last executing test programs: 11m5.22491962s ago: executing program 0 (id=549): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0xf, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getxattr(0x0, 0x0, 0x0, 0x0) 11m4.941888418s ago: executing program 0 (id=559): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x82802, 0x1ec541d9ca5bf1ef) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)=')', 0x1}], 0x1) 11m4.755756158s ago: executing program 0 (id=563): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x109000, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x48, 0x0, 0x0) 11m4.654552304s ago: executing program 0 (id=566): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) r0 = getpid() syz_pidfd_open(r0, 0x0) 11m4.654100754s ago: executing program 0 (id=568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf253400000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000802110000010000140055"], 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x804) 11m4.60360392s ago: executing program 0 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x0) 10m49.553758966s ago: executing program 32 (id=571): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x27, 0x9, 0x70bd2d, 0x25dfdbfe, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040030) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x38, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x38}}, 0x0) 7m36.382171165s ago: executing program 1 (id=4828): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0089364, &(0x7f00000001c0)) 7m36.339683091s ago: executing program 1 (id=4829): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, r1, &(0x7f00000001c0)='m', 0x1, 0x1}]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 7m35.977168925s ago: executing program 1 (id=4838): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0f57e611c8da8af32ed98a22d3e0ac8492df23752344507178c06d80db05e73f89c0fcfd02d5c82d25ecd9199a85cb38bbf4295c1f16c4d6fcec69267741c40c", 0x13}, 0x48, r0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x55) keyctl$unlink(0x9, r1, r0) 7m35.868469013s ago: executing program 1 (id=4839): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x9901) move_mount(r0, &(0x7f0000000480)='./file0/file0\x00', r0, &(0x7f00000003c0)='./file0/../file0\x00', 0x161) 7m35.849072133s ago: executing program 1 (id=4841): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r1, &(0x7f0000000340), 0x2000011a) splice(r1, 0x0, r0, 0x0, 0x4ff9c, 0x0) 7m35.540570007s ago: executing program 1 (id=4850): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x2001, 0x4, 0x5, {0x200004, 0x1, 0x5, 0xa, 0x0, 0x9, 0x0, 0x5, 0x9, 0x3, 0x4, 0x60b, 0x71, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 7m35.443106617s ago: executing program 33 (id=4850): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r2, r3, 0x3, 0x2001, 0x4, 0x5, {0x200004, 0x1, 0x5, 0xa, 0x0, 0x9, 0x0, 0x5, 0x9, 0x3, 0x4, 0x60b, 0x71, 0xfffb, "6f4f1b1330d057b30bd15586b7445443c528a97436419c2cd5ae7297dceeb0be"}}) 7m30.801395328s ago: executing program 2 (id=4899): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) syz_open_dev$loop(0x0, 0x2b, 0x400400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 7m30.280975017s ago: executing program 2 (id=4906): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0xc0011029, 0x0, 0x400006}]}) 7m30.115827962s ago: executing program 2 (id=4908): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x4a000000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88) 7m29.16800162s ago: executing program 2 (id=4934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @loopback}, 0x74ec}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x8, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d) 7m28.335963177s ago: executing program 2 (id=4938): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) ioctl$CEC_RECEIVE(r0, 0xc0386106, &(0x7f0000000140)={0x3, 0xc, 0x6, 0x5c7, 0xb, 0x2, "00e86c6981c33e572e5b514eb079c119", 0x75, 0x87, 0x80, 0x5, 0x3, 0x7, 0x5}) 7m28.251210199s ago: executing program 2 (id=4940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) 7m13.250278753s ago: executing program 34 (id=4940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) 6m8.154703798s ago: executing program 3 (id=6223): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x9, 0x0) 6m8.152599974s ago: executing program 3 (id=6224): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1708}], 0x1, 0x0, 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 6m7.219471291s ago: executing program 3 (id=6240): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) mlock(&(0x7f000040a000/0x4000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m7.042905749s ago: executing program 3 (id=6245): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 6m6.978944202s ago: executing program 3 (id=6246): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='veth0\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet(r0, &(0x7f0000007980)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000080)="ea", 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e23, @rand_addr=0x64010100}, 0x10, &(0x7f0000000c00)=[{&(0x7f00000006c0)='G', 0x1}], 0x1}}], 0x2, 0x5) 6m6.54098573s ago: executing program 3 (id=6252): r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt(r0, 0x28, 0x6, 0x0, &(0x7f0000000040)) 6m6.436058752s ago: executing program 35 (id=6252): r0 = socket$vsock_stream(0x28, 0x1, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt(r0, 0x28, 0x6, 0x0, &(0x7f0000000040)) 3m31.603774075s ago: executing program 5 (id=8511): setgid(0xee00) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 3m31.529989779s ago: executing program 5 (id=8514): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x9, 0x3, 0x6}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x0) 3m31.420839848s ago: executing program 5 (id=8515): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000200)='./file1\x00', 0x20000, 0x40) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 3m31.361872935s ago: executing program 5 (id=8517): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x800) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) 3m31.268650897s ago: executing program 5 (id=8518): prctl$PR_SET_SECUREBITS(0x1c, 0x4) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) setresuid(0x0, 0xee00, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) 3m30.928786862s ago: executing program 5 (id=8522): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) preadv(r0, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x3edf, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000), &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="2600000011003f20000000bf8a9d719797efcee3130000000d39036892f3f77156c2aea30a4b", 0x26) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 3m30.851467809s ago: executing program 36 (id=8522): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) preadv(r0, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x1000000, 0x0) r1 = syz_io_uring_setup(0x3edf, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}, &(0x7f0000002000), &(0x7f0000ffd000), &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000240)="2600000011003f20000000bf8a9d719797efcee3130000000d39036892f3f77156c2aea30a4b", 0x26) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 2.780267632s ago: executing program 7 (id=10681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.696835462s ago: executing program 7 (id=10683): ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00`\x00'/28], 0x50) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 1.652965025s ago: executing program 6 (id=10693): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000180)) 1.59517051s ago: executing program 8 (id=10694): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x24000000) 1.544380915s ago: executing program 8 (id=10695): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 1.54373109s ago: executing program 7 (id=10696): syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a"], 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x926, 0x3333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0xa0, 0xc, "", [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x836, 0xe, 0x1, {0x22, 0xa07}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x48, 0x8}}}}}]}}]}}, 0x0) close_range(r0, r1, 0x0) syz_usb_connect$uac1(0x2, 0xcf, 0x0, 0x0) 1.485018568s ago: executing program 8 (id=10697): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) read(r1, &(0x7f00000002c0)=""/153, 0x99) 1.153603205s ago: executing program 8 (id=10698): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000200)=0xfe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0xf520a000) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0}) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/79, 0x4f}], 0x1) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0x1044) 1.06540714s ago: executing program 8 (id=10700): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) 1.065094876s ago: executing program 4 (id=10701): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f00000006c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000005c0)={@flat=@binder={0x73622a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x190b, 0x3}, @fd}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x1000000000000, 0x0}) 1.046452494s ago: executing program 4 (id=10702): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 935.44095ms ago: executing program 7 (id=10703): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 916.874793ms ago: executing program 4 (id=10704): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) mkdirat(r2, &(0x7f0000000100)='./file0\x00', 0x2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0) 850.153885ms ago: executing program 7 (id=10705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) 793.433919ms ago: executing program 4 (id=10706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 792.978603ms ago: executing program 7 (id=10707): unshare(0x6e000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) unshare(0x0) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_usb_connect$uac1(0x3, 0xa2, 0x0, 0x0) 786.863823ms ago: executing program 4 (id=10708): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000c, 0x31, 0xffffffffffffffff, 0xfb053000) 739.619708ms ago: executing program 6 (id=10709): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x8000000, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) 610.506487ms ago: executing program 6 (id=10710): syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) copy_file_range(r1, 0x0, r1, &(0x7f00000004c0)=0x100, 0x9, 0x0) 504.961977ms ago: executing program 4 (id=10711): io_setup(0x3ff, &(0x7f0000000500)=0x0) io_pgetevents(r0, 0x6, 0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0x8) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = io_uring_setup(0x1a, &(0x7f0000000480)={0x0, 0xc788, 0x1000, 0x0, 0x212}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000002ac0)={0x8, r2, 0x26, {0xff3a39c, 0x5}, 0x9}, 0x1) fchdir(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000fcffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a0850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 348.706646ms ago: executing program 6 (id=10712): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='\t', 0x1}], 0x1}}], 0x1, 0x24048094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) 195.48454ms ago: executing program 6 (id=10713): r0 = socket$inet6(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000340)='%\x00#D)\xdeA\x02\n,\x06\x89\x96\x8f\xd3F\x9fe\xf7\x9f\x9f\x0f\xeb\v\xc3\x86c\xe7\xc6\x88\xce%0\x05\x9d4M\tH\x89m\x14>4\xe4\xb4m\fF\xaf\x9d&\x05\xcf\xc1HZ\x9a\xa3X\xaa;t\x12\'\xf5\x18PvY\xbe\xd1J6\xd9\xa6\xec\xde\xd4\xb9I5\x1a\xc6S\x14\x18]K\xe0\xef\x97Vv\xbe\x8a\xffG\xc79\x9d\x19\x10\x8c\xb2\xe0` >D\x11*V\xb9\xcfi\x03FnU\t|b\xbe\x10\xc4\xd4\x01\xb2=\x11%\xd0`-\xe2\x1d\x8e\x7f\xd1\x15\x03\xa5(\x1e\x05H\xe8\'[0\xc2\vO\xdc\xf8?QT[8:f\xe9f\x9b\xd3\xe2:\xa2b\xa3\x89\n\x9d\n\xe2\xb7\xf6\xa6\xbe\x82]YF\x90\x8e\xde\xbd\xb1w\xf7\x15\xed\xd8\xea\xa8\xef\xfbM\x82oX\x80~\xe3\x1fH\xf4\x99\xa4\xd2E\'@\xab\x13\x94\xc2\xef\x81R\xbd\xaah\xd2D\xce\x1f\'\x8b9\xa5\x88\xf1C\x1a\a!\x95\x165RS1\x9e[\xf4\xa9v\xfah\xb7\xd8\x9c&\x85\xcbs\xad\x14\xf5\xd5\xd7M\x06\x15\x9d\xa2\xfb\xfc\x9c\x94`x\xdfma\xa6\x04\x06\xcb\xeb\vC{b\xceW3l\x8a\x9cO\"\xb5\xeb#\x03k\xe4\x99\xeb\xe3\x9d\xba\xd0\xb5\x0fh\xf2\xdc\x01\x81\xb48\xea\xaf\xd0*\x9c\x1d\xba,;\x17\xfb\x94M1\xea\x1f\xbf', 0x5) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 64.676574ms ago: executing program 6 (id=10714): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r5, 0x0, 0x80, 0x8) vmsplice(r4, &(0x7f0000008ac0)=[{&(0x7f0000007a80)="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", 0x1000}], 0x1, 0x0) write(r2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) 0s ago: executing program 8 (id=10715): socket$nl_generic(0x10, 0x3, 0x10) r0 = io_uring_setup(0xf08, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/180, 0xb4}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) kernel console output (not intermixed with test programs): 479] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 578.747490][ T1479] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 578.747539][ T1479] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 578.747555][ T1479] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 578.747590][ T1479] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 578.764793][ T1479] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.769213][ T1479] usb 13-1: config 0 descriptor?? [ 578.977813][ T1479] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 579.169227][T27692] sit0 speed is unknown, defaulting to 1000 [ 579.199716][ T845] usb 13-1: USB disconnect, device number 4 [ 579.208552][ T845] usblp0: removed [ 579.254658][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.258549][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.262571][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.454430][ C1] net_ratelimit: 1 callbacks suppressed [ 580.454459][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 581.494462][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 582.382164][T27772] netlink: 'syz.7.9130': attribute type 1 has an invalid length. [ 582.464738][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.468606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.545243][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 583.574418][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 584.614471][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 584.700719][ T42] audit: type=1326 audit(1782889171.287:14417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27784 comm="syz.8.9134" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x0 [ 585.575282][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.579100][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.582899][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.656927][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 585.976089][T27772] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 586.062289][T27785] sit0 speed is unknown, defaulting to 1000 [ 586.132650][T27800] fuse: fd is not a fuse device [ 586.357097][T27808] fuse: fd is not a fuse device [ 586.370883][T27810] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9142'. [ 586.565607][T27820] sit0 speed is unknown, defaulting to 1000 [ 586.704455][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 586.721479][T27826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9148'. [ 587.249768][T27841] bond4: left promiscuous mode [ 587.252080][T27841] gre1: left promiscuous mode [ 587.256124][T27841] bond5: left promiscuous mode [ 587.258502][T27841] vti0: left promiscuous mode [ 587.283111][T27841] gretap1: left allmulticast mode [ 587.734450][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 588.774405][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 588.935414][T22337] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 589.314200][T27885] netlink: 'syz.7.9172': attribute type 4 has an invalid length. [ 589.824423][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 590.047124][T27905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9181'. [ 590.131741][T27908] fuse: fd is not a fuse device [ 590.167589][T27910] netlink: 'syz.4.9183': attribute type 1 has an invalid length. [ 590.189895][T27910] bond7: entered promiscuous mode [ 590.193456][T27910] 8021q: adding VLAN 0 to HW filter on device bond7 [ 590.220601][T27910] 8021q: adding VLAN 0 to HW filter on device bond7 [ 590.224125][T27910] bond7: (slave gre6): The slave device specified does not support setting the MAC address [ 590.229014][T27910] bond7: (slave gre6): Setting fail_over_mac to active for active-backup mode [ 590.239324][T27910] bond7: (slave gre6): making interface the new active one [ 590.242489][T27910] gre6: entered promiscuous mode [ 590.248612][T27910] bond7: (slave gre6): Enslaving as an active interface with an up link [ 590.248913][T27916] netlink: 'syz.6.9184': attribute type 11 has an invalid length. [ 590.261856][T27910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9183'. [ 590.304177][T27910] bond7 (unregistering): (slave gre6): Releasing backup interface [ 590.307909][T27910] gre6: left promiscuous mode [ 590.336291][T27910] bond7 (unregistering): Released all slaves [ 590.466176][T27927] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9194'. [ 590.615204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.619990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.624181][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.627387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.854525][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 590.897169][T27942] sit0 speed is unknown, defaulting to 1000 [ 590.967303][T27943] dvmrp8: entered allmulticast mode [ 591.047929][T27945] tipc: Started in network mode [ 591.050450][T27945] tipc: Node identity 2e7a14ecce36, cluster identity 4711 [ 591.056975][T27945] tipc: Enabled bearer , priority 0 [ 591.116755][T27945] syzkaller0: entered promiscuous mode [ 591.119864][T27945] syzkaller0: entered allmulticast mode [ 591.123299][T27945] tipc: Resetting bearer [ 591.163166][T27944] tipc: Resetting bearer [ 591.904455][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 592.787760][ T1162] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 592.944519][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 593.974451][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 595.024583][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 595.112190][T27944] tipc: Disabling bearer [ 595.126064][T27947] sit0 speed is unknown, defaulting to 1000 [ 595.137207][ T1479] tipc: Node number set to 3763082476 [ 595.261771][ T42] audit: type=1326 audit(1782889181.847:14418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27957 comm="syz.8.9199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 595.275305][ T42] audit: type=1326 audit(1782889181.847:14419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27957 comm="syz.8.9199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 595.283134][ T42] audit: type=1326 audit(1782889181.847:14420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27957 comm="syz.8.9199" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf708efec code=0x7ffc0000 [ 595.291893][ T42] audit: type=1326 audit(1782889181.847:14421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27957 comm="syz.8.9199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 595.299013][ T42] audit: type=1326 audit(1782889181.847:14422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27957 comm="syz.8.9199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 595.307011][ T42] audit: type=1326 audit(1782889181.857:14423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27957 comm="syz.8.9199" exe="/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf708efec code=0x7ffc0000 [ 595.314924][ T42] audit: type=1326 audit(1782889181.857:14424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27957 comm="syz.8.9199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 595.323238][ T42] audit: type=1326 audit(1782889181.857:14425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27957 comm="syz.8.9199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 595.332533][ T42] audit: type=1326 audit(1782889181.867:14426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27957 comm="syz.8.9199" exe="/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf708efec code=0x7ffc0000 [ 595.341913][ T42] audit: type=1326 audit(1782889181.867:14427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27957 comm="syz.8.9199" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 595.894823][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.899136][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.902867][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.054401][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 596.933059][T27966] kexec: Could not allocate control_code_buffer [ 597.094439][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 597.260513][T27998] sit0 speed is unknown, defaulting to 1000 [ 597.719405][T28006] netlink: 'syz.4.9215': attribute type 4 has an invalid length. [ 598.134449][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 598.333445][T28032] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9224'. [ 598.812673][T28060] fuse: fd is not a fuse device [ 598.861309][T28062] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 598.914558][ T5889] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 598.933501][T28067] overlayfs: failed to clone upperpath [ 599.087449][ T5889] usb 13-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 599.091269][ T5889] usb 13-1: config 0 interface 0 has no altsetting 0 [ 599.101237][ T5889] usb 13-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 599.104639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.105892][ T5889] usb 13-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 599.107971][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.111458][ T5889] usb 13-1: Product: syz [ 599.118059][ T5889] usb 13-1: Manufacturer: syz [ 599.119789][ T5889] usb 13-1: SerialNumber: syz [ 599.123259][ T5889] usb 13-1: config 0 descriptor?? [ 599.129690][T28054] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 599.139974][ T5889] usb 13-1: selecting invalid altsetting 0 [ 599.177174][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 599.373425][ T5889] usb 13-1: USB disconnect, device number 5 [ 599.454216][T28090] fuse: fd is not a fuse device [ 599.510264][T28071] cgroup: fork rejected by pids controller in /syz4 [ 599.992297][T28176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9250'. [ 600.214490][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 600.325769][T28189] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9255'. [ 601.254412][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 601.264231][T28203] fuse: fd is not a fuse device [ 601.315821][T28205] sit0 speed is unknown, defaulting to 1000 [ 601.967531][T28227] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9268'. [ 602.294526][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 602.294746][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.302163][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.305929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.533057][T28252] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9271'. [ 603.020884][T28267] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9274'. [ 603.334441][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 603.712499][T28289] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9284'. [ 604.113366][T28302] netlink: 'syz.4.9290': attribute type 1 has an invalid length. [ 604.117649][T28302] netlink: 'syz.4.9290': attribute type 4 has an invalid length. [ 604.121334][T28302] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.9290'. [ 604.229147][T28311] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 604.236053][T28309] sit0 speed is unknown, defaulting to 1000 [ 604.308745][T28315] dvmrp8: entered allmulticast mode [ 604.379654][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 604.419105][T28313] sit0 speed is unknown, defaulting to 1000 [ 604.721404][T28324] sd 0:0:0:0: PR command failed: 1026 [ 604.725604][T28324] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 604.729894][T28324] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 604.750307][T28332] fuse: fd is not a fuse device [ 604.823081][T28335] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9303'. [ 605.061752][T28352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9308'. [ 605.119154][T28354] netlink: 'syz.7.9309': attribute type 4 has an invalid length. [ 605.170176][T28358] netlink: 'syz.7.9309': attribute type 4 has an invalid length. [ 605.297344][T28360] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 605.358239][T28362] sd 0:0:0:0: PR command failed: 1026 [ 605.363377][T28362] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 605.371809][T28362] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 605.414434][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 605.469554][T28372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9315'. [ 605.627583][T28374] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9318'. [ 605.915560][T28389] netlink: 2024 bytes leftover after parsing attributes in process `syz.8.9321'. [ 605.919627][T28389] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9321'. [ 606.308976][T28396] netlink: 'syz.7.9323': attribute type 1 has an invalid length. [ 606.341244][T28396] bond7: entered promiscuous mode [ 606.343314][T28396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 606.368541][T28396] 8021q: adding VLAN 0 to HW filter on device bond7 [ 606.372332][T28396] bond7: (slave gre2): The slave device specified does not support setting the MAC address [ 606.378278][T28396] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 606.408630][T28396] bond7: (slave gre2): making interface the new active one [ 606.418376][T28396] gre2: entered promiscuous mode [ 606.419025][T28401] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9323'. [ 606.429171][T28396] bond7: (slave gre2): Enslaving as an active interface with an up link [ 606.464452][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 606.472956][T28401] bond7 (unregistering): (slave gre2): Releasing backup interface [ 606.484110][T28401] gre2: left promiscuous mode [ 606.500469][T28401] bond7 (unregistering): Released all slaves [ 606.695054][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.699295][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.703256][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.494554][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 607.945862][T28405] fuse: fd is not a fuse device [ 607.965990][T28408] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9327'. [ 608.044373][T28403] kexec: Could not allocate control_code_buffer [ 608.051475][T28411] sit0 speed is unknown, defaulting to 1000 [ 608.127310][T28417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.232609][T28427] netlink: 'syz.8.9333': attribute type 1 has an invalid length. [ 608.251668][T28427] bond3: entered promiscuous mode [ 608.255626][T28427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 608.256552][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 608.256576][ T42] audit: type=1326 audit(1782889194.847:14443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28410 comm="syz.6.9328" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd8fec code=0x0 [ 608.300325][T28427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 608.303899][T28427] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 608.308416][T28427] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 608.322002][T28427] bond3: (slave gre1): making interface the new active one [ 608.324455][T28427] gre1: entered promiscuous mode [ 608.327972][T28427] bond3: (slave gre1): Enslaving as an active interface with an up link [ 608.392382][T28427] bond3 (unregistering): (slave gre1): Releasing backup interface [ 608.396319][T28427] gre1: left promiscuous mode [ 608.401242][T28427] bond3 (unregistering): Released all slaves [ 608.534379][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 608.620196][T28435] netlink: 'syz.8.9336': attribute type 1 has an invalid length. [ 608.645832][T28435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 608.698264][T28435] bond3: (slave gretap1): making interface the new active one [ 608.706125][T28435] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 609.016804][ T1479] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 609.194690][ T1479] usb 13-1: Using ep0 maxpacket: 8 [ 609.199102][ T1479] usb 13-1: config index 0 descriptor too short (expected 5924, got 36) [ 609.204453][ T1479] usb 13-1: config 250 has an invalid interface number: 228 but max is -1 [ 609.209373][ T1479] usb 13-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 609.215332][ T1479] usb 13-1: config 250 has no interface number 0 [ 609.223748][ T1479] usb 13-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 609.229369][ T1479] usb 13-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 609.236574][ T1479] usb 13-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 609.243247][ T1479] usb 13-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 609.251116][ T1479] usb 13-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 609.259364][ T1479] usb 13-1: config 250 interface 228 has no altsetting 0 [ 609.265835][ T1479] usb 13-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 609.271783][ T1479] usb 13-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 609.280132][ T1479] usb 13-1: Product: syz [ 609.281818][ T1479] usb 13-1: SerialNumber: syz [ 609.289281][ T1479] hub 13-1:250.228: bad descriptor, ignoring hub [ 609.297896][ T1479] hub 13-1:250.228: probe with driver hub failed with error -5 [ 609.506090][T28450] fuse: fd is not a fuse device [ 609.510481][ T1479] usblp 13-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 609.574445][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 609.877530][T28465] __nla_validate_parse: 1 callbacks suppressed [ 609.877553][T28465] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9348'. [ 609.974755][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.980100][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.413296][T28438] usb 13-1: reset high-speed USB device number 6 using dummy_hcd [ 610.836733][T28445] kexec: Could not allocate control_code_buffer [ 611.096343][T28481] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9353'. [ 611.242740][T28485] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 611.279962][T28493] fuse: fd is not a fuse device [ 611.324444][T28494] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.9357'. [ 611.329626][T28494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9357'. [ 611.336929][T13891] usb 13-1: USB disconnect, device number 6 [ 611.345784][T13891] usblp0: removed [ 611.654577][ C1] net_ratelimit: 1 callbacks suppressed [ 611.654607][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 612.694555][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 613.174666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.178090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.181758][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.353705][T28544] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9378'. [ 613.734465][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 614.702048][T28561] sd 0:0:0:0: PR command failed: 1026 [ 614.704213][T28561] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 614.707042][T28561] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 614.774475][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 614.908914][T28578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9389'. [ 615.178420][T28586] netlink: 'syz.6.9393': attribute type 1 has an invalid length. [ 615.209990][T28586] 8021q: adding VLAN 0 to HW filter on device bond5 [ 615.223081][T28589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9392'. [ 615.235963][T28586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9393'. [ 615.271168][T28586] bond5: (slave geneve2): making interface the new active one [ 615.276743][T28586] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 615.279953][ T5792] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.289471][ T5792] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.299497][ T5792] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.308483][ T5792] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.591387][T28605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9400'. [ 615.815056][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 616.289268][ T845] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 616.438561][ T845] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 616.447636][ T845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.453563][ T845] usb 9-1: Product: syz [ 616.458325][ T845] usb 9-1: Manufacturer: syz [ 616.463080][ T845] usb 9-1: SerialNumber: syz [ 616.854427][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 616.868964][ T845] rtl8150 9-1:1.0: couldn't reset the device [ 616.873127][ T845] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 616.892664][ T845] usb 9-1: USB disconnect, device number 34 [ 617.586525][T28671] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9425'. [ 617.601614][T28667] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 617.894456][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 618.295681][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.299977][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.303893][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.306779][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.934577][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 619.142032][T28729] overlayfs: failed to clone upperpath [ 619.251732][T28735] netlink: 'syz.6.9450': attribute type 83 has an invalid length. [ 619.454521][T13891] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 619.614429][T13891] usb 13-1: Using ep0 maxpacket: 8 [ 619.617930][T13891] usb 13-1: config 0 has an invalid interface number: 55 but max is 0 [ 619.620639][T13891] usb 13-1: config 0 has no interface number 0 [ 619.623242][T13891] usb 13-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.628489][T13891] usb 13-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 619.632265][T13891] usb 13-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 619.636699][T13891] usb 13-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 619.641996][T13891] usb 13-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 619.647695][T13891] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.656071][T13891] usb 13-1: config 0 descriptor?? [ 619.661659][T13891] ldusb 13-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 619.736118][ T1479] page_pool_release_retry() stalled pool shutdown: id 241, 1 inflight 60 sec [ 619.931731][ T845] usb 13-1: USB disconnect, device number 7 [ 619.934331][ C2] ldusb 13-1:0.55: usb_submit_urb failed (-19) [ 619.934583][T28733] ldusb 13-1:0.55: Couldn't submit interrupt_out_urb -19 [ 619.952751][ T845] ldusb 13-1:0.55: LD USB Device #0 now disconnected [ 619.974466][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 620.167385][T28740] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9452'. [ 620.602428][T28753] ref_ctr increment failed for inode: 0x10b1 offset: 0x7 ref_ctr_offset: 0x80002 of mm: 0xffff888050599980 [ 621.014489][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 621.585648][T22378] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 621.758321][T28778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9469'. [ 621.858247][T28783] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9471'. [ 622.054570][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 622.661988][T28797] fuse: fd is not a fuse device [ 622.775699][T28799] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 622.863534][T28804] fuse: fd is not a fuse device [ 623.094643][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 623.602123][ T42] audit: type=1326 audit(1782889210.187:14444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.8.9489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 623.619060][ T42] audit: type=1326 audit(1782889210.187:14445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.8.9489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 623.620546][T28812] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9481'. [ 623.622413][T28809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9480'. [ 623.630640][ T42] audit: type=1326 audit(1782889210.187:14446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.8.9489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 623.630697][ T42] audit: type=1326 audit(1782889210.187:14447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.8.9489" exe="/syz-executor" sig=0 arch=40000003 syscall=375 compat=1 ip=0xf708efec code=0x7ffc0000 [ 623.630737][ T42] audit: type=1326 audit(1782889210.187:14448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.8.9489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 623.630777][ T42] audit: type=1326 audit(1782889210.187:14449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.8.9489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 623.630816][ T42] audit: type=1326 audit(1782889210.187:14450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.8.9489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 623.630936][ T42] audit: type=1326 audit(1782889210.187:14451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.8.9489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 623.630978][ T42] audit: type=1326 audit(1782889210.187:14452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.8.9489" exe="/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf708efec code=0x7ffc0000 [ 623.631018][ T42] audit: type=1326 audit(1782889210.187:14453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28811 comm="syz.8.9489" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 623.974515][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.978077][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.982240][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.987230][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.138276][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 624.170269][T28836] fuse: fd is not a fuse device [ 625.184495][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 625.806218][T28875] sit0 speed is unknown, defaulting to 1000 [ 625.936159][T28881] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9502'. [ 626.057972][ T72] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 626.214436][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 626.662558][T28903] tipc: Started in network mode [ 626.677500][T28903] tipc: Node identity 2007ff, cluster identity 4711 [ 626.697446][T28903] tipc: Node number set to 2099199 [ 626.893758][T28909] sit0 speed is unknown, defaulting to 1000 [ 626.900557][T28907] sd 0:0:0:0: PR command failed: 1026 [ 626.912270][T28907] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 626.932641][T28907] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 627.254457][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 627.650514][T28924] sit0 speed is unknown, defaulting to 1000 [ 627.742691][T28930] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9523'. [ 627.770546][T28930] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9523'. [ 628.284062][T28951] overlayfs: failed to resolve './cgroup': -2 [ 628.304521][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 628.870378][T28956] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9531'. [ 629.126052][T28967] netlink: 'syz.7.9534': attribute type 1 has an invalid length. [ 629.159792][T28967] 8021q: adding VLAN 0 to HW filter on device bond7 [ 629.174673][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.177532][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.180333][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.183911][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.187664][T28967] bond7: (slave geneve3): making interface the new active one [ 629.192557][T28967] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 629.196342][T19009] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.200995][T19009] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.204573][T19009] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.207452][T19009] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.260678][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.344585][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 630.231148][T28990] fuse: fd is not a fuse device [ 630.292582][T28992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9545'. [ 630.302529][T28992] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9545'. [ 630.374588][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 630.396695][T28994] overlayfs: failed to clone upperpath [ 630.458960][T28998] netlink: 'syz.4.9548': attribute type 1 has an invalid length. [ 630.475918][T28998] 8021q: adding VLAN 0 to HW filter on device bond7 [ 630.526066][T28998] 8021q: adding VLAN 0 to HW filter on device bond7 [ 630.528976][T28998] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 630.538295][T28998] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 630.563175][T29002] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 630.586598][T29002] bond7: (slave wlan1): Enslaving as an active interface with a down link [ 630.962664][T29018] sit0 speed is unknown, defaulting to 1000 [ 631.229519][T29028] overlay: filesystem on ./bus not supported [ 631.328623][T29035] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9561'. [ 631.372750][T29035] syz_tun (unregistering): left allmulticast mode [ 631.376316][T29035] syz_tun (unregistering): left promiscuous mode [ 631.379277][T29035] bridge0: port 3(syz_tun) entered disabled state [ 631.414427][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 631.623473][T29046] usb usb1: check_ctrlrecip: process 29046 (syz.4.9565) requesting ep 01 but needs 81 [ 632.432790][T29062] sit0 speed is unknown, defaulting to 1000 [ 632.454588][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 632.704992][T29077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9578'. [ 632.794375][T29074] syzkaller1: entered promiscuous mode [ 632.797815][T29074] syzkaller1: entered allmulticast mode [ 633.103444][T29094] fuse: fd is not a fuse device [ 633.317612][T29103] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9589'. [ 633.321058][T29103] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9589'. [ 633.330314][ T5792] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.333403][ T5792] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.337250][ T5792] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.354456][ T5792] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 633.504387][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 633.719953][T29106] sit0 speed is unknown, defaulting to 1000 [ 634.534456][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 634.714539][T13891] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 634.874512][T13891] usb 13-1: Using ep0 maxpacket: 32 [ 634.879585][T13891] usb 13-1: config index 0 descriptor too short (expected 29220, got 36) [ 634.883709][T13891] usb 13-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 634.891212][T13891] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 634.895171][T13891] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 634.898467][T13891] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 634.901737][T13891] usb 13-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 634.912298][T13891] usb 13-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 634.916151][T13891] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.921550][T13891] usb 13-1: config 0 descriptor?? [ 634.936444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.940401][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.943825][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.947653][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.148641][T13891] usblp 13-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 635.379756][T13891] usb 13-1: USB disconnect, device number 8 [ 635.396911][T13891] usblp0: removed [ 635.574408][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 636.624444][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 636.662177][T29177] netlink: 'syz.7.9614': attribute type 1 has an invalid length. [ 636.688002][T29177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 636.751563][T29177] 8021q: adding VLAN 0 to HW filter on device bond8 [ 636.756294][T29177] bond8: (slave wireguard0): The slave device specified does not support setting the MAC address [ 636.762100][T29177] bond8: (slave wireguard0): Error -95 calling set_mac_address [ 636.792562][T29180] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 636.796363][T29180] bond8: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 637.657526][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 638.078211][T29218] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9631'. [ 638.227691][T29222] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9632'. [ 638.507636][T29229] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9635'. [ 638.515100][T29231] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9636'. [ 638.528574][T29231] bridge_slave_1: left allmulticast mode [ 638.532422][T29231] bridge_slave_1: left promiscuous mode [ 638.535886][T29231] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.542181][T29231] bridge_slave_0: left allmulticast mode [ 638.545518][T29231] bridge_slave_0: left promiscuous mode [ 638.548527][T29231] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.694442][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 639.596097][T29261] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9643'. [ 639.734582][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 639.960749][ T42] kauditd_printk_skb: 389 callbacks suppressed [ 639.960773][ T42] audit: type=1326 audit(1782889226.547:14843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29267 comm="syz.8.9645" exe="/syz-executor" sig=31 arch=40000003 syscall=20 compat=1 ip=0xf708efec code=0x0 [ 640.028610][ T42] audit: type=1326 audit(1782889226.617:14844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29266 comm="syz.6.9647" exe="/syz-executor" sig=9 arch=40000003 syscall=20 compat=1 ip=0xf7fd8fec code=0x0 [ 640.695601][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.699586][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.704142][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.708126][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.784383][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 641.648993][T29293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9655'. [ 641.742436][T29299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9658'. [ 641.812166][T29303] netlink: 20 bytes leftover after parsing attributes in process `syz.8.9659'. [ 641.824411][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 641.923010][T29311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9665'. [ 641.932096][T29311] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9665'. [ 642.247505][T29325] tipc: Failed to remove unknown binding: 66,0,0/2099199:336410515/336410516 [ 642.854442][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 643.173620][T29358] __nla_validate_parse: 5 callbacks suppressed [ 643.173642][T29358] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9682'. [ 643.182936][T29358] bridge_slave_1: left allmulticast mode [ 643.185156][T29358] bridge_slave_1: left promiscuous mode [ 643.187250][T29358] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.198859][T29358] bridge_slave_0: left allmulticast mode [ 643.201439][T29358] bridge_slave_0: left promiscuous mode [ 643.204186][T29358] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.894472][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 643.903610][T29390] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9691'. [ 644.558636][T29410] overlayfs: failed to clone lowerpath [ 644.944487][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 645.713809][T29452] tipc: Failed to remove unknown binding: 66,1,1/2099199:2910212825/2910212827 [ 645.984467][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 646.209250][T29460] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9720'. [ 646.319609][T29462] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9721'. [ 646.455155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.461144][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.465112][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.468516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.534498][ T64] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 646.540564][T29451] tipc: Failed to remove unknown binding: 66,1,1/2099199:2910212825/2910212827 [ 646.545816][T29451] tipc: Failed to remove unknown binding: 66,1,1/2099199:2910212825/2910212827 [ 646.622782][T29470] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9724'. [ 647.014467][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 647.276741][T29490] fuse: fd is not a fuse device [ 647.329230][T29492] fuse: fd is not a fuse device [ 648.059689][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 648.403810][T29520] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9743'. [ 649.106476][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 649.236829][T29542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.240443][T29542] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.246682][T29542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.333520][T29542] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 649.729170][T29542] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 649.742990][T29556] netlink: 'syz.6.9754': attribute type 2 has an invalid length. [ 649.746375][T29556] netlink: 'syz.6.9754': attribute type 2 has an invalid length. [ 649.836989][T29542] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 649.845495][T29542] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 649.919746][T29542] veth1_vlan: left promiscuous mode [ 649.933482][T29542] veth0_vlan: left promiscuous mode [ 649.943369][T29542] veth0_vlan: entered promiscuous mode [ 649.958763][T29542] veth1_vlan: entered promiscuous mode [ 649.985257][T29542] veth1_macvtap: left promiscuous mode [ 649.992480][T29542] veth0_macvtap: left promiscuous mode [ 649.999209][T29567] fuse: fd is not a fuse device [ 649.999958][T29542] veth0_macvtap: entered promiscuous mode [ 650.011945][T29542] veth1_macvtap: entered promiscuous mode [ 650.021641][T29542] mac80211_hwsim hwsim17 wlan1: left promiscuous mode [ 650.033815][T29542] 8021q: adding VLAN 0 to HW filter on device eth0 [ 650.039815][T29542] 8021q: adding VLAN 0 to HW filter on device eth1 [ 650.044758][T29542] 8021q: adding VLAN 0 to HW filter on device eth2 [ 650.050699][T29542] 8021q: adding VLAN 0 to HW filter on device eth3 [ 650.059720][T29542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 650.071566][T29542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 650.081369][T29542] 8021q: adding VLAN 0 to HW filter on device bond3 [ 650.126314][T29542] 8021q: adding VLAN 0 to HW filter on device bond4 [ 650.132948][T29542] 8021q: adding VLAN 0 to HW filter on device bond5 [ 650.144801][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 650.167791][T29542] 8021q: adding VLAN 0 to HW filter on device bond6 [ 650.228305][T29542] 8021q: adding VLAN 0 to HW filter on device bond8 [ 650.367230][T29569] tipc: New replicast peer: 255.255.255.255 [ 650.377023][T29569] tipc: Enabled bearer , priority 10 [ 650.379782][ T5826] netdevsim netdevsim7 eth0: set [1, 1] type 2 family 0 port 47383 - 0 [ 650.390564][ T5826] netdevsim netdevsim7 eth1: set [1, 1] type 2 family 0 port 47383 - 0 [ 650.397251][T29587] overlayfs: failed to clone upperpath [ 650.408000][ T5826] netdevsim netdevsim7 eth2: set [1, 1] type 2 family 0 port 47383 - 0 [ 650.410084][T29585] netlink: 'syz.7.9768': attribute type 19 has an invalid length. [ 650.412025][ T5826] netdevsim netdevsim7 eth3: set [1, 1] type 2 family 0 port 47383 - 0 [ 650.428601][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 650.432244][ T12] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 650.454942][T22194] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 650.509241][T29594] netlink: 'syz.4.9772': attribute type 2 has an invalid length. [ 650.555978][T29594] : entered promiscuous mode [ 650.845344][T22194] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 650.849770][T29617] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9780'. [ 651.016981][T29623] fuse: fd is not a fuse device [ 651.174641][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 651.288619][T29628] fuse: fd is not a fuse device [ 651.338515][T22194] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 651.384164][T29632] tipc: Started in network mode [ 651.386972][T29632] tipc: Node identity 84e, cluster identity 4711 [ 651.389634][T29632] tipc: Node number set to 2126 [ 651.515763][T29637] IPVS: length: 218 != 24 [ 652.121694][T29654] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9794'. [ 652.224635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.228459][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.231571][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.234928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.237993][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 652.540288][T29668] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9800'. [ 652.648755][T29672] overlayfs: failed to clone upperpath [ 652.720783][T29677] netlink: 1272 bytes leftover after parsing attributes in process `syz.7.9802'. [ 652.844558][ T845] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 652.994357][ T845] usb 13-1: Using ep0 maxpacket: 8 [ 652.998132][ T845] usb 13-1: config 1 interface 0 altsetting 3 bulk endpoint 0x1 has invalid maxpacket 16 [ 653.002407][ T845] usb 13-1: config 1 interface 0 has no altsetting 0 [ 653.011219][ T845] usb 13-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 653.016956][ T845] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.020313][ T845] usb 13-1: Product: syz [ 653.022211][ T845] usb 13-1: Manufacturer: syz [ 653.023898][ T845] usb 13-1: SerialNumber: syz [ 653.029762][T29669] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 653.264482][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 654.066137][T29706] netlink: 'syz.4.9811': attribute type 1 has an invalid length. [ 654.101712][T29706] 8021q: adding VLAN 0 to HW filter on device bond8 [ 654.227841][T29715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9816'. [ 654.304396][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 654.329513][T29720] affs: No valid root block on device sr0 [ 654.854901][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 654.858736][T28248] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 654.934471][ T5889] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 655.104529][ T5889] usb 9-1: Using ep0 maxpacket: 8 [ 655.107941][ T5889] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 655.112350][ T5889] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 655.117182][ T5889] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 655.120718][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.126672][ T5889] usb 9-1: config 0 descriptor?? [ 655.344445][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 655.375640][ T42] audit: type=1804 audit(1782889241.967:14845): pid=29745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.9828" name="file0" dev="tmpfs" ino=6736 res=1 errno=0 [ 655.498072][ T1479] usb 9-1: USB disconnect, device number 35 [ 655.535640][ T845] usblp0: Disabling reads from problematic bidirectional printer [ 655.553248][ T845] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 3 proto 3 vid 0x03F0 pid 0x0004 [ 655.578715][ T845] usb 13-1: USB disconnect, device number 9 [ 655.613492][ T845] usblp0: removed [ 656.384390][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 657.318915][ T845] libceph: connect (1)[c::]:6789 error -101 [ 657.321544][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 657.412026][T29810] fuse: fd is not a fuse device [ 657.414512][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 657.446432][T29798] ceph: No mds server is up or the cluster is laggy [ 657.610929][T29820] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9858'. [ 657.616404][T29820] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9858'. [ 657.894802][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.899622][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.903910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.907898][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.464411][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 658.705045][T22380] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 659.081970][T29855] sit0 speed is unknown, defaulting to 1000 [ 659.267381][T29857] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9874'. [ 659.459842][ T42] audit: type=1804 audit(1782889246.047:14846): pid=29864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.9876" name="file0" dev="tmpfs" ino=4842 res=1 errno=0 [ 659.494540][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 660.534502][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 661.050755][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9890'. [ 661.055032][T29897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9890'. [ 661.062173][T29899] netlink: 'syz.4.9889': attribute type 4 has an invalid length. [ 661.066245][T29899] netlink: 'syz.4.9889': attribute type 4 has an invalid length. [ 661.319831][T29907] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9893'. [ 661.398340][T29919] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 661.490920][T29926] overlayfs: failed to clone upperpath [ 661.558143][T29930] fuse: fd is not a fuse device [ 661.574577][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 661.684540][T13891] usb 13-1: new low-speed USB device number 10 using dummy_hcd [ 661.846790][T13891] usb 13-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 661.850394][T13891] usb 13-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 661.854578][T13891] usb 13-1: config 0 interface 0 has no altsetting 0 [ 661.856682][T13891] usb 13-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 661.860885][T13891] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.867943][T13891] usb 13-1: config 0 descriptor?? [ 661.875141][T29924] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 662.054481][T29408] Bluetooth: hci0: command 0x0406 tx timeout [ 662.106685][T13891] usbhid 13-1:0.0: can't add hid device: -71 [ 662.109365][T13891] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 662.117393][T13891] usb 13-1: USB disconnect, device number 10 [ 662.580267][T29954] fuse: fd is not a fuse device [ 662.614591][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 663.021205][T29982] fuse: fd is not a fuse device [ 663.104589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.110150][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.114777][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.119441][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.656351][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 663.815067][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 664.694505][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 665.020154][T30072] netlink: 'syz.8.9953': attribute type 1 has an invalid length. [ 665.049635][T30072] 8021q: adding VLAN 0 to HW filter on device bond4 [ 665.106672][T30072] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 665.121270][T30072] netlink: 'syz.8.9953': attribute type 10 has an invalid length. [ 665.125331][T30072] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9953'. [ 665.125454][T30072] dummy0: entered promiscuous mode [ 665.132090][T30072] bond4: (slave dummy0): Releasing backup interface [ 665.744486][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 666.085232][T30101] netlink: 'syz.4.9957': attribute type 1 has an invalid length. [ 666.133444][T30101] 8021q: adding VLAN 0 to HW filter on device bond9 [ 666.152359][T30103] bond9: (slave dummy0): Enslaving as a backup interface with an up link [ 666.173673][ T5792] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 666.196568][T30101] netlink: 'syz.4.9957': attribute type 10 has an invalid length. [ 666.205332][T30101] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9957'. [ 666.228915][T30101] dummy0: entered promiscuous mode [ 666.247880][T30101] bond9: (slave dummy0): Removing an active aggregator [ 666.270288][T30101] bond9: (slave dummy0): Releasing backup interface [ 666.774493][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 666.981597][ T42] audit: type=1804 audit(1782889253.577:14847): pid=30124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.9965" name="/newroot/309/file1" dev="tmpfs" ino=1656 res=1 errno=0 [ 667.207181][T30127] netlink: 'syz.8.9966': attribute type 4 has an invalid length. [ 667.213812][T30127] netlink: 'syz.8.9966': attribute type 4 has an invalid length. [ 667.429173][ T42] audit: type=1326 audit(1782889254.017:14848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.4.9971" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f77fec code=0x7ffc0000 [ 667.444386][ T42] audit: type=1326 audit(1782889254.017:14849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.4.9971" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f78017 code=0x7ffc0000 [ 667.464456][ T42] audit: type=1326 audit(1782889254.017:14850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.4.9971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000 [ 667.478938][ T42] audit: type=1326 audit(1782889254.017:14851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.4.9971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000 [ 667.494843][ T42] audit: type=1326 audit(1782889254.017:14852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.4.9971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000 [ 667.512038][ T42] audit: type=1326 audit(1782889254.017:14853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.4.9971" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7f77fec code=0x7ffc0000 [ 667.532777][ T42] audit: type=1326 audit(1782889254.017:14854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.4.9971" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7f78017 code=0x7ffc0000 [ 667.547022][ T42] audit: type=1326 audit(1782889254.017:14855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.4.9971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000 [ 667.563449][ T42] audit: type=1326 audit(1782889254.017:14856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30136 comm="syz.4.9971" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x7ffc0000 [ 667.814485][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 667.853416][T30142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9974'. [ 668.038740][T30149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9977'. [ 668.215550][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.219183][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.222830][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.227064][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.752596][T30168] overlayfs: failed to clone upperpath [ 668.854536][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 669.018244][T30180] overlayfs: failed to clone upperpath [ 669.904410][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 670.150804][T30198] netlink: 64 bytes leftover after parsing attributes in process `syz.7.9994'. [ 670.440650][T30213] tipc: Failed to remove unknown binding: 66,1,1/2126:1393884752/1393884754 [ 670.513493][ T41] libceph: connect (1)[c::]:6789 error -101 [ 670.516787][ T41] libceph: mon0 (1)[c::]:6789 connect error [ 670.555497][T30215] ceph: No mds server is up or the cluster is laggy [ 670.561193][T30219] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10001'. [ 670.934427][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 670.950357][T30236] fuse: fd is not a fuse device [ 670.996725][T30238] tipc: Failed to remove unknown binding: 66,1,1/3763082476:2395227142/2395227144 [ 671.048563][T30243] netlink: 'syz.8.10017': attribute type 39 has an invalid length. [ 671.974456][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 673.024488][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 673.779073][T30251] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10012'. [ 673.797015][ T999] libceph: connect (1)[c::]:6789 error -101 [ 673.799893][ T999] libceph: mon0 (1)[c::]:6789 connect error [ 673.844477][T30257] ceph: No mds server is up or the cluster is laggy [ 673.903097][T30263] netlink: 'syz.7.10013': attribute type 1 has an invalid length. [ 673.947761][T30263] 8021q: adding VLAN 0 to HW filter on device bond9 [ 673.974568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.978388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.982286][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.983720][T30263] bond9: (slave dummy0): Enslaving as a backup interface with an up link [ 673.986114][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.006273][T30263] netlink: 'syz.7.10013': attribute type 10 has an invalid length. [ 674.009995][T30263] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10013'. [ 674.014433][T30263] dummy0: entered promiscuous mode [ 674.018967][T30263] bond9: (slave dummy0): Releasing backup interface [ 674.054422][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 674.204008][T30271] syzkaller1: entered allmulticast mode [ 674.710789][T30276] tipc: Failed to remove unknown binding: 66,1,1/0:3641293780/3641293782 [ 674.864892][T30288] sit0 speed is unknown, defaulting to 1000 [ 675.094460][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 675.341766][T30310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10035'. [ 675.347315][T30310] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10035'. [ 676.144440][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 676.641923][T30351] 0x000000000004-0x000000020000 : "" [ 676.755247][T30351] ftl_cs: FTL header corrupt! [ 677.176114][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 677.969028][T30376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10050'. [ 678.214939][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 678.288546][T30389] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10058'. [ 678.681132][T30393] overlayfs: failed to clone upperpath [ 679.081816][T30410] fuse: fd is not a fuse device [ 679.254646][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 679.745043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.747918][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.750724][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.753759][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.043730][T30436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10077'. [ 680.294387][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 681.334424][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 681.781579][T30465] netlink: 'syz.6.10088': attribute type 1 has an invalid length. [ 681.815646][T30465] 8021q: adding VLAN 0 to HW filter on device bond6 [ 681.849254][ T5792] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 681.861503][T30465] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 681.876489][T30465] netlink: 'syz.6.10088': attribute type 10 has an invalid length. [ 681.880002][T30465] netlink: 40 bytes leftover after parsing attributes in process `syz.6.10088'. [ 681.884023][T30465] dummy0: entered promiscuous mode [ 681.889576][T30465] bond6: (slave dummy0): Removing an active aggregator [ 681.894802][T30465] bond6: (slave dummy0): Releasing backup interface [ 682.374744][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 682.384902][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 682.986365][T30484] fuse: fd is not a fuse device [ 683.054357][T30488] fuse: fd is not a fuse device [ 683.414401][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 683.461849][T30501] sit0 speed is unknown, defaulting to 1000 [ 683.757979][T30508] overlayfs: failed to clone upperpath [ 684.464377][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 684.528966][T30535] overlayfs: failed to clone upperpath [ 684.854696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.857688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.860781][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.494385][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 685.731198][T30559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10124'. [ 685.734593][T30559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10124'. [ 685.842586][T30563] overlayfs: failed to clone upperpath [ 685.925601][T30569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10127'. [ 686.544402][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 687.574446][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 688.134845][T22327] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 688.167936][T30616] overlayfs: failed to clone upperpath [ 688.234671][T30620] fuse: fd is not a fuse device [ 688.278365][T30621] erspan0: entered promiscuous mode [ 688.280734][T30621] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10149'. [ 688.399054][T30629] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10153'. [ 688.418898][T30629] 8021q: adding VLAN 0 to HW filter on device bond10 [ 688.624572][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 689.654440][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 689.879441][T30671] tipc: Enabling of bearer rejected, failed to enable media [ 689.895365][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.900149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.904043][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.935080][T30676] Cannot find del_set index 1 as target [ 690.637027][ T999] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 690.694596][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 690.696390][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.729107][T30687] overlayfs: failed to clone upperpath [ 690.792698][ T999] usb 9-1: New USB device found, idVendor=04b4, idProduct=0384, bcdDevice= 0.40 [ 690.796729][ T999] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.799815][ T999] usb 9-1: Product: syz [ 690.801640][ T999] usb 9-1: Manufacturer: syz [ 690.803266][ T999] usb 9-1: SerialNumber: syz [ 691.029720][ T999] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 691.043965][ T999] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 691.096252][ T999] usb 9-1: USB disconnect, device number 36 [ 691.138803][T28084] udevd[28084]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.566646][T30698] netlink: 'syz.7.10177': attribute type 1 has an invalid length. [ 691.597207][T30698] 8021q: adding VLAN 0 to HW filter on device bond11 [ 691.688654][T30698] bond11: (slave veth23): Enslaving as a backup interface with a down link [ 691.693755][T30705] dummy0: left promiscuous mode [ 691.696309][T30706] netlink: 'syz.6.10178': attribute type 1 has an invalid length. [ 691.703023][T30705] bond11: (slave dummy0): Enslaving as a backup interface with an up link [ 691.707823][ T5792] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 691.734500][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 691.774726][T30698] netlink: 'syz.7.10177': attribute type 10 has an invalid length. [ 691.778866][T30698] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10177'. [ 691.796290][T30706] 8021q: adding VLAN 0 to HW filter on device bond7 [ 691.819636][T30698] dummy0: entered promiscuous mode [ 691.823428][T30698] bond11: (slave dummy0): Removing an active aggregator [ 691.839015][T30698] bond11: (slave dummy0): Releasing backup interface [ 691.864737][T30706] bond7: (slave geneve3): making interface the new active one [ 691.882294][T30706] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 691.975435][T22333] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 692.009004][T30719] fuse: fd is not a fuse device [ 692.299378][T30725] binder: 30724:30725 ioctl c0306201 80000040 returned -11 [ 692.784375][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 693.814416][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 694.454678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.654488][T30789] netlink: 'syz.4.10210': attribute type 1 has an invalid length. [ 694.681488][T30789] 8021q: adding VLAN 0 to HW filter on device bond10 [ 694.751871][T30789] bond10: (slave geneve3): making interface the new active one [ 694.752649][T29408] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 694.761814][T29408] CPU: 0 UID: 0 PID: 29408 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.761878][T29408] Tainted: [L]=SOFTLOCKUP [ 694.761897][T29408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 694.761910][T29408] Workqueue: hci2 hci_rx_work [ 694.761943][T29408] Call Trace: [ 694.761949][T29408] [ 694.761958][T29408] dump_stack_lvl+0x100/0x190 [ 694.761979][T29408] sysfs_warn_dup.cold+0x1c/0x28 [ 694.762001][T29408] sysfs_create_dir_ns+0x24b/0x2b0 [ 694.762022][T29408] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 694.762041][T29408] ? find_held_lock+0x2b/0x80 [ 694.762058][T29408] ? kobject_add_internal+0x25f/0x930 [ 694.762075][T29408] ? kobject_add_internal+0x25f/0x930 [ 694.762093][T29408] ? do_raw_spin_unlock+0x145/0x1e0 [ 694.762110][T29408] kobject_add_internal+0x2c8/0x930 [ 694.762129][T29408] kobject_add+0x16a/0x1e0 [ 694.762144][T29408] ? __pfx_kobject_add+0x10/0x10 [ 694.762159][T29408] ? class_to_subsys+0x10f/0x150 [ 694.762210][T29408] ? kobject_put+0xb9/0x640 [ 694.762229][T29408] ? _raw_spin_unlock+0x28/0x50 [ 694.762263][T29408] device_add+0x294/0x1970 [ 694.762294][T29408] ? __pfx_dev_set_name+0x10/0x10 [ 694.762317][T29408] ? __pfx_device_add+0x10/0x10 [ 694.762349][T29408] ? mgmt_send_event_skb+0x2fb/0x460 [ 694.762386][T29408] hci_conn_add_sysfs+0x1a3/0x260 [ 694.762409][T29408] le_conn_complete_evt+0x11eb/0x1f60 [ 694.762451][T29408] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 694.762477][T29408] ? hci_event_packet+0x186/0xcd0 [ 694.762501][T29408] hci_le_conn_complete_evt+0x23c/0x3a0 [ 694.762521][T29408] ? skb_pull_data+0x15f/0x1e0 [ 694.762545][T29408] hci_le_meta_evt+0x34a/0x5f0 [ 694.762558][T29408] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 694.762581][T29408] hci_event_packet+0x51c/0xcd0 [ 694.762600][T29408] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 694.762613][T29408] ? __pfx_hci_event_packet+0x10/0x10 [ 694.762634][T29408] ? kcov_remote_start+0x384/0x670 [ 694.762655][T29408] ? lockdep_hardirqs_on+0x78/0x100 [ 694.762681][T29408] hci_rx_work+0x451/0xfc0 [ 694.762703][T29408] process_one_work+0xa23/0x1940 [ 694.762729][T29408] ? __pfx_process_one_work+0x10/0x10 [ 694.762753][T29408] ? __pfx_hci_rx_work+0x10/0x10 [ 694.762773][T29408] worker_thread+0x5ef/0xe50 [ 694.762795][T29408] ? __pfx_worker_thread+0x10/0x10 [ 694.762814][T29408] ? kthread+0x13a/0x450 [ 694.762831][T29408] ? __pfx_worker_thread+0x10/0x10 [ 694.762848][T29408] kthread+0x370/0x450 [ 694.762865][T29408] ? __pfx_kthread+0x10/0x10 [ 694.762883][T29408] ret_from_fork+0x72b/0xd50 [ 694.762899][T29408] ? __pfx_ret_from_fork+0x10/0x10 [ 694.762916][T29408] ? __switch_to+0x800/0x10f0 [ 694.762928][T29408] ? __pfx_kthread+0x10/0x10 [ 694.762946][T29408] ret_from_fork_asm+0x1a/0x30 [ 694.762973][T29408] [ 694.763084][T29408] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 694.763096][T30789] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 694.768446][T29408] Bluetooth: hci2: failed to register connection device [ 694.771827][T19009] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 694.854454][ C1] net_ratelimit: 3 callbacks suppressed [ 694.854475][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 694.957539][T19009] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 694.962599][T19009] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 694.970558][T19009] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 695.291180][T30819] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10218'. [ 695.320163][T30819] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10218'. [ 695.436369][T30826] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10221'. [ 695.523595][T30830] bond0: (slave bond_slave_0): Releasing backup interface [ 695.531722][T30830] bond0: (slave bond_slave_1): Releasing backup interface [ 695.545070][T30830] team0: Port device team_slave_0 removed [ 695.557678][T30830] team0: Port device team_slave_1 removed [ 695.562698][T30830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.573123][T30832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10224'. [ 695.579017][T30830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.583057][T30832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10224'. [ 695.589911][T30830] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 695.610063][T30833] team0: Mode changed to "loadbalance" [ 695.792330][T30845] fuse: fd is not a fuse device [ 695.832007][T30847] fuse: fd is not a fuse device [ 695.894822][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 696.573546][T30842] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 696.575889][T30842] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 696.580464][T30842] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 696.583213][T30842] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 696.593406][T30842] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 696.597114][T30842] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 696.599953][T30842] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 696.934444][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 696.936847][T30885] sit0 speed is unknown, defaulting to 1000 [ 697.641163][T30908] fuse: fd is not a fuse device [ 697.752640][T30910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10252'. [ 697.759035][T30910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10252'. [ 697.896370][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 697.941515][T30921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10255'. [ 697.974405][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 698.614611][ T64] Bluetooth: hci0: command 0x0406 tx timeout [ 698.614630][T29408] Bluetooth: hci2: command 0x0406 tx timeout [ 698.809839][T30931] netlink: 'syz.4.10268': attribute type 1 has an invalid length. [ 698.844427][T30931] 8021q: adding VLAN 0 to HW filter on device bond11 [ 698.905589][T30931] bond11: (slave geneve4): making interface the new active one [ 698.911040][T30931] bond11: (slave geneve4): Enslaving as an active interface with an up link [ 699.024361][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 699.127137][ T42] kauditd_printk_skb: 543 callbacks suppressed [ 699.127158][ T42] audit: type=1326 audit(1782889285.717:15400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30955 comm="syz.8.10270" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf708efec code=0x0 [ 699.151834][T30957] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10269'. [ 699.315798][ T42] audit: type=1326 audit(1782889285.907:15401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30968 comm="syz.4.10272" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x0 [ 699.316942][T30969] overlayfs: failed to clone upperpath [ 699.974508][T29408] Bluetooth: hci5: command 0x0c1a tx timeout [ 699.983608][T30984] fuse: fd is not a fuse device [ 700.021349][T30988] bond2: (slave lo): Releasing backup interface [ 700.024789][T30988] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 700.030378][T30988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 700.054566][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 700.066930][T30988] team0: Mode changed to "loadbalance" [ 700.170185][T30994] fuse: fd is not a fuse device [ 700.214613][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.218108][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.221149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.224678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.234811][T30998] overlayfs: failed to clone upperpath [ 700.431578][T31009] syz_tun: left allmulticast mode [ 700.433329][T31009] syz_tun: left promiscuous mode [ 700.435494][T31009] bridge0: port 1(syz_tun) entered disabled state [ 700.440481][T31009] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 700.463655][T31009] team0: Mode changed to "loadbalance" [ 700.695162][T29408] Bluetooth: hci2: command 0x0406 tx timeout [ 700.704791][T29408] Bluetooth: hci0: command 0x0406 tx timeout [ 700.847360][T31026] fuse: fd is not a fuse device [ 701.012455][ T5889] IPVS: starting estimator thread 0... [ 701.094516][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 701.114679][T31038] IPVS: using max 43 ests per chain, 103200 per kthread [ 702.134512][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 702.234699][T31053] vivid-001: ================= START STATUS ================= [ 702.239745][T31053] vivid-001: Radio HW Seek Mode: Bounded [ 702.244103][T31053] vivid-001: Radio Programmable HW Seek: false [ 702.254061][T31053] vivid-001: RDS Rx I/O Mode: Block I/O [ 702.256809][T31053] vivid-001: Generate RBDS Instead of RDS: false [ 702.264631][T31053] vivid-001: RDS Reception: true [ 702.267063][T31053] vivid-001: RDS Program Type: 0 inactive [ 702.269589][T31053] vivid-001: RDS PS Name: inactive [ 702.271923][T31053] vivid-001: RDS Radio Text: inactive [ 702.274189][T31053] vivid-001: RDS Traffic Announcement: false inactive [ 702.277396][T31053] vivid-001: RDS Traffic Program: false inactive [ 702.280759][T31053] vivid-001: RDS Music: false inactive [ 702.284120][T31053] vivid-001: ================== END STATUS ================== [ 702.513575][T29408] Bluetooth: hci5: Malformed MSFT vendor event: 0x02 [ 702.576837][T31084] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10318'. [ 702.607729][T31087] fuse: fd is not a fuse device [ 702.610502][T31084] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10318'. [ 702.774933][T29408] Bluetooth: hci2: command 0x0406 tx timeout [ 703.174402][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 703.505478][T31097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10322'. [ 703.572162][T31099] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10323'. [ 703.712985][T29408] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 703.970663][T31115] fuse: fd is not a fuse device [ 704.805895][T31116] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 704.808651][T31116] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 704.810949][T31116] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 704.866535][T31133] overlayfs: failed to clone upperpath [ 705.254389][ C1] net_ratelimit: 1 callbacks suppressed [ 705.254403][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 705.300504][T31153] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.10341'. [ 705.345669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.350129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.354689][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.714159][T31162] dvmrp6: entered allmulticast mode [ 706.061477][T29408] Bluetooth: hci5: command 0x0c1a tx timeout [ 706.294520][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 706.854915][T29408] Bluetooth: hci0: command 0x0406 tx timeout [ 706.854957][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 707.160855][T31201] fuse: fd is not a fuse device [ 707.306176][T31206] overlayfs: failed to clone upperpath [ 707.334673][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 708.180943][T31223] sit0 speed is unknown, defaulting to 1000 [ 708.271454][T31220] syz.6.10365: page allocation failure: order:0, mode:0x10cc0(GFP_KERNEL|__GFP_NORETRY), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 708.277256][T31220] CPU: 1 UID: 0 PID: 31220 Comm: syz.6.10365 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.277279][T31220] Tainted: [L]=SOFTLOCKUP [ 708.277284][T31220] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 708.277292][T31220] Call Trace: [ 708.277298][T31220] [ 708.277305][T31220] dump_stack_lvl+0x100/0x190 [ 708.277327][T31220] warn_alloc.cold+0x94/0xa8 [ 708.277346][T31220] ? __pfx_warn_alloc+0x10/0x10 [ 708.277362][T31220] ? find_held_lock+0x2b/0x80 [ 708.277378][T31220] ? psi_memstall_leave+0x19c/0x360 [ 708.277398][T31220] ? psi_memstall_leave+0x1e6/0x360 [ 708.277418][T31220] ? psi_memstall_leave+0x1eb/0x360 [ 708.277435][T31220] ? lockdep_hardirqs_on+0x78/0x100 [ 708.277460][T31220] __alloc_frozen_pages_noprof+0x159f/0x2dc0 [ 708.277484][T31220] ? __pfx___schedule+0x10/0x10 [ 708.277503][T31220] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 708.277521][T31220] ? irqentry_exit+0x24d/0xa00 [ 708.277541][T31220] ? lockdep_hardirqs_on+0x78/0x100 [ 708.277567][T31220] ? policy_nodemask+0x346/0x4f0 [ 708.277586][T31220] ? policy_nodemask+0x350/0x4f0 [ 708.277616][T31220] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 708.277666][T31220] ? policy_nodemask+0xed/0x4f0 [ 708.277692][T31220] alloc_pages_mpol+0x1fb/0x540 [ 708.277713][T31220] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 708.277740][T31220] ? alloc_pages_noprof+0xb0/0x160 [ 708.277760][T31220] alloc_pages_noprof+0x1a/0x160 [ 708.277780][T31220] kimage_alloc_pages+0x72/0x380 [ 708.277811][T31220] kimage_alloc_control_pages+0x157/0xa20 [ 708.277842][T31220] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 708.277861][T31220] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 708.277897][T31220] do_kexec_load+0x275/0x810 [ 708.277929][T31220] ? __pfx_do_kexec_load+0x10/0x10 [ 708.277966][T31220] __ia32_compat_sys_kexec_load+0x37f/0x400 [ 708.278000][T31220] ? __pfx___ia32_compat_sys_kexec_load+0x10/0x10 [ 708.278036][T31220] __do_fast_syscall_32+0xe7/0x970 [ 708.278057][T31220] ? lockdep_hardirqs_on+0x78/0x100 [ 708.278089][T31220] do_fast_syscall_32+0x32/0x70 [ 708.278109][T31220] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 708.278134][T31220] RIP: 0023:0xf7fd8fec [ 708.278160][T31220] Code: Unable to access opcode bytes at 0xf7fd8fc2. [ 708.278169][T31220] RSP: 002b:00000000f549650c EFLAGS: 00000292 ORIG_RAX: 000000000000011b [ 708.278188][T31220] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000003 [ 708.278200][T31220] RDX: 0000000080001080 RSI: 00000000003e0000 RDI: 0000000000000000 [ 708.278211][T31220] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 708.278221][T31220] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 708.278231][T31220] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 708.278258][T31220] [ 708.278267][T31220] Mem-Info: [ 708.376163][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 708.395187][T31220] active_anon:586 inactive_anon:2801 isolated_anon:0 [ 708.395187][T31220] active_file:2799 inactive_file:3341 isolated_file:0 [ 708.395187][T31220] unevictable:1768 dirty:33 writeback:0 [ 708.395187][T31220] slab_reclaimable:7520 slab_unreclaimable:87331 [ 708.395187][T31220] mapped:22204 shmem:3077 pagetables:1905 [ 708.395187][T31220] sec_pagetables:330 bounce:0 [ 708.395187][T31220] kernel_misc_reclaimable:0 [ 708.395187][T31220] free:26052 free_pcp:485 free_cma:0 [ 708.414916][T31220] Node 0 active_anon:4kB inactive_anon:560kB active_file:308kB inactive_file:1344kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:316kB dirty:0kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9248kB pagetables:1636kB sec_pagetables:1132kB all_unreclaimable? yes Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 708.427814][T31220] Node 1 active_anon:2452kB inactive_anon:10368kB active_file:10400kB inactive_file:11576kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:88500kB dirty:132kB writeback:0kB shmem:8340kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9920kB pagetables:5984kB sec_pagetables:188kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 708.441585][T31220] Node 0 DMA free:2084kB boost:2048kB min:2808kB low:2996kB high:3184kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:28kB active_file:128kB inactive_file:80kB unevictable:0kB writepending:0kB zspages:64kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 708.455116][T31220] lowmem_reserve[]: 0 283 283 283 283 [ 708.457693][T31220] Node 0 DMA32 free:23328kB boost:10240kB min:23300kB low:26564kB high:29828kB reserved_highatomic:2048KB free_highatomic:108KB active_anon:4kB inactive_anon:532kB active_file:180kB inactive_file:1264kB unevictable:3536kB writepending:0kB zspages:796kB present:1032196kB managed:290676kB mlocked:0kB bounce:0kB free_pcp:52kB local_pcp:0kB free_cma:0kB [ 708.472238][T31220] lowmem_reserve[]: 0 0 0 0 0 [ 708.475219][T31220] Node 1 DMA32 free:78524kB boost:16384kB min:63528kB low:75312kB high:87096kB reserved_highatomic:0KB free_highatomic:0KB active_anon:3152kB inactive_anon:9368kB active_file:10400kB inactive_file:11576kB unevictable:3536kB writepending:132kB zspages:7240kB present:1048432kB managed:948212kB mlocked:0kB bounce:0kB free_pcp:2436kB local_pcp:0kB free_cma:0kB [ 708.491887][T31220] lowmem_reserve[]: 0 0 0 0 0 [ 708.495292][T31220] Node 0 DMA: 87*4kB (U) 7*8kB (U) 3*16kB (U) 3*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 2084kB [ 708.500797][T31220] Node 0 DMA32: 187*4kB (UMEH) 299*8kB (UMEH) 111*16kB (UMEH) 176*32kB (UMEH) 77*64kB (UME) 19*128kB (UME) 5*256kB (UM) 4*512kB (U) 0*1024kB 1*2048kB (U) 0*4096kB = 23284kB [ 708.507746][T31220] Node 1 DMA32: 2567*4kB (ME) 1737*8kB (UME) 801*16kB (UME) 253*32kB (UME) 102*64kB (ME) 46*128kB (UME) 24*256kB (UME) 16*512kB (UME) 6*1024kB (UM) 0*2048kB 0*4096kB = 77972kB [ 708.516015][T31220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 708.520498][T31220] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 708.524906][T31220] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 708.529119][T31220] Node 1 hugepages_total=4 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 708.532600][T31220] 10092 total pagecache pages [ 708.535162][T31220] 1117 pages in swap cache [ 708.537179][T31220] Free swap = 15616kB [ 708.539013][T31220] Total swap = 124996kB [ 708.540648][T31220] 524155 pages RAM [ 708.542236][T31220] 0 pages HighMem/MovableOnly [ 708.543991][T31220] 210593 pages reserved [ 708.545185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.545846][T31220] 0 pages cma reserved [ 708.548928][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.553911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.935923][T31220] kexec: Could not allocate control_code_buffer [ 709.146410][T31240] netlink: 'syz.8.10371': attribute type 1 has an invalid length. [ 709.173429][T31240] 8021q: adding VLAN 0 to HW filter on device bond5 [ 709.247911][T31240] bond5: (slave geneve2): making interface the new active one [ 709.251686][T31240] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 709.275599][ T5826] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.281617][ T5826] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.288841][T31245] netlink: 180 bytes leftover after parsing attributes in process `syz.6.10370'. [ 709.323526][ T5826] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.332313][ T5826] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.560745][T31248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10372'. [ 709.617888][T31248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10372'. [ 709.631417][T31248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10372'. [ 709.746073][T31265] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10376'. [ 709.970837][T31273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10380'. [ 710.102979][T31279] sit0 speed is unknown, defaulting to 1000 [ 710.458822][ C1] net_ratelimit: 1 callbacks suppressed [ 710.458847][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 710.896481][T31296] fuse: fd is not a fuse device [ 711.017036][T31297] sit0 speed is unknown, defaulting to 1000 [ 711.019314][T31300] netlink: 'syz.4.10390': attribute type 1 has an invalid length. [ 711.048447][T31300] 8021q: adding VLAN 0 to HW filter on device bond12 [ 711.151462][T31300] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 711.256367][T31300] macvlan4: entered promiscuous mode [ 711.259093][T31300] macvlan4: entered allmulticast mode [ 711.262261][T31300] bond12: entered promiscuous mode [ 711.274386][T31300] veth0_to_bond: entered promiscuous mode [ 711.289280][T31300] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 711.297624][T31300] bond12: left promiscuous mode [ 711.299837][T31300] veth0_to_bond: left promiscuous mode [ 711.494481][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 711.594027][T31321] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10398'. [ 711.743757][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.747122][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.534522][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 712.763090][T31349] overlayfs: failed to clone lowerpath [ 712.780914][T31349] overlayfs: failed to clone upperpath [ 713.101749][T31364] overlayfs: failed to clone upperpath [ 713.430763][T31372] fuse: fd is not a fuse device [ 713.498244][T31374] fuse: fd is not a fuse device [ 713.574515][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 713.693957][T31379] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10417'. [ 713.716875][T31379] netlink: 44 bytes leftover after parsing attributes in process `syz.7.10417'. [ 713.720604][T31379] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10417'. [ 713.735254][T29408] Bluetooth: hci1: command 0x1003 tx timeout [ 713.772399][ T64] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 713.939584][T31387] overlayfs: failed to clone upperpath [ 714.452588][T31401] netlink: 'syz.6.10425': attribute type 1 has an invalid length. [ 714.488499][T31401] 8021q: adding VLAN 0 to HW filter on device bond8 [ 714.545964][T31401] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 714.587506][T31401] macvlan2: entered promiscuous mode [ 714.590959][T31401] macvlan2: entered allmulticast mode [ 714.605480][T31401] bond8: entered promiscuous mode [ 714.609039][T31401] veth0_to_bond: entered promiscuous mode [ 714.621989][T31401] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 714.624488][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 714.633986][T31401] bond8: left promiscuous mode [ 714.636178][T31401] veth0_to_bond: left promiscuous mode [ 715.150974][T31415] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 715.654590][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 715.947886][T31431] netlink: 'syz.7.10434': attribute type 1 has an invalid length. [ 715.972796][T31431] 8021q: adding VLAN 0 to HW filter on device bond12 [ 716.009183][T31431] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 716.033281][T31431] macvlan2: entered promiscuous mode [ 716.036493][T31431] macvlan2: entered allmulticast mode [ 716.039365][T31431] bond12: entered promiscuous mode [ 716.041633][T31431] veth0_to_bond: entered promiscuous mode [ 716.045276][T31431] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 716.049223][T31431] bond12: left promiscuous mode [ 716.051186][T31431] veth0_to_bond: left promiscuous mode [ 716.704424][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 716.855716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.859662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.862785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.866029][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.364855][T31460] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10442'. [ 717.734436][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 718.224541][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 718.651722][T31498] netlink: 'syz.8.10449': attribute type 1 has an invalid length. [ 718.669183][T31498] 8021q: adding VLAN 0 to HW filter on device bond6 [ 718.697630][T31497] sit0 speed is unknown, defaulting to 1000 [ 718.699861][T31498] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 718.721864][T31498] macvlan2: entered promiscuous mode [ 718.727463][T31498] macvlan2: entered allmulticast mode [ 718.730276][T31498] bond6: entered promiscuous mode [ 718.732537][T31498] veth0_to_bond: entered promiscuous mode [ 718.736526][T31498] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 718.740192][T31498] bond6: left promiscuous mode [ 718.741878][T31498] veth0_to_bond: left promiscuous mode [ 718.774716][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 718.946259][T31511] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10453'. [ 719.134535][T13891] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 719.294411][T13891] usb 9-1: Using ep0 maxpacket: 16 [ 719.304875][T13891] usb 9-1: config index 0 descriptor too short (expected 1068, got 27) [ 719.309022][T13891] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 719.315939][T13891] usb 9-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 719.319874][T13891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.323471][T13891] usb 9-1: Product: syz [ 719.325436][T13891] usb 9-1: Manufacturer: syz [ 719.327112][T13891] usb 9-1: SerialNumber: syz [ 719.331638][T13891] usb 9-1: config 0 descriptor?? [ 719.814499][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.065686][T31529] netlink: 'syz.6.10462': attribute type 1 has an invalid length. [ 720.089861][T31529] 8021q: adding VLAN 0 to HW filter on device bond9 [ 720.121436][T31529] bond8: (slave veth0_to_bond): Releasing backup interface [ 720.136925][T31529] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 720.180919][T13891] usb 9-1: USB disconnect, device number 37 [ 720.272515][T31529] macvlan2: entered promiscuous mode [ 720.280702][T31529] macvlan2: entered allmulticast mode [ 720.283221][T31529] bond9: entered promiscuous mode [ 720.285579][T31529] veth0_to_bond: entered promiscuous mode [ 720.289922][T31529] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 720.298775][T31529] bond9: left promiscuous mode [ 720.301203][T31529] veth0_to_bond: left promiscuous mode [ 720.784453][T22380] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 720.854437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 720.973248][T31543] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.984860][T31543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.061542][T31543] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.066225][T31543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 721.077889][T31543] veth1_vlan: left promiscuous mode [ 721.085238][T31543] veth0_vlan: left promiscuous mode [ 721.090587][T31543] veth0_vlan: entered promiscuous mode [ 721.096303][T31543] veth1_vlan: entered promiscuous mode [ 721.106660][T31543] veth1_macvtap: left promiscuous mode [ 721.111145][T31543] veth0_macvtap: left promiscuous mode [ 721.116772][T31543] veth0_macvtap: entered promiscuous mode [ 721.121619][T31543] veth1_macvtap: entered promiscuous mode [ 721.136235][T31543] 8021q: adding VLAN 0 to HW filter on device bond1 [ 721.180565][T31543] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 721.246915][ T12] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.262995][ T12] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.272821][ T12] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.279691][ T12] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.876892][T31556] kvm: pic: single mode not supported [ 721.890952][T31560] overlayfs: failed to clone upperpath [ 721.894507][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 722.055301][T31562] fuse: fd is not a fuse device [ 722.170345][T31566] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10473'. [ 722.199103][T31568] netlink: 'syz.8.10474': attribute type 1 has an invalid length. [ 722.287627][T31568] 8021q: adding VLAN 0 to HW filter on device bond7 [ 722.303424][T31570] bond6: (slave veth0_to_bond): Releasing backup interface [ 722.354424][T31570] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 722.398986][T31568] macvlan2: entered promiscuous mode [ 722.401495][T31568] macvlan2: entered allmulticast mode [ 722.405205][T31568] bond7: entered promiscuous mode [ 722.407280][T31568] veth0_to_bond: entered promiscuous mode [ 722.414782][T31568] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 722.419870][T31568] bond7: left promiscuous mode [ 722.422402][T31568] veth0_to_bond: left promiscuous mode [ 722.535668][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.539354][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.542989][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.547779][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.623325][T31574] fuse: fd is not a fuse device [ 722.766770][T31582] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10480'. [ 722.934461][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 723.113728][T31539] kexec: Could not allocate control_code_buffer [ 723.347286][T31604] netlink: 'syz.6.10488': attribute type 1 has an invalid length. [ 723.373018][T31607] netlink: 'syz.4.10487': attribute type 4 has an invalid length. [ 723.375651][T31604] 8021q: adding VLAN 0 to HW filter on device bond10 [ 723.433675][T31604] bond9: (slave veth0_to_bond): Releasing backup interface [ 723.442664][T31604] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 723.477728][T31604] macvlan2: entered promiscuous mode [ 723.481055][T31604] macvlan2: entered allmulticast mode [ 723.485880][T31604] bond10: entered promiscuous mode [ 723.488254][T31604] veth0_to_bond: entered promiscuous mode [ 723.496075][T31604] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 723.502524][T31604] bond10: left promiscuous mode [ 723.508537][T31604] veth0_to_bond: left promiscuous mode [ 723.840366][T31626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10495'. [ 723.866568][T31626] 8021q: adding VLAN 0 to HW filter on device bond13 [ 723.984469][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 723.999004][T31623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10494'. [ 724.005357][T31623] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10494'. [ 724.183780][ T5847] hid-generic 0005:0010:10000.0021: unknown main item tag 0x0 [ 724.187317][ T5847] hid-generic 0005:0010:10000.0021: unknown main item tag 0x0 [ 724.190449][ T5847] hid-generic 0005:0010:10000.0021: unknown main item tag 0x0 [ 724.193219][ T5847] hid-generic 0005:0010:10000.0021: unknown main item tag 0x0 [ 724.197910][ T5847] hid-generic 0005:0010:10000.0021: unknown main item tag 0x0 [ 724.200816][ T5847] hid-generic 0005:0010:10000.0021: unknown main item tag 0x0 [ 724.203303][ T5847] hid-generic 0005:0010:10000.0021: unknown main item tag 0x0 [ 724.207413][ T5847] hid-generic 0005:0010:10000.0021: unknown main item tag 0x0 [ 724.210540][ T5847] hid-generic 0005:0010:10000.0021: unknown main item tag 0x0 [ 724.213263][ T5847] hid-generic 0005:0010:10000.0021: unknown main item tag 0x0 [ 724.224041][ T5847] hid-generic 0005:0010:10000.0021: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on syz0 [ 724.434763][T13891] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 724.602312][T13891] usb 9-1: unable to get BOS descriptor or descriptor too short [ 724.607740][T13891] usb 9-1: no configurations [ 724.609930][T13891] usb 9-1: can't read configurations, error -22 [ 724.616015][T22333] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 724.747938][T31653] netlink: 'syz.7.10502': attribute type 1 has an invalid length. [ 724.766157][T31653] 8021q: adding VLAN 0 to HW filter on device bond13 [ 724.797808][T31653] bond12: (slave veth0_to_bond): Releasing backup interface [ 724.806450][T31653] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 724.839585][T31653] macvlan2: entered promiscuous mode [ 724.842233][T31653] macvlan2: entered allmulticast mode [ 724.846757][T31653] bond13: entered promiscuous mode [ 724.848966][T31653] veth0_to_bond: entered promiscuous mode [ 724.852311][T31653] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 724.869444][T31653] bond13: left promiscuous mode [ 724.871504][T31653] veth0_to_bond: left promiscuous mode [ 725.024480][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 725.112436][T31659] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10503'. [ 725.116706][T31659] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10503'. [ 725.924702][T31685] netlink: 'syz.8.10521': attribute type 1 has an invalid length. [ 725.957840][T31685] 8021q: adding VLAN 0 to HW filter on device bond8 [ 726.005537][T31685] bond7: (slave veth0_to_bond): Releasing backup interface [ 726.019237][T31685] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 726.054457][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 726.062856][T31685] macvlan2: entered promiscuous mode [ 726.065630][T31685] macvlan2: entered allmulticast mode [ 726.079306][T31685] bond8: entered promiscuous mode [ 726.083677][T31685] veth0_to_bond: entered promiscuous mode [ 726.094083][T31685] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 726.111668][T31685] bond8: left promiscuous mode [ 726.113273][T31685] veth0_to_bond: left promiscuous mode [ 726.814684][T31703] »»»»»»: renamed from vlan0 [ 727.021651][T31705] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.050784][T31705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.104567][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 727.195139][T31705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 727.201824][T31705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 727.217083][T31705] hsr0: left promiscuous mode [ 727.235155][T31705] veth1_vlan: left promiscuous mode [ 727.249921][T31705] veth0_vlan: left promiscuous mode [ 727.255970][T31705] veth0_vlan: entered promiscuous mode [ 727.278036][T31705] veth1_vlan: entered promiscuous mode [ 727.291952][T31705] veth1_macvtap: left promiscuous mode [ 727.300930][T31705] veth0_macvtap: left promiscuous mode [ 727.305166][T31705] veth0_macvtap: entered promiscuous mode [ 727.309216][T31705] veth1_macvtap: entered promiscuous mode [ 727.318727][T31705] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 727.328855][T31705] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 727.342111][T31705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 727.349971][T31705] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 727.357552][ T999] sit0 speed is unknown, defaulting to 1000 [ 727.361603][ T5833] hsr0: entered promiscuous mode [ 727.364032][ T999] syz1: Port: 1 Link ACTIVE [ 727.413146][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.419678][ T999] sit0 speed is unknown, defaulting to 1000 [ 727.424032][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.428874][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.438728][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 727.491511][T31715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10525'. [ 727.589825][T31718] sit0 speed is unknown, defaulting to 1000 [ 727.706830][T31722] netlink: 'syz.8.10527': attribute type 1 has an invalid length. [ 727.735095][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.738849][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.739117][T31722] 8021q: adding VLAN 0 to HW filter on device bond9 [ 727.742529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.748547][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.790499][T31722] bond8: (slave veth0_to_bond): Releasing backup interface [ 727.819937][T31722] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 727.861696][T31722] macvlan2: entered promiscuous mode [ 727.863921][T31722] macvlan2: entered allmulticast mode [ 727.866920][T31722] bond9: entered promiscuous mode [ 727.868686][T31722] veth0_to_bond: entered promiscuous mode [ 727.871976][T31722] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 728.050621][T31722] bond9: left promiscuous mode [ 728.054071][T31722] veth0_to_bond: left promiscuous mode [ 728.144459][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 728.243489][T31730] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10530'. [ 728.710674][T31744] fuse: fd is not a fuse device [ 728.748118][T31745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10531'. [ 728.753019][T31745] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10531'. [ 728.846154][T31748] fuse: fd is not a fuse device [ 729.147086][T31764] netlink: 'syz.4.10538': attribute type 1 has an invalid length. [ 729.183948][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 729.259285][ T5833] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 729.307115][T31764] 8021q: adding VLAN 0 to HW filter on device bond14 [ 729.328445][T31766] bond12: (slave veth0_to_bond): Releasing backup interface [ 729.372496][T31766] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 729.453653][T31768] macvlan4: entered promiscuous mode [ 729.461412][T31768] macvlan4: entered allmulticast mode [ 729.472717][T31768] bond14: entered promiscuous mode [ 729.484822][T31768] veth0_to_bond: entered promiscuous mode [ 729.494065][T31768] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 729.505535][T31768] bond14: left promiscuous mode [ 729.507586][T31768] veth0_to_bond: left promiscuous mode [ 729.720312][ T5818] bond11: (slave veth23): link status definitely up, 10000 Mbps full duplex [ 729.727801][ T5818] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 729.785182][ T5818] bond11: active interface up! [ 729.990572][T31789] netlink: 'syz.4.10556': attribute type 1 has an invalid length. [ 730.007267][T31789] 8021q: adding VLAN 0 to HW filter on device bond15 [ 730.035275][T31792] sit0 speed is unknown, defaulting to 1000 [ 730.052552][T31789] bond14: (slave veth0_to_bond): Releasing backup interface [ 730.082756][T31789] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 730.148010][T31789] macvlan4: entered promiscuous mode [ 730.150399][T31789] macvlan4: entered allmulticast mode [ 730.153349][T31789] bond15: entered promiscuous mode [ 730.163678][T31789] veth0_to_bond: entered promiscuous mode [ 730.167034][T31789] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 730.173260][T31789] bond15: left promiscuous mode [ 730.176253][T31789] veth0_to_bond: left promiscuous mode [ 730.215504][ T999] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 730.618230][T31811] dummy0: left promiscuous mode [ 730.661888][T31811] bond1: left promiscuous mode [ 730.667516][T31811] ip6gre1: left promiscuous mode [ 730.682783][T31811] bond2: left promiscuous mode [ 730.687773][T31811] vti0: left promiscuous mode [ 730.826474][ T13] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.831421][ T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.838206][ T13] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.846141][ T13] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.850442][ T13] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.853677][ T13] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.862014][ T13] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 730.865024][ T13] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.264428][ C1] net_ratelimit: 1 callbacks suppressed [ 731.264452][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 731.845728][T31828] fuse: fd is not a fuse device [ 732.294441][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 732.747247][T31844] netlink: 'syz.8.10563': attribute type 1 has an invalid length. [ 732.755211][T31845] netlink: 'syz.7.10562': attribute type 2 has an invalid length. [ 732.758905][T31845] netlink: 'syz.7.10562': attribute type 2 has an invalid length. [ 732.770175][T31844] 8021q: adding VLAN 0 to HW filter on device bond10 [ 732.774790][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.778735][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.781759][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 732.795113][T31844] bond9: (slave veth0_to_bond): Releasing backup interface [ 732.805100][T31844] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 732.839291][T31844] macvlan2: entered promiscuous mode [ 732.842807][T31844] macvlan2: entered allmulticast mode [ 732.851103][T31844] bond10: entered promiscuous mode [ 732.853100][T31844] veth0_to_bond: entered promiscuous mode [ 732.859607][T31844] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 732.868387][T31844] bond10: left promiscuous mode [ 732.870692][T31844] veth0_to_bond: left promiscuous mode [ 733.334493][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 734.350578][T31884] fuse: fd is not a fuse device [ 734.374387][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 734.481091][T31887] fuse: fd is not a fuse device [ 734.530834][T31889] fuse: fd is not a fuse device [ 735.051348][T31901] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.062233][T31901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.071814][T31904] fuse: fd is not a fuse device [ 735.125227][T31901] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 735.135236][T31901] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.160108][T31901] veth1_vlan: left promiscuous mode [ 735.164869][T31901] veth0_vlan: left promiscuous mode [ 735.168937][T31901] veth0_vlan: entered promiscuous mode [ 735.173979][T31901] veth1_vlan: entered promiscuous mode [ 735.181778][T31901] veth1_macvtap: left promiscuous mode [ 735.187396][T31901] veth0_macvtap: left promiscuous mode [ 735.190738][T31901] veth0_macvtap: entered promiscuous mode [ 735.194969][T31901] veth1_macvtap: entered promiscuous mode [ 735.202139][T31901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.208141][T31901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.212146][T31901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.219443][T31901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.230883][T31901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 735.242259][T31901] 8021q: adding VLAN 0 to HW filter on device bond2 [ 735.258735][T31901] 8021q: adding VLAN 0 to HW filter on device bond3 [ 735.275527][T31901] 8021q: adding VLAN 0 to HW filter on device bond4 [ 735.337236][T31901] 8021q: adding VLAN 0 to HW filter on device bond5 [ 735.349826][T31901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 735.356683][T31901] 8021q: adding VLAN 0 to HW filter on device bond7 [ 735.361399][T31901] 8021q: adding VLAN 0 to HW filter on device bond8 [ 735.367003][T31901] 8021q: adding VLAN 0 to HW filter on device bond9 [ 735.373767][ T5847] dummy0: entered promiscuous mode [ 735.414462][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 735.493594][ T5818] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.500732][ T5818] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.507552][ T5818] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.511097][ T5818] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.525051][ T5818] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.528904][ T5818] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.536701][ T5818] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 735.542086][ T5818] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.645357][T31919] fuse: fd is not a fuse device [ 735.821512][T31929] sit0 speed is unknown, defaulting to 1000 [ 735.934452][T31932] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 736.054786][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.454933][ C1] net_ratelimit: 2 callbacks suppressed [ 736.454958][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 736.537932][T31941] overlayfs: failed to clone upperpath [ 737.494448][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 737.535200][ T42] audit: type=1800 audit(1782889324.117:15402): pid=31973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10613" name="bus" dev="tmpfs" ino=12895 res=0 errno=0 [ 737.563557][T31975] sit0 speed is unknown, defaulting to 1000 [ 737.936178][T31984] dummy0: left promiscuous mode [ 738.208267][T31993] netlink: 'syz.6.10619': attribute type 1 has an invalid length. [ 738.306165][T31984] bond2: left allmulticast mode [ 738.308196][T31984] veth3: left allmulticast mode [ 738.309898][T31984] bond3: left promiscuous mode [ 738.311460][T31984] bridge2: left promiscuous mode [ 738.313504][T31984] bridge3: left promiscuous mode [ 738.315639][T31984] bridge3: left allmulticast mode [ 738.321453][T31984] mac80211_hwsim hwsim18 wlan1: left promiscuous mode [ 738.326287][T31984] bond4: left promiscuous mode [ 738.328563][T31984] gre3: left promiscuous mode [ 738.436238][ T1479] sit0 speed is unknown, defaulting to 1000 [ 738.456117][ T1479] syz1: Port: 1 Link DOWN [ 738.459972][T31993] 8021q: adding VLAN 0 to HW filter on device bond11 [ 738.469388][T31994] bond10: (slave veth0_to_bond): Releasing backup interface [ 738.480733][T31994] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 738.484124][ T5818] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.488336][ T5818] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 738.491954][ T5818] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 738.495658][ T5818] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.499822][ T5818] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 738.503898][ T5818] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 738.511500][T31995] macvlan2: entered promiscuous mode [ 738.514035][T31995] macvlan2: entered allmulticast mode [ 738.518434][T31995] bond11: entered promiscuous mode [ 738.520721][T31995] veth0_to_bond: entered promiscuous mode [ 738.523688][T31995] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 738.535002][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 738.546117][T31995] bond11: left promiscuous mode [ 738.551800][T32005] overlayfs: failed to clone upperpath [ 738.553737][T31995] veth0_to_bond: left promiscuous mode [ 738.591016][T32007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10624'. [ 738.595452][T32007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10624'. [ 738.600000][ T1479] sit0 speed is unknown, defaulting to 1000 [ 738.607306][ T5818] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.610648][ T5818] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 738.613843][ T5818] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 738.619674][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 738.624805][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 738.629306][ T12] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 739.052041][T32022] sit0 speed is unknown, defaulting to 1000 [ 739.574437][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 739.895824][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.899782][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.036582][ T42] audit: type=1326 audit(1782889582.630:15403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32041 comm="syz.4.10636" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f77fec code=0x0 [ 740.087092][T32047] fuse: fd is not a fuse device [ 740.149732][T32051] netlink: 'syz.8.10639': attribute type 11 has an invalid length. [ 740.201534][T32054] fuse: fd is not a fuse device [ 740.204973][T32055] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10641'. [ 740.614639][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 740.845484][T32076] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10649'. [ 740.891761][T32078] sit0 speed is unknown, defaulting to 1000 [ 741.029327][T32089] netlink: 144 bytes leftover after parsing attributes in process `syz.4.10653'. [ 741.654865][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 742.694543][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 743.251969][T32146] gretap2: entered allmulticast mode [ 743.711652][T32160] netlink: 'syz.6.10668': attribute type 1 has an invalid length. [ 743.736076][T32160] bond12: entered promiscuous mode [ 743.737286][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 743.738693][T32160] 8021q: adding VLAN 0 to HW filter on device bond12 [ 743.826647][T32160] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 743.835578][T32160] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 743.841050][T32160] bond12: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 743.901699][T32164] bond12: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 743.908461][T32164] bond12: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 744.022796][T32171] uprobe: syz.8.10673:32171 failed to unregister, leaking uprobe [ 744.053064][T32171] uprobe: syz.8.10673:32171 failed to unregister, leaking uprobe [ 744.129640][ T42] audit: type=1804 audit(1782889586.720:15404): pid=32182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.10678" name="file0" dev="tmpfs" ino=7934 res=1 errno=0 [ 744.131386][T32182] ref_ctr increment failed for inode: 0x1efe offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888012fd3300 [ 744.148994][ T42] audit: type=1326 audit(1782889586.740:15405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32183 comm="syz.8.10680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 744.152437][T22197] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 744.160558][ T42] audit: type=1326 audit(1782889586.740:15406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32183 comm="syz.8.10680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 744.174494][ T42] audit: type=1326 audit(1782889586.740:15407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32183 comm="syz.8.10680" exe="/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf708efec code=0x7ffc0000 [ 744.185859][ T42] audit: type=1326 audit(1782889586.740:15408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32183 comm="syz.8.10680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 744.196835][ T42] audit: type=1326 audit(1782889586.740:15409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32183 comm="syz.8.10680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 744.208464][ T42] audit: type=1326 audit(1782889586.740:15410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32183 comm="syz.8.10680" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf708efec code=0x7ffc0000 [ 744.208511][T32181] uprobe: syz.6.10678:32181 failed to unregister, leaking uprobe [ 744.219284][ T42] audit: type=1326 audit(1782889586.740:15411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32183 comm="syz.8.10680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 744.232094][ T42] audit: type=1326 audit(1782889586.740:15412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32183 comm="syz.8.10680" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708efec code=0x7ffc0000 [ 744.241144][ T42] audit: type=1326 audit(1782889586.740:15413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32183 comm="syz.8.10680" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708efec code=0x7ffc0000 [ 744.246407][T32189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10681'. [ 744.257934][T32189] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10681'. [ 744.316427][T22197] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 744.322210][T22197] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 744.327624][T22197] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 744.340436][T22197] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 744.345156][T22197] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 744.349110][T22197] usb 9-1: Product: syz [ 744.351015][T22197] usb 9-1: Manufacturer: syz [ 744.353618][T22197] usb 9-1: SerialNumber: syz [ 744.385432][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.389174][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.393164][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.591244][T22197] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 744.774468][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 744.893066][ T1479] usb 9-1: USB disconnect, device number 40 [ 744.896822][ T1479] usblp0: removed [ 745.130700][T32212] fuse: fd is not a fuse device [ 745.287212][T32219] overlayfs: failed to clone upperpath [ 745.814509][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 746.065868][T32248] tipc: Failed to remove unknown binding: 66,0,0/2126:2593697749/2593697750 [ 746.074742][T32248] tipc: Failed to remove unknown binding: 66,0,0/2126:2593697749/2593697750 [ 746.255998][T32256] sit0 speed is unknown, defaulting to 1000 [ 746.308490][T32261] fuse: fd is not a fuse device [ 746.854514][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 747.040714][ T65] block nbd7: Receive control failed (result -22) [ 747.054978][ T65] [ 747.055834][ T65] ====================================================== [ 747.058112][ T65] WARNING: possible circular locking dependency detected [ 747.060443][ T65] syzkaller #0 Tainted: G L [ 747.062675][ T65] ------------------------------------------------------ [ 747.064984][ T65] kworker/u35:0/65 is trying to acquire lock: [ 747.067016][ T65] ffff8880205d2960 (sk_lock-AF_INET-NBD){+.+.}-{0:0}, at: inet_shutdown+0x67/0x410 [ 747.070221][ T65] [ 747.070221][ T65] but task is already holding lock: [ 747.072870][ T65] ffff8880614bb668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 747.076954][ T65] [ 747.076954][ T65] which lock already depends on the new lock. [ 747.076954][ T65] [ 747.081119][ T65] [ 747.081119][ T65] the existing dependency chain (in reverse order) is: [ 747.084175][ T65] [ 747.084175][ T65] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 747.087103][ T65] lock_acquire+0x1b9/0x370 [ 747.089104][ T65] __mutex_lock+0x1a4/0x1bd0 [ 747.091267][ T65] nbd_queue_rq+0x428/0x1080 [ 747.093706][ T65] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 747.096497][ T65] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 747.099550][ T65] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 747.102135][ T65] blk_mq_run_work_fn+0x135/0x380 [ 747.104277][ T65] process_one_work+0xa23/0x1940 [ 747.106398][ T65] worker_thread+0x5ef/0xe50 [ 747.108477][ T65] kthread+0x370/0x450 [ 747.110459][ T65] ret_from_fork+0x72b/0xd50 [ 747.112785][ T65] ret_from_fork_asm+0x1a/0x30 [ 747.115523][ T65] [ 747.115523][ T65] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 747.118637][ T65] lock_acquire+0x1b9/0x370 [ 747.120760][ T65] __mutex_lock+0x1a4/0x1bd0 [ 747.122861][ T65] nbd_queue_rq+0xba/0x1080 [ 747.124387][ T65] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 747.126088][ T65] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 747.128817][ T65] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 747.131424][ T65] blk_mq_run_work_fn+0x135/0x380 [ 747.133816][ T65] process_one_work+0xa23/0x1940 [ 747.135975][ T65] worker_thread+0x5ef/0xe50 [ 747.138073][ T65] kthread+0x370/0x450 [ 747.139892][ T65] ret_from_fork+0x72b/0xd50 [ 747.141781][ T65] ret_from_fork_asm+0x1a/0x30 [ 747.143613][ T65] [ 747.143613][ T65] -> #4 (set->srcu){.+.+}-{0:0}: [ 747.148005][ T65] lock_sync+0x9d/0x110 [ 747.150513][ T65] __synchronize_srcu+0xa2/0x300 [ 747.152843][ T65] blk_mq_quiesce_queue+0x149/0x1c0 [ 747.155193][ T65] elevator_switch+0x17b/0x7e0 [ 747.157564][ T65] elevator_change+0x352/0x530 [ 747.159713][ T65] elevator_set_default+0x29e/0x360 [ 747.161994][ T65] blk_register_queue+0x48e/0x630 [ 747.164142][ T65] __add_disk+0x73f/0xe40 [ 747.166126][ T65] add_disk_fwnode+0x118/0x5c0 [ 747.168440][ T65] nbd_dev_add+0x77a/0xb10 [ 747.170828][ T65] nbd_init+0x291/0x2b0 [ 747.173348][ T65] do_one_initcall+0x11d/0x700 [ 747.175655][ T65] kernel_init_freeable+0x6ea/0x7b0 [ 747.177946][ T65] kernel_init+0x1f/0x1e0 [ 747.179864][ T65] ret_from_fork+0x72b/0xd50 [ 747.181883][ T65] ret_from_fork_asm+0x1a/0x30 [ 747.183926][ T65] [ 747.183926][ T65] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 747.187213][ T65] lock_acquire+0x1b9/0x370 [ 747.189513][ T65] __mutex_lock+0x1a4/0x1bd0 [ 747.191797][ T65] elevator_change+0x1bc/0x530 [ 747.193950][ T65] elevator_set_none+0x92/0xf0 [ 747.195987][ T65] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 747.198470][ T65] nbd_start_device+0x1a6/0xbd0 [ 747.200605][ T65] nbd_genl_connect+0xff2/0x1a40 [ 747.203195][ T65] genl_family_rcv_msg_doit+0x214/0x300 [ 747.206289][ T65] genl_rcv_msg+0x560/0x800 [ 747.208393][ T65] netlink_rcv_skb+0x159/0x420 [ 747.210087][ T65] genl_rcv+0x28/0x40 [ 747.211447][ T65] netlink_unicast+0x585/0x850 [ 747.213032][ T65] netlink_sendmsg+0x8b0/0xda0 [ 747.214672][ T65] ____sys_sendmsg+0xa4d/0xbe0 [ 747.216275][ T65] ___sys_sendmsg+0x190/0x1e0 [ 747.217975][ T65] __sys_sendmsg+0x160/0x210 [ 747.219647][ T65] __do_fast_syscall_32+0xe7/0x970 [ 747.221740][ T65] do_fast_syscall_32+0x32/0x70 [ 747.223931][ T65] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.226876][ T65] [ 747.226876][ T65] -> #2 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 747.229773][ T65] lock_acquire+0x1b9/0x370 [ 747.231564][ T65] blk_alloc_queue+0x610/0x790 [ 747.233607][ T65] blk_mq_alloc_queue+0x174/0x290 [ 747.235450][ T65] __blk_mq_alloc_disk+0x29/0x120 [ 747.237294][ T65] nbd_dev_add+0x492/0xb10 [ 747.239105][ T65] nbd_init+0x291/0x2b0 [ 747.241259][ T65] do_one_initcall+0x11d/0x700 [ 747.243809][ T65] kernel_init_freeable+0x6ea/0x7b0 [ 747.245989][ T65] kernel_init+0x1f/0x1e0 [ 747.247664][ T65] ret_from_fork+0x72b/0xd50 [ 747.249342][ T65] ret_from_fork_asm+0x1a/0x30 [ 747.251047][ T65] [ 747.251047][ T65] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 747.253417][ T65] lock_acquire+0x1b9/0x370 [ 747.255007][ T65] fs_reclaim_acquire+0xc4/0x100 [ 747.256708][ T65] __kmalloc_cache_noprof+0x63/0x6c0 [ 747.258575][ T65] tcp_fastopen_defer_connect+0x26b/0x440 [ 747.260530][ T65] tcp_v4_connect+0x12ac/0x1b40 [ 747.262143][ T65] __inet_stream_connect+0x208/0xfa0 [ 747.264245][ T65] inet_stream_connect+0x57/0xa0 [ 747.266556][ T65] __sys_connect_file+0x141/0x1a0 [ 747.268783][ T65] __sys_connect+0x141/0x170 [ 747.270454][ T65] __ia32_sys_connect+0x71/0xb0 [ 747.272151][ T65] __do_fast_syscall_32+0xe7/0x970 [ 747.273941][ T65] do_fast_syscall_32+0x32/0x70 [ 747.275611][ T65] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 747.277759][ T65] [ 747.277759][ T65] -> #0 (sk_lock-AF_INET-NBD){+.+.}-{0:0}: [ 747.280571][ T65] check_prev_add+0xeb/0xe60 [ 747.282479][ T65] __lock_acquire+0x136c/0x1a40 [ 747.285006][ T65] lock_acquire+0x1b9/0x370 [ 747.286839][ T65] lock_sock_nested+0x41/0xf0 [ 747.288541][ T65] inet_shutdown+0x67/0x410 [ 747.290347][ T65] nbd_mark_nsock_dead+0xae/0x5c0 [ 747.292450][ T65] recv_work+0x5fb/0x8c0 [ 747.294260][ T65] process_one_work+0xa23/0x1940 [ 747.296579][ T65] worker_thread+0x5ef/0xe50 [ 747.298498][ T65] kthread+0x370/0x450 [ 747.300981][ T65] ret_from_fork+0x72b/0xd50 [ 747.303750][ T65] ret_from_fork_asm+0x1a/0x30 [ 747.306158][ T65] [ 747.306158][ T65] other info that might help us debug this: [ 747.306158][ T65] [ 747.309972][ T65] Chain exists of: [ 747.309972][ T65] sk_lock-AF_INET-NBD --> &cmd->lock --> &nsock->tx_lock [ 747.309972][ T65] [ 747.314482][ T65] Possible unsafe locking scenario: [ 747.314482][ T65] [ 747.317234][ T65] CPU0 CPU1 [ 747.319224][ T65] ---- ---- [ 747.321212][ T65] lock(&nsock->tx_lock); [ 747.322958][ T65] lock(&cmd->lock); [ 747.325892][ T65] lock(&nsock->tx_lock); [ 747.328945][ T65] lock(sk_lock-AF_INET-NBD); [ 747.330466][ T65] [ 747.330466][ T65] *** DEADLOCK *** [ 747.330466][ T65] [ 747.333308][ T65] 3 locks held by kworker/u35:0/65: [ 747.335244][ T65] #0: ffff88802716f940 ((wq_completion)nbd7-recv){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 747.339007][ T65] #1: ffffc90000a1fd08 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 747.343312][ T65] #2: ffff8880614bb668 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x5e7/0x8c0 [ 747.346769][ T65] [ 747.346769][ T65] stack backtrace: [ 747.349144][ T65] CPU: 0 UID: 0 PID: 65 Comm: kworker/u35:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 747.349169][ T65] Tainted: [L]=SOFTLOCKUP [ 747.349176][ T65] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 747.349187][ T65] Workqueue: nbd7-recv recv_work [ 747.349210][ T65] Call Trace: [ 747.349217][ T65] [ 747.349224][ T65] dump_stack_lvl+0x100/0x190 [ 747.349247][ T65] print_circular_bug.cold+0x178/0x1c7 [ 747.349273][ T65] check_noncircular+0x146/0x160 [ 747.349297][ T65] check_prev_add+0xeb/0xe60 [ 747.349315][ T65] __lock_acquire+0x136c/0x1a40 [ 747.349331][ T65] ? lockdep_hardirqs_on+0x78/0x100 [ 747.349359][ T65] lock_acquire+0x1b9/0x370 [ 747.349373][ T65] ? inet_shutdown+0x67/0x410 [ 747.349393][ T65] lock_sock_nested+0x41/0xf0 [ 747.349419][ T65] ? inet_shutdown+0x67/0x410 [ 747.349434][ T65] inet_shutdown+0x67/0x410 [ 747.349450][ T65] nbd_mark_nsock_dead+0xae/0x5c0 [ 747.349471][ T65] recv_work+0x5fb/0x8c0 [ 747.349489][ T65] ? lockdep_unlock+0x5a/0xc0 [ 747.349504][ T65] ? __pfx_recv_work+0x10/0x10 [ 747.349519][ T65] ? debug_object_deactivate+0x2e4/0x3b0 [ 747.349544][ T65] ? rcu_is_watching+0x12/0xc0 [ 747.349566][ T65] process_one_work+0xa23/0x1940 [ 747.349593][ T65] ? __pfx_process_one_work+0x10/0x10 [ 747.349615][ T65] ? __pfx_recv_work+0x10/0x10 [ 747.349631][ T65] worker_thread+0x5ef/0xe50 [ 747.349653][ T65] ? kthread+0x13a/0x450 [ 747.349675][ T65] ? __pfx_worker_thread+0x10/0x10 [ 747.349697][ T65] kthread+0x370/0x450 [ 747.349717][ T65] ? __pfx_kthread+0x10/0x10 [ 747.349734][ T65] ret_from_fork+0x72b/0xd50 [ 747.349749][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 747.349763][ T65] ? __switch_to+0x800/0x10f0 [ 747.349775][ T65] ? __pfx_kthread+0x10/0x10 [ 747.349798][ T65] ret_from_fork_asm+0x1a/0x30 [ 747.349826][ T65] [ 747.574573][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.578250][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.581879][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.894434][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 748.935293][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 749.974494][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 750.774689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.777889][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.024464][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 752.054571][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 752.135686][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.094434][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 754.054468][T22326] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 754.134484][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 755.174498][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 755.254626][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.257542][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.260662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.263710][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.224459][ C1] IPVS: ovf: UDP 224.0.0.2:0 - no destination available