04:00:00:00:00/40 tag 0 ncq dma 643072 in [ 1979.895055][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1979.909832][ T1124] ata1.00: status: { DRDY } [ 1979.911271][ T1124] ata1.00: error: { ABRT } [ 1979.915053][ T1124] ata1.00: failed command: READ FPDMA QUEUED [ 1979.920565][ T1124] ata1.00: cmd 60/60:f0:6e:5b:01/05:00:00:00:00/40 tag 30 ncq dma 704512 in [ 1979.920565][ T1124] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 1979.935917][ T1124] ata1.00: status: { DRDY } [ 1979.937433][ T1124] ata1.00: error: { ABRT } [ 1979.946977][ T1124] ata1.00: configured for UDMA/100 [ 1979.950721][ T1124] sd 0:0:0:0: [sda] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1979.954707][ T1124] sd 0:0:0:0: [sda] tag#0 Sense Key : Aborted Command [current] [ 1979.957896][ T1124] sd 0:0:0:0: [sda] tag#0 Add. Sense: No additional sense information [ 1979.961099][ T1124] sd 0:0:0:0: [sda] tag#0 CDB: Read(10) 28 00 00 01 60 ce 00 04 e8 00 [ 1979.964118][ T1124] I/O error, dev sda, sector 90318 op 0x0:(READ) flags 0x80700 phys_seg 117 prio class 2 [ 1979.968075][ T1124] sd 0:0:0:0: [sda] tag#30 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 1979.970897][ T1124] sd 0:0:0:0: [sda] tag#30 Sense Key : Aborted Command [current] [ 1979.973032][ T1124] sd 0:0:0:0: [sda] tag#30 Add. Sense: No additional sense information [ 1979.975281][ T1124] sd 0:0:0:0: [sda] tag#30 CDB: Read(10) 28 00 00 01 5b 6e 00 05 60 00 [ 1979.977772][ T1124] I/O error, dev sda, sector 88942 op 0x0:(READ) flags 0x84700 phys_seg 168 prio class 2 [ 1979.980801][ T1124] ata1: EH complete [ 1980.168441][T31304] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1980.176098][T31304] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1980.180133][T31304] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1980.188128][T31304] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1980.194983][T23250] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1980.201800][T31308] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1980.215539][ T5754] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1980.215893][T31310] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1980.221553][ T5754] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1980.227483][ T5754] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1980.230505][ T5754] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1980.234607][ T5754] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1980.241281][ T5754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1980.244586][ T5754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1980.246838][ T5754] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1980.253409][ T5754] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1980.258431][T23250] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1980.264555][ T5754] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1980.285769][ T5754] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1980.287024][T23250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1980.289252][ T5754] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1980.298017][T23250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1980.303098][T23250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1980.313321][T23250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1980.321913][T23250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1980.347345][T16839] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.461373][T16839] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.566240][T16839] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.578265][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1980.639056][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 1980.641141][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.642355][T16839] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.862892][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1980.969161][T16839] bridge_slave_1: left allmulticast mode [ 1980.971482][T16839] bridge_slave_1: left promiscuous mode [ 1980.974743][T16839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1980.979014][T16839] bridge_slave_0: left allmulticast mode [ 1980.981284][T16839] bridge_slave_0: left promiscuous mode [ 1980.983425][T16839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.054216][T16839] batman_adv: batadv0: Removing interface: gretap1 [ 1981.142300][T16839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1981.146929][T16839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1981.150336][T16839] bond0 (unregistering): Released all slaves [ 1981.155129][T16839] bond1 (unregistering): Released all slaves [ 1981.200864][T31301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.203311][T31301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.205608][T31301] bridge_slave_0: entered allmulticast mode [ 1981.209236][T31301] bridge_slave_0: entered promiscuous mode [ 1981.247009][T31301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.249373][T31301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.252272][T31301] bridge_slave_1: entered allmulticast mode [ 1981.257015][T31301] bridge_slave_1: entered promiscuous mode [ 1981.336413][T31301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.339483][T31313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.343783][T31313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.346367][T31313] bridge_slave_0: entered allmulticast mode [ 1981.349112][T31313] bridge_slave_0: entered promiscuous mode [ 1981.351829][T31307] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.354633][T31307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.359220][T31307] bridge_slave_0: entered allmulticast mode [ 1981.362058][T31307] bridge_slave_0: entered promiscuous mode [ 1981.366013][T31307] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.368402][T31307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.370779][T31307] bridge_slave_1: entered allmulticast mode [ 1981.373399][T31307] bridge_slave_1: entered promiscuous mode [ 1981.376235][T31300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.378503][T31300] bridge0: port 1(bridge_slave_0) entered disabled state [ 1981.380824][T31300] bridge_slave_0: entered allmulticast mode [ 1981.383394][T31300] bridge_slave_0: entered promiscuous mode [ 1981.387595][T31301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1981.390573][T31313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.392913][T31313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.395309][T31313] bridge_slave_1: entered allmulticast mode [ 1981.398370][T31313] bridge_slave_1: entered promiscuous mode [ 1981.424361][T31300] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.427465][T31300] bridge0: port 2(bridge_slave_1) entered disabled state [ 1981.429906][T31300] bridge_slave_1: entered allmulticast mode [ 1981.432797][T31300] bridge_slave_1: entered promiscuous mode [ 1981.468740][T31307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.485365][T31301] team0: Port device team_slave_0 added [ 1981.489582][T31301] team0: Port device team_slave_1 added [ 1981.492502][T31307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1981.502119][T31313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.506743][T31313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1981.526001][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1981.530202][T31300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1981.560432][T16839] hsr_slave_0: left promiscuous mode [ 1981.562435][T16839] hsr_slave_1: left promiscuous mode [ 1981.564324][T16839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1981.566880][T16839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.569741][T16839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1981.572505][T16839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.579764][T16839] veth1_macvtap: left promiscuous mode [ 1981.581997][T16839] veth0_macvtap: left promiscuous mode [ 1981.584283][T16839] veth1_vlan: left promiscuous mode [ 1981.586205][T16839] veth0_vlan: left promiscuous mode [ 1981.758745][T16839] team0 (unregistering): Port device team_slave_1 removed [ 1981.765933][T16839] team0 (unregistering): Port device team_slave_0 removed [ 1981.844876][T31300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1981.861174][T31301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1981.864096][T31301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1981.874605][T31301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1981.883709][T31307] team0: Port device team_slave_0 added [ 1981.900072][T31313] team0: Port device team_slave_0 added [ 1981.902584][T31301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1981.905616][T31301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1981.916000][T31301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1981.921866][T31307] team0: Port device team_slave_1 added [ 1981.932253][T31313] team0: Port device team_slave_1 added [ 1981.962244][T31300] team0: Port device team_slave_0 added [ 1981.972255][T31300] team0: Port device team_slave_1 added [ 1981.975075][T31307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1981.977623][T31307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1981.987558][T31307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1981.991850][T31313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1981.994154][T31313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1982.002278][T31313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1982.029822][T31301] hsr_slave_0: entered promiscuous mode [ 1982.032046][T31301] hsr_slave_1: entered promiscuous mode [ 1982.034115][T31301] debugfs: 'hsr0' already exists in 'hsr' [ 1982.036129][T31301] Cannot create hsr debugfs directory [ 1982.039198][T31307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1982.041367][T31307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1982.049449][T31307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1982.053357][T31313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1982.055600][T31313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1982.064175][T31313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1982.086615][T31300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1982.089576][T31300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1982.100626][T31300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1982.107645][T31300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1982.109943][T31300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1982.118241][T31300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1982.172150][T31313] hsr_slave_0: entered promiscuous mode [ 1982.174438][T31313] hsr_slave_1: entered promiscuous mode [ 1982.176629][T31313] debugfs: 'hsr0' already exists in 'hsr' [ 1982.178606][T31313] Cannot create hsr debugfs directory [ 1982.209546][T31307] hsr_slave_0: entered promiscuous mode [ 1982.211681][T31307] hsr_slave_1: entered promiscuous mode [ 1982.213684][T31307] debugfs: 'hsr0' already exists in 'hsr' [ 1982.215424][T31307] Cannot create hsr debugfs directory [ 1982.247094][T31300] hsr_slave_0: entered promiscuous mode [ 1982.249333][T31300] hsr_slave_1: entered promiscuous mode [ 1982.251408][T31300] debugfs: 'hsr0' already exists in 'hsr' [ 1982.253168][T31300] Cannot create hsr debugfs directory [ 1982.255643][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1982.316026][T31310] Bluetooth: hci1: command tx timeout [ 1982.316070][T23250] Bluetooth: hci2: command tx timeout [ 1982.316117][T31304] Bluetooth: hci0: command tx timeout [ 1982.396417][T23250] Bluetooth: hci3: command tx timeout [ 1982.604973][T16839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.705785][T16839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.714849][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1982.842798][T16839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.921745][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1982.976540][T16839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1982.982349][T31301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1982.988269][T31301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1982.992151][T31301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1982.999257][T31301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1983.002098][T31301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1983.010159][T31301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1983.014207][T31301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1983.023835][T31301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1983.109756][T31313] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1983.118027][T31313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1983.144088][T31313] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1983.151173][T31313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1983.154481][T31313] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1983.159310][T31313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1983.176951][T31313] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1983.182229][T31313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1983.202713][T16839] bridge_slave_1: left allmulticast mode [ 1983.205161][T16839] bridge_slave_1: left promiscuous mode [ 1983.207807][T16839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1983.211370][T16839] bridge_slave_0: left allmulticast mode [ 1983.213240][T16839] bridge_slave_0: left promiscuous mode [ 1983.215050][T16839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1983.297513][T16839] batman_adv: batadv0: Removing interface: gretap1 [ 1983.371476][T16839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1983.377256][T16839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1983.382077][T16839] bond0 (unregistering): Released all slaves [ 1983.389083][T16839] bond1 (unregistering): Released all slaves [ 1983.404333][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1983.472939][T31300] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1983.481363][T31300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1983.504966][T31300] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1983.522999][T31300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1983.534467][T31300] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1983.543010][T31300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1983.549196][T31300] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1983.555324][T31300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1983.595210][T31301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1983.663664][T31301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1983.678855][T31307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1983.683208][T31307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1983.687265][T31307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1983.690908][T31307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1983.696329][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1983.698884][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1983.702940][T31307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1983.706887][T31307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1983.709930][T31307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1983.715436][T31307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1983.723310][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1983.726401][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1983.734262][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1983.752436][T16839] hsr_slave_0: left promiscuous mode [ 1983.754858][T16839] hsr_slave_1: left promiscuous mode [ 1983.757157][T16839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1983.759450][T16839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1983.762286][T16839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1983.764571][T16839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1983.769941][T16839] veth1_macvtap: left promiscuous mode [ 1983.771686][T16839] veth0_macvtap: left promiscuous mode [ 1983.773419][T16839] veth1_vlan: left allmulticast mode [ 1983.775128][T16839] veth1_vlan: left promiscuous mode [ 1983.778658][T16839] veth0_vlan: left promiscuous mode [ 1983.857126][T16839] team0 (unregistering): Port device macvlan1 removed [ 1983.959865][T16839] team0 (unregistering): Port device team_slave_1 removed [ 1983.971900][T16839] team0 (unregistering): Port device team_slave_0 removed [ 1984.073471][T16839] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 1984.125616][T31313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1984.159695][T31313] 8021q: adding VLAN 0 to HW filter on device team0 [ 1984.184603][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.187697][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1984.202007][T31300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1984.217742][T20107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.220116][T20107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.256318][T31300] 8021q: adding VLAN 0 to HW filter on device team0 [ 1984.263637][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.266473][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1984.301563][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.304075][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.341404][T31307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1984.375509][T31307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1984.392709][T20107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1984.395096][T20107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1984.395966][T23250] Bluetooth: hci0: command tx timeout [ 1984.396048][T31310] Bluetooth: hci1: command tx timeout [ 1984.397652][T31310] Bluetooth: hci2: command tx timeout [ 1984.415411][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1984.418376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1984.476242][T23250] Bluetooth: hci3: command tx timeout [ 1984.514319][T31301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1984.576569][T31301] veth0_vlan: entered promiscuous mode [ 1984.583165][T31301] veth1_vlan: entered promiscuous mode [ 1984.600798][T31301] veth0_macvtap: entered promiscuous mode [ 1984.607737][T31301] veth1_macvtap: entered promiscuous mode [ 1984.621782][T31301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1984.626049][T31313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1984.630786][T31301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1984.634022][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1984.650177][ T1159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.661176][ T1159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.665925][ T1159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.683448][T16839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.733463][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1984.737326][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1984.754589][T16839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1984.758165][T31300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1984.761562][T16839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1984.788286][T31307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1984.833878][T31313] veth0_vlan: entered promiscuous mode [ 1984.839555][T31313] veth1_vlan: entered promiscuous mode [ 1984.856067][T31313] veth0_macvtap: entered promiscuous mode [ 1984.863625][T31313] veth1_macvtap: entered promiscuous mode [ 1984.872381][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1984.889948][T31313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1984.911112][T31313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1984.932338][T20107] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.989100][T20107] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1984.996906][T20107] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.003175][T31549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4748'. [ 1985.007714][T20107] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.072496][T31307] veth0_vlan: entered promiscuous mode [ 1985.075141][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1985.078720][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1985.095483][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1985.099492][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1985.101655][T31300] veth0_vlan: entered promiscuous mode [ 1985.108768][T31307] veth1_vlan: entered promiscuous mode [ 1985.117585][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1985.123862][T31300] veth1_vlan: entered promiscuous mode [ 1985.155383][T31307] veth0_macvtap: entered promiscuous mode [ 1985.164422][T31557] netlink: 'syz.5.4746': attribute type 10 has an invalid length. [ 1985.166809][T31300] veth0_macvtap: entered promiscuous mode [ 1985.176217][T31557] macvlan1: entered promiscuous mode [ 1985.178699][T31557] macvlan1: entered allmulticast mode [ 1985.183036][T31557] veth1_vlan: entered allmulticast mode [ 1985.189005][T31557] team0: Port device macvlan1 added [ 1985.193683][T31300] veth1_macvtap: entered promiscuous mode [ 1985.200905][T31307] veth1_macvtap: entered promiscuous mode [ 1985.211019][T31307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1985.218728][T31307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1985.229473][T24412] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.232831][T24412] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.236717][T31300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1985.240613][T24412] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.244159][T24412] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.254080][T31300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1985.278665][ T1154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.282992][ T1154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.289633][ T1154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.291078][T31570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4751'. [ 1985.293199][ T1154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1985.347078][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1985.356640][T24412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1985.359251][T24412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1985.411177][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1985.415015][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1985.432464][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1985.435162][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1985.450762][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1985.454406][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1985.509854][T31580] Driver unsupported XDP return value 0 on prog (id 821) dev N/A, expect packet loss! [ 1985.552042][T31578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1985.554607][T31578] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1985.601058][T31578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1985.610317][T31578] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1985.635758][T31578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1985.643297][T31578] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1985.662772][T31578] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1985.666522][T31578] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1986.400887][T31604] block nbd0: reconnected socket [ 1986.407566][T31604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4756'. [ 1986.422819][T23250] block nbd0: Receive control failed (result -32) [ 1986.539126][ T1154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.542407][T31611] fuse: Unknown parameter 'use00000000000000000000' [ 1986.618232][T31617] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4758'. [ 1986.629945][ T1154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.709108][ T1154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1986.798891][ T1154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1987.227377][ T1154] bridge_slave_1: left allmulticast mode [ 1987.229302][ T1154] bridge_slave_1: left promiscuous mode [ 1987.231194][ T1154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.238806][ T1154] bridge_slave_0: left allmulticast mode [ 1987.240757][ T1154] bridge_slave_0: left promiscuous mode [ 1987.242713][ T1154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1987.474551][ T1154] batman_adv: batadv0: Removing interface: gretap1 [ 1987.652033][ T1154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1987.658997][ T1154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1987.663792][ T1154] bond0 (unregistering): Released all slaves [ 1987.672988][ T1154] bond1 (unregistering): Released all slaves [ 1987.895500][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1988.269201][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1988.337764][T31657] block nbd0: reconnected socket [ 1988.344479][T23250] block nbd0: Receive control failed (result -32) [ 1988.567782][ T1154] hsr_slave_0: left promiscuous mode [ 1988.571844][ T1154] hsr_slave_1: left promiscuous mode [ 1988.574331][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1988.577944][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1988.587684][ T1154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1988.591187][ T1154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1988.608362][ T1154] veth1_macvtap: left promiscuous mode [ 1988.613250][ T1154] veth0_macvtap: left promiscuous mode [ 1988.616606][ T1154] veth1_vlan: left promiscuous mode [ 1988.622906][ T1154] veth0_vlan: left promiscuous mode [ 1988.679766][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4772'. [ 1988.975957][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f5f5c00: rx timeout, send abort [ 1989.362240][ T1154] team0 (unregistering): Port device team_slave_1 removed [ 1989.376545][ T1154] team0 (unregistering): Port device team_slave_0 removed [ 1989.479569][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f5f5c00: abort rx timeout. Force session deactivation [ 1989.485141][ T1154] smc: removing net device vcan0 with user defined pnetid SYZ1 [ 1989.525568][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1989.827851][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1991.660010][T31733] fuse: Bad value for 'fd' [ 1995.252708][T31786] smc: net device bond0 applied user defined pnetid SYZ2 [ 1997.591791][T31877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4811'. [ 1997.821459][T31883] IPv6: NLM_F_CREATE should be specified when creating new route [ 2000.008865][T31938] fuse: Bad value for 'fd' [ 2001.716251][T31973] netlink: 'syz.5.4840': attribute type 12 has an invalid length. [ 2002.515864][T31994] netlink: 'syz.3.4846': attribute type 12 has an invalid length. [ 2004.470493][T32025] netlink: 'syz.3.4856': attribute type 12 has an invalid length. [ 2004.707554][T32031] netlink: 'syz.3.4858': attribute type 12 has an invalid length. [ 2005.905227][T32046] block nbd0: reconnected socket [ 2005.907714][T23250] block nbd0: Receive control failed (result -32) [ 2006.053274][T31124] IPVS: starting estimator thread 0... [ 2006.056345][T32057] mmap: syz.4.4860 (32057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 2006.165961][T32058] IPVS: using max 44 ests per chain, 105600 per kthread [ 2007.972609][T32092] block nbd0: reconnected socket [ 2007.975276][T23250] block nbd0: Receive control failed (result -32) [ 2009.406673][T32112] netlink: 'syz.5.4884': attribute type 12 has an invalid length. [ 2009.724936][T32125] netlink: 'syz.3.4887': attribute type 12 has an invalid length. [ 2009.877079][T32134] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4889'. [ 2010.927549][T14312] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 2011.095907][T14312] usb 8-1: Using ep0 maxpacket: 32 [ 2011.100060][T14312] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2011.107502][T14312] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2011.111460][T14312] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2011.115092][T14312] usb 8-1: Product: syz [ 2011.118848][T14312] usb 8-1: Manufacturer: syz [ 2011.120922][T14312] usb 8-1: SerialNumber: syz [ 2011.125745][T32149] netlink: 'syz.4.4895': attribute type 2 has an invalid length. [ 2011.128029][T14312] usb 8-1: config 0 descriptor?? [ 2011.128540][T32149] netlink: 'syz.4.4895': attribute type 2 has an invalid length. [ 2011.133528][T32140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2011.251497][T32151] netlink: 'syz.6.4896': attribute type 12 has an invalid length. [ 2013.120213][T32172] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4903'. [ 2013.708327][T31291] usb 8-1: USB disconnect, device number 7 [ 2014.928206][ T40] audit: type=1326 audit(1777084798.798:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.4.4922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 2014.940786][T32221] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4922'. [ 2014.951681][ T40] audit: type=1326 audit(1777084798.798:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.4.4922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 2014.974958][ T40] audit: type=1326 audit(1777084798.798:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.4.4922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 2015.004529][ T40] audit: type=1326 audit(1777084798.798:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.4.4922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 2015.042355][ T40] audit: type=1326 audit(1777084798.798:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.4.4922" exe="/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 2015.067715][ T40] audit: type=1326 audit(1777084798.798:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.4.4922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 2015.092128][ T40] audit: type=1326 audit(1777084798.798:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.4.4922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 2015.115900][ T40] audit: type=1326 audit(1777084798.798:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.4.4922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 2015.122708][ T40] audit: type=1326 audit(1777084798.798:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.4.4922" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 2015.130295][ T40] audit: type=1326 audit(1777084798.798:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32219 comm="syz.4.4922" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf708efcc code=0x7ffc0000 [ 2015.145945][T31023] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 2015.306040][T31023] usb 11-1: Using ep0 maxpacket: 32 [ 2015.309782][T31023] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2015.314356][T31023] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2015.317269][T31023] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2015.319656][T31023] usb 11-1: Product: syz [ 2015.320889][T31023] usb 11-1: Manufacturer: syz [ 2015.322238][T31023] usb 11-1: SerialNumber: syz [ 2015.328510][T31023] usb 11-1: config 0 descriptor?? [ 2015.333151][T32218] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2015.403239][T32230] block nbd0: reconnected socket [ 2015.405523][T23250] block nbd0: Receive control failed (result -32) [ 2015.701627][T13567] usb 11-1: USB disconnect, device number 2 [ 2016.382102][T32253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4935'. [ 2016.491209][T32260] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2016.515980][T14312] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 2016.886423][T14312] usb 10-1: Using ep0 maxpacket: 32 [ 2016.890035][T14312] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 2016.897315][T14312] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 2016.900410][T14312] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 2016.903686][T14312] usb 10-1: Product: syz [ 2016.905431][T14312] usb 10-1: Manufacturer: syz [ 2016.911876][T14312] usb 10-1: SerialNumber: syz [ 2016.917707][T14312] usb 10-1: config 0 descriptor?? [ 2016.920496][T32257] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2017.190075][T32270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2017.192982][T32270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2017.781102][T14312] usb 10-1: USB disconnect, device number 2 [ 2017.802126][T32281] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4948'. [ 2017.872782][T32290] smc: net device bond0 applied user defined pnetid SYZ2 [ 2017.921570][T32294] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2017.944701][T32295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4949'. [ 2018.023722][T32301] block nbd0: reconnected socket [ 2018.027290][T23250] block nbd0: Receive control failed (result -32) [ 2019.373878][T32325] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2019.424678][T32328] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2019.854162][T32357] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2020.126827][T32371] block nbd0: reconnected socket [ 2020.128975][T32371] nbd: socks must be embedded in a SOCK_ITEM attr [ 2020.132717][T23250] block nbd0: Receive control failed (result -32) [ 2020.205247][T32373] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2021.387931][T32417] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5004'. [ 2021.825500][T32426] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5008'. [ 2023.848292][T32463] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2024.134275][T32476] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2024.166100][T32477] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2024.246792][T32480] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5028'. [ 2026.611869][T32540] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2028.463686][T32592] overlayfs: missing 'lowerdir' [ 2028.559948][T32602] IPv6: NLM_F_CREATE should be specified when creating new route [ 2028.761076][T32616] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5083'. [ 2028.994158][T32623] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2029.498777][T32646] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5096'. [ 2029.517131][ T40] kauditd_printk_skb: 131 callbacks suppressed [ 2029.517303][ T40] audit: type=1326 audit(1777084813.358:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.6.5096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2029.785944][ T40] audit: type=1326 audit(1777084813.358:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.6.5096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2029.793759][ T40] audit: type=1326 audit(1777084813.358:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.6.5096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2029.802353][ T40] audit: type=1326 audit(1777084813.358:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.6.5096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2029.810721][ T40] audit: type=1326 audit(1777084813.358:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.6.5096" exe="/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2029.819058][ T40] audit: type=1326 audit(1777084813.358:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.6.5096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2029.827950][ T40] audit: type=1326 audit(1777084813.358:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.6.5096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2029.836818][ T40] audit: type=1326 audit(1777084813.358:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.6.5096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2029.849151][ T40] audit: type=1326 audit(1777084813.358:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.6.5096" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2029.865899][ T40] audit: type=1326 audit(1777084813.358:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32645 comm="syz.6.5096" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2031.058983][T32687] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2031.308028][T32691] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5113'. [ 2031.311054][T32691] nbd: must specify a device to reconfigure [ 2031.639175][T32701] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2032.272223][T32717] Bluetooth: MGMT ver 1.23 [ 2032.533223][T32727] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5129'. [ 2032.645069][T32730] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2033.736991][T32760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2034.631513][ T301] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2035.075176][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 2035.075187][ T40] audit: type=1326 audit(1777084818.938:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=312 comm="syz.5.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 2035.091816][ T313] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5152'. [ 2035.094445][ T40] audit: type=1326 audit(1777084818.938:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=312 comm="syz.5.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 2035.107039][ T40] audit: type=1326 audit(1777084818.938:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=312 comm="syz.5.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 2035.113689][ T40] audit: type=1326 audit(1777084818.938:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=312 comm="syz.5.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 2035.134685][ T40] audit: type=1326 audit(1777084818.948:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=312 comm="syz.5.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 2035.150173][ T40] audit: type=1326 audit(1777084818.948:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=312 comm="syz.5.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 2035.170788][ T40] audit: type=1326 audit(1777084818.948:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=312 comm="syz.5.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 2035.188174][ T40] audit: type=1326 audit(1777084818.948:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=312 comm="syz.5.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 2035.204111][ T40] audit: type=1326 audit(1777084818.948:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=312 comm="syz.5.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf702efcc code=0x7ffc0000 [ 2035.217165][ T40] audit: type=1326 audit(1777084818.958:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=312 comm="syz.5.5152" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7165cab code=0x7ffc0000 [ 2035.382254][ T325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5147'. [ 2035.561915][ T331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2036.245706][ T340] syzkaller0: entered promiscuous mode [ 2036.248051][ T340] syzkaller0: entered allmulticast mode [ 2036.506669][ T351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5166'. [ 2036.971449][ T381] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2037.668930][ T400] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2038.691903][ T435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5201'. [ 2038.715045][ T437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5202'. [ 2039.254803][ T469] Set syz1 is full, maxelem 0 reached [ 2039.265554][ T469] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5214'. [ 2039.571443][ T491] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5220'. [ 2039.632146][ T493] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2040.142740][ T506] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5229'. [ 2040.196885][ T507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2040.574516][ T525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5236'. [ 2040.723042][ T529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5238'. [ 2041.173327][ T539] Set syz1 is full, maxelem 0 reached [ 2041.178586][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 2041.178600][ T40] audit: type=1326 audit(1777084825.048:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.5243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2041.185414][ T539] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5243'. [ 2041.196083][ T40] audit: type=1326 audit(1777084825.048:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.5243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2041.205630][ T40] audit: type=1326 audit(1777084825.048:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.5243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2041.214845][ T40] audit: type=1326 audit(1777084825.048:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.5243" exe="/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2041.227162][ T40] audit: type=1326 audit(1777084825.048:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.5243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2041.236893][ T40] audit: type=1326 audit(1777084825.048:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.5243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2041.246263][ T40] audit: type=1326 audit(1777084825.048:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.5243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2041.257050][ T40] audit: type=1326 audit(1777084825.048:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.5243" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2041.267003][ T40] audit: type=1326 audit(1777084825.048:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.5243" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2041.276745][ T40] audit: type=1326 audit(1777084825.048:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=538 comm="syz.3.5243" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71c5cab code=0x7ffc0000 [ 2041.344744][ T550] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5247'. [ 2041.419478][ T558] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2041.828850][ T592] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5266'. [ 2041.852025][ T594] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5267'. [ 2042.079227][ T1427] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.082214][ T1427] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.913956][ T643] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5289'. [ 2043.125061][ T654] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5293'. [ 2043.244044][ T659] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2043.452448][ T668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5299'. [ 2045.267400][ T728] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5325'. [ 2047.594583][ T768] syzkaller0: entered promiscuous mode [ 2047.597442][ T768] syzkaller0: entered allmulticast mode [ 2047.950752][ T780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5341'. [ 2049.232163][ T799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5350'. [ 2049.235405][ T799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5350'. [ 2049.388187][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 2049.388210][ T40] audit: type=1326 audit(1777084833.258:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=813 comm="syz.6.5357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2049.393992][ T814] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5357'. [ 2049.401272][ T40] audit: type=1326 audit(1777084833.258:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=813 comm="syz.6.5357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2049.410200][ T40] audit: type=1326 audit(1777084833.258:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=813 comm="syz.6.5357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2049.417470][ T816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5358'. [ 2049.420637][ T40] audit: type=1326 audit(1777084833.258:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=813 comm="syz.6.5357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2049.442780][ T40] audit: type=1326 audit(1777084833.258:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=813 comm="syz.6.5357" exe="/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2049.453277][ T40] audit: type=1326 audit(1777084833.258:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=813 comm="syz.6.5357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2049.460200][ T40] audit: type=1326 audit(1777084833.258:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=813 comm="syz.6.5357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2049.467027][ T40] audit: type=1326 audit(1777084833.258:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=813 comm="syz.6.5357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2049.470824][ T822] binder: 821:822 unknown command 0 [ 2049.473501][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880253ab000: rx timeout, send abort [ 2049.478176][ T40] audit: type=1326 audit(1777084833.258:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=813 comm="syz.6.5357" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2049.478334][ T822] binder: 821:822 ioctl c0306201 80000080 returned -22 [ 2049.487411][ T40] audit: type=1326 audit(1777084833.258:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=813 comm="syz.6.5357" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f07fcc code=0x7ffc0000 [ 2049.507604][ T822] binder_alloc: 821: binder_alloc_buf, no vma [ 2049.716824][ T838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5368'. [ 2049.719642][ T838] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5368'. [ 2049.826354][ T857] overlayfs: failed to resolve './file1': -2 [ 2049.873806][ T863] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5380'. [ 2049.901293][ T865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5381'. [ 2049.969686][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880253aa000: rx timeout, send abort [ 2049.977835][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880253ab000: abort rx timeout. Force session deactivation [ 2050.108115][ T880] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2050.384680][ T884] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2050.420944][ T888] overlayfs: failed to resolve './file0': -2 [ 2050.473161][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880253aa000: abort rx timeout. Force session deactivation [ 2050.686516][ T890] __nla_validate_parse: 1 callbacks suppressed [ 2050.686656][ T890] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5392'. [ 2050.992617][ T893] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2051.693193][ T910] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 2051.975192][ T921] syzkaller0: entered promiscuous mode [ 2051.981516][ T921] syzkaller0: entered allmulticast mode [ 2052.011891][ T923] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 2052.261187][ T937] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2052.299016][ T942] syzkaller0: entered promiscuous mode [ 2052.300793][ T942] syzkaller0: entered allmulticast mode [ 2052.380542][ T948] fuse: Bad value for 'fd' [ 2052.868445][ T960] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2053.985729][ T1003] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2054.382903][ T1008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2055.215710][ T1019] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 2055.219042][ T1019] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2055.519479][ T1036] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2055.638479][ T1038] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5450'. [ 2056.170360][ T1052] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2056.775999][ T1071] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5462'. [ 2056.832395][ T1076] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5460'. [ 2057.850021][ T1113] bridge_slave_0: left allmulticast mode [ 2057.852079][ T1113] bridge_slave_0: left promiscuous mode [ 2057.857794][ T1113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2057.879209][ T1113] bridge_slave_1: left allmulticast mode [ 2057.881456][ T1113] bridge_slave_1: left promiscuous mode [ 2057.883589][ T1113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.895148][ T1113] bond0: (slave bond_slave_0): Releasing backup interface [ 2057.903276][ T1113] bond0: (slave bond_slave_1): Releasing backup interface [ 2057.912710][ T1113] team0: Port device team_slave_0 removed [ 2057.920699][ T1113] team0: Port device team_slave_1 removed [ 2057.923235][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2057.926054][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2057.943436][ T1113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2057.946625][ T1113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2057.950188][ T1113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2058.113689][ T1146] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2058.221211][ T1153] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2059.263024][ T1173] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2060.461540][ T1211] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2060.818198][ T1216] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2061.698431][ T1220] overlayfs: failed to resolve './file1': -2 [ 2062.019207][ T1238] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2062.058916][ T1239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5514'. [ 2063.809118][ T1257] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2064.400857][ T1281] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2064.771429][ T1302] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2065.784354][ T1328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5553'. [ 2065.793149][ T1328] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5553'. [ 2066.795043][ T1357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5562'. [ 2066.798466][ T1357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5562'. [ 2066.851949][ T1368] fuse: Bad value for 'fd' [ 2066.978220][ T1376] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2067.824745][ T1392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5573'. [ 2068.235580][ T1423] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2068.395888][T13567] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 2068.545938][T13567] usb 10-1: Using ep0 maxpacket: 32 [ 2068.551010][T13567] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 2068.554687][T13567] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2068.559063][T13567] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 2068.563640][T13567] usb 10-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 2068.568798][T13567] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2068.573869][T13567] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 2068.577887][T13567] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 2068.581548][T13567] usb 10-1: Product: syz [ 2068.583454][T13567] usb 10-1: Manufacturer: syz [ 2068.585558][T13567] usb 10-1: SerialNumber: syz [ 2068.590867][T13567] usb 10-1: config 0 descriptor?? [ 2068.598313][T13567] ldusb 10-1:0.0: Interrupt in endpoint not found [ 2068.930636][T31124] usb 10-1: USB disconnect, device number 3 [ 2069.384896][ T1450] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2069.495467][ T1451] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2070.203508][ T1461] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2070.458556][ T1472] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2071.160697][ T1478] bridge_slave_0: left allmulticast mode [ 2071.162790][ T1478] bridge_slave_0: left promiscuous mode [ 2071.164830][ T1478] bridge0: port 1(bridge_slave_0) entered disabled state [ 2071.245705][ T1478] bridge_slave_1: left allmulticast mode [ 2071.254246][ T1478] bridge_slave_1: left promiscuous mode [ 2071.262287][ T1478] bridge0: port 2(bridge_slave_1) entered disabled state [ 2071.363229][ T1478] bond0: (slave bond_slave_0): Releasing backup interface [ 2071.408272][ T1478] bond0: (slave bond_slave_1): Releasing backup interface [ 2071.420250][ T1478] team0: Port device team_slave_0 removed [ 2071.425126][ T1478] team0: Port device team_slave_1 removed [ 2071.428237][ T1478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2071.430645][ T1478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2071.434449][ T1478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2071.437648][ T1478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2071.440958][ T1478] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2071.488626][ T1486] syzkaller0: entered promiscuous mode [ 2071.490404][ T1486] syzkaller0: entered allmulticast mode [ 2072.907953][ T1525] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2073.123754][ T1528] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2073.564818][ T1530] bridge_slave_0: left allmulticast mode [ 2073.570122][ T1530] bridge_slave_0: left promiscuous mode [ 2073.573272][ T1530] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.609645][ T1530] bridge_slave_1: left allmulticast mode [ 2073.613793][ T1530] bridge_slave_1: left promiscuous mode [ 2073.620272][ T1530] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.658194][ T1530] bond0: (slave bond_slave_0): Releasing backup interface [ 2073.697812][ T1530] bond0: (slave bond_slave_1): Releasing backup interface [ 2073.748434][ T1530] team0: Port device team_slave_0 removed [ 2073.757311][ T1530] team0: Port device team_slave_1 removed [ 2073.759590][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2073.761905][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2073.824553][ T1530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2073.826990][ T1530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2073.847475][ T1530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2073.878822][ T1533] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2073.982105][ T1535] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2074.008189][ T1537] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2074.108491][ T1541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5621'. [ 2074.162137][ T1539] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2074.213634][ T1553] netlink: 184 bytes leftover after parsing attributes in process `syz.4.5624'. [ 2074.262244][ T1556] smc: net device bond0 applied user defined pnetid SYZ2 [ 2074.474622][ T1562] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2075.728712][ T1578] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2075.812152][ T1577] syzkaller0: entered promiscuous mode [ 2075.814132][ T1577] syzkaller0: entered allmulticast mode [ 2075.820583][ T1579] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2075.915447][ T1583] syzkaller0: entered promiscuous mode [ 2075.917414][ T1583] syzkaller0: entered allmulticast mode [ 2076.311177][ T1585] bridge_slave_0: left allmulticast mode [ 2076.313109][ T1585] bridge_slave_0: left promiscuous mode [ 2076.315083][ T1585] bridge0: port 1(bridge_slave_0) entered disabled state [ 2076.364178][ T1585] bridge_slave_1: left allmulticast mode [ 2076.366097][ T1585] bridge_slave_1: left promiscuous mode [ 2076.368869][ T1585] bridge0: port 2(bridge_slave_1) entered disabled state [ 2076.428125][ T1585] bond0: (slave bond_slave_0): Releasing backup interface [ 2076.472103][ T1585] bond0: (slave bond_slave_1): Releasing backup interface [ 2076.514894][ T1585] team0: Port device team_slave_0 removed [ 2076.536119][ T1585] team0: Port device team_slave_1 removed [ 2076.543737][ T1585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2076.548129][ T1585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2076.559613][ T1585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2076.563922][ T1585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2076.572374][ T1585] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2076.641752][ T1590] syzkaller0: entered promiscuous mode [ 2076.646712][ T1590] syzkaller0: entered allmulticast mode [ 2078.082261][ T1625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5648'. [ 2078.085402][ T1625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5648'. [ 2078.195553][ T1605] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2078.201738][ T1614] smc: net device bond0 applied user defined pnetid SYZ2 [ 2078.280281][ T1634] syzkaller0: entered promiscuous mode [ 2078.282441][ T1634] syzkaller0: entered allmulticast mode [ 2078.305231][ T1636] syzkaller0: entered promiscuous mode [ 2078.307725][ T1636] syzkaller0: entered allmulticast mode [ 2078.359226][ T1638] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5654'. [ 2078.371908][ T1638] netlink: 'syz.5.5654': attribute type 4 has an invalid length. [ 2078.374778][ T1638] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5654'. [ 2078.381783][ T1640] syzkaller0: entered promiscuous mode [ 2078.383674][ T1640] syzkaller0: entered allmulticast mode [ 2078.458347][ T1644] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2078.483857][ T1647] syzkaller0: entered promiscuous mode [ 2078.492425][ T1647] syzkaller0: entered allmulticast mode [ 2078.544803][ T1652] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2078.611895][ T1656] syzkaller0: entered promiscuous mode [ 2078.613962][ T1656] syzkaller0: entered allmulticast mode [ 2078.946648][ T1677] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2078.997258][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5673'. [ 2079.409682][ T1699] syzkaller0: entered promiscuous mode [ 2079.412008][ T1699] syzkaller0: entered allmulticast mode [ 2079.600243][ T1707] syzkaller0: entered promiscuous mode [ 2079.604020][ T1707] syzkaller0: entered allmulticast mode [ 2079.622795][ T1709] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2079.678549][ T1714] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5688'. [ 2079.682323][ T1714] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5688'. [ 2079.771208][ T1719] syzkaller0: entered promiscuous mode [ 2079.773052][ T1719] syzkaller0: entered allmulticast mode [ 2079.778010][ T1717] syzkaller0: entered promiscuous mode [ 2079.779995][ T1717] syzkaller0: entered allmulticast mode [ 2080.042830][ T1731] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2080.207395][ T1738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2080.259549][ T1743] netlink: 168 bytes leftover after parsing attributes in process `syz.5.5701'. [ 2080.281397][ T1745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5700'. [ 2080.285190][ T1745] netlink: 'syz.4.5700': attribute type 4 has an invalid length. [ 2080.291421][ T1745] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5700'. [ 2080.560865][ T1765] syzkaller0: entered promiscuous mode [ 2080.563252][ T1765] syzkaller0: entered allmulticast mode [ 2080.634398][ T1771] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5710'. [ 2080.635406][ T1769] Set syz1 is full, maxelem 0 reached [ 2080.647375][ T40] kauditd_printk_skb: 43 callbacks suppressed [ 2080.647390][ T40] audit: type=1326 audit(1777084864.518:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.3.5711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2080.652774][ T1769] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5711'. [ 2080.663185][ T40] audit: type=1326 audit(1777084864.518:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.3.5711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2080.663232][ T40] audit: type=1326 audit(1777084864.518:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.3.5711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2080.663272][ T40] audit: type=1326 audit(1777084864.518:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.3.5711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2080.663313][ T40] audit: type=1326 audit(1777084864.518:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.3.5711" exe="/syz-executor" sig=0 arch=40000003 syscall=319 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2080.663352][ T40] audit: type=1326 audit(1777084864.518:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.3.5711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2080.701860][ T40] audit: type=1326 audit(1777084864.518:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.3.5711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2080.709251][ T40] audit: type=1326 audit(1777084864.518:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.3.5711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2080.717395][ T40] audit: type=1326 audit(1777084864.518:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.3.5711" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2080.725021][ T40] audit: type=1326 audit(1777084864.518:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1768 comm="syz.3.5711" exe="/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7fc5fcc code=0x7ffc0000 [ 2080.750579][ T1777] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2080.909656][ T1796] syzkaller0: entered promiscuous mode [ 2080.911419][ T1796] syzkaller0: entered allmulticast mode [ 2080.922393][ T1798] binder_alloc: 1797: binder_alloc_buf, no vma [ 2081.051132][ T1808] overlayfs: missing 'lowerdir' [ 2081.090667][ T1800] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 2081.984211][ T1830] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5736'. [ 2082.088095][ T1840] overlayfs: missing 'lowerdir' [ 2082.129478][ T1842] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5743'. [ 2082.272190][ T1853] syzkaller0: entered promiscuous mode [ 2082.273948][ T1853] syzkaller0: entered allmulticast mode [ 2082.515960][ T1858] ------------[ cut here ]------------ [ 2082.517943][ T1858] [CRTC:37:crtc-0] vblank wait timed out [ 2082.519852][ T1858] WARNING: drivers/gpu/drm/drm_atomic_helper.c:1921 at drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0, CPU#2: syz.6.5751/1858 [ 2082.524188][ T1858] Modules linked in: [ 2082.527560][ T1858] CPU: 2 UID: 0 PID: 1858 Comm: syz.6.5751 Tainted: G L syzkaller #0 PREEMPT(full) [ 2082.531625][ T1858] Tainted: [L]=SOFTLOCKUP [ 2082.534614][ T1858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2082.538151][ T1858] RIP: 0010:drm_atomic_helper_wait_for_vblanks.part.0+0x73e/0x8a0 [ 2082.540692][ T1858] Code: 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 04 01 84 c0 74 08 3c 03 0f 8e 44 01 00 00 48 8d 3d e8 db 3d 0b 8b b3 d0 00 00 00 <67> 48 0f b9 3a e9 e1 fc ff ff e8 d3 d3 62 fc e9 7c fe ff ff e8 f9 [ 2082.546565][ T1858] RSP: 0000:ffffc90022e57790 EFLAGS: 00010246 [ 2082.548558][ T1858] RAX: 0000000000000000 RBX: ffff888023db12e0 RCX: 1ffff110047b6276 [ 2082.550893][ T1858] RDX: ffff88802555b740 RSI: 0000000000000025 RDI: ffffffff90e2e360 [ 2082.553374][ T1858] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 2082.555753][ T1858] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 2082.558165][ T1858] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802787d900 [ 2082.560587][ T1858] FS: 0000000000000000(0000) GS:ffff888097383000(0063) knlGS:00000000581c5480 [ 2082.563934][ T1858] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 2082.566088][ T1858] CR2: 0000000031020ff8 CR3: 000000005cafa000 CR4: 0000000000352ef0 [ 2082.568518][ T1858] Call Trace: [ 2082.569573][ T1858] [ 2082.570495][ T1858] ? __pfx_drm_atomic_helper_wait_for_vblanks.part.0+0x10/0x10 [ 2082.572808][ T1858] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2082.574668][ T1858] ? lockdep_hardirqs_on+0x78/0x100 [ 2082.576446][ T1858] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2082.578313][ T1858] ? drm_atomic_helper_commit_hw_done+0x36d/0x490 [ 2082.580303][ T1858] drm_atomic_helper_commit_tail+0xff/0x130 [ 2082.582175][ T1858] commit_tail+0x338/0x430 [ 2082.583688][ T1858] drm_atomic_helper_commit+0x303/0x380 [ 2082.585494][ T1858] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 2082.587338][ T1858] drm_atomic_commit+0x230/0x300 [ 2082.588856][ T1858] ? __pfx_drm_atomic_commit+0x10/0x10 [ 2082.590482][ T1858] ? __pfx___drm_printfn_info+0x10/0x10 [ 2082.592614][ T1858] ? drm_client_rotation+0x451/0x6a0 [ 2082.594762][ T1858] drm_client_modeset_commit_atomic+0x6a6/0x7e0 [ 2082.596814][ T1858] ? drm_client_modeset_commit_locked+0x4c/0x580 [ 2082.598782][ T1858] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 2082.600881][ T1858] ? drm_master_internal_acquire+0x21/0x80 [ 2082.602756][ T1858] drm_client_modeset_commit_locked+0x14d/0x580 [ 2082.604692][ T1858] drm_client_modeset_commit+0x4f/0x80 [ 2082.606440][ T1858] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 2082.608855][ T1858] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 2082.610942][ T1858] drm_fbdev_client_restore+0x1b/0x30 [ 2082.612840][ T1858] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 2082.614721][ T1858] drm_client_dev_restore+0x205/0x2a0 [ 2082.616582][ T1858] drm_release+0x2c6/0x360 [ 2082.618159][ T1858] ? __pfx_drm_release+0x10/0x10 [ 2082.619811][ T1858] __fput+0x3ff/0xb50 [ 2082.621082][ T1858] task_work_run+0x150/0x240 [ 2082.622488][ T1858] ? __pfx_task_work_run+0x10/0x10 [ 2082.624092][ T1858] ? rcu_is_watching+0x12/0xc0 [ 2082.625905][ T1858] exit_to_user_mode_loop+0x100/0x4a0 [ 2082.627663][ T1858] ? __do_fast_syscall_32+0x373/0x950 [ 2082.629325][ T1858] __do_fast_syscall_32+0x608/0x950 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2082.631985][ T1858] do_fast_syscall_32+0x32/0x70 [ 2082.633730][ T1858] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2082.635996][ T1858] RIP: 0023:0xf7f07fcc [ 2082.637292][ T1858] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 2082.643069][ T1858] RSP: 002b:00000000ffd17c5c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 2082.645607][ T1858] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 2082.648176][ T1858] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2082.650931][ T1858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2082.653810][ T1858] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 2082.656609][ T1858] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2082.659342][ T1858] [ 2082.661101][ T1858] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2082.663364][ T1858] CPU: 2 UID: 0 PID: 1858 Comm: syz.6.5751 Tainted: G L syzkaller #0 PREEMPT(full) [ 2082.666731][ T1858] Tainted: [L]=SOFTLOCKUP [ 2082.668384][ T1858] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 2082.671523][ T1858] Call Trace: [ 2082.672604][ T1858] [ 2082.673574][ T1858] dump_stack_lvl+0x100/0x190 [ 2082.675061][ T1858] vpanic+0x552/0x970 [ 2082.676362][ T1858] ? __pfx_vpanic+0x10/0x10 [ 2082.677923][ T1858] panic+0xd1/0xe0 [ 2082.679135][ T1858] ? __pfx_panic+0x10/0x10 [ 2082.680542][ T1858] ? check_panic_on_warn+0x1f/0x90 [ 2082.682406][ T1858] check_panic_on_warn.cold+0x19/0x34 [ 2082.684114][ T1858] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 2082.686334][ T1858] __warn.cold+0x191/0x328 [ 2082.687734][ T1858] __report_bug+0x296/0x3d0 [ 2082.689155][ T1858] ? drm_atomic_helper_wait_for_vblanks.part.0+0x738/0x8a0 [ 2082.691445][ T1858] ? __pfx___report_bug+0x10/0x10 [ 2082.692998][ T1858] ? lockdep_hardirqs_on+0x78/0x100 [ 2082.694573][ T1858] reqemu-system-x86_64: hw/ide/core.c:934: ide_dma_cb: Assertion `prep_size >= 0 && prep_size <= n * 512' failed.