last executing test programs: 10m56.066893189s ago: executing program 0 (id=56): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x1e00) 10m53.767147544s ago: executing program 0 (id=59): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x5, 0x10, 0x1, 0x0, 0x5f, 0x7, 0x2, 0xa6, 0x0, 0x5, 0xe, 0xffffffffffffffff}, {0xfffffff9, 0x4004, 0x0, 0xfe, 0x0, 0xf6, 0x81, 0x8, 0x4, 0xff, 0x4, 0x0, 0x800000000000001}, {0xffffff01, 0x35, 0x0, 0x1, 0x4, 0x5, 0xf, 0xfe, 0x5, 0x2, 0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x200004, 0x0, 0x2, 0x0, 0x1], 0x80a0000}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10m50.663421713s ago: executing program 0 (id=64): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x44891}, 0x4004000) 10m49.7069901s ago: executing program 0 (id=66): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000040)={0x600, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0}) 10m41.28301964s ago: executing program 0 (id=81): socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r2, 0xfffe, 0x20, 0xd8ba, 0x9}, &(0x7f00000001c0)=0x18) socket(0x200000100000011, 0x803, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000180)='mqueue\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x2000030, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = semget(0x0, 0x0, 0x200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, 0x0, 0x40000) semctl$GETNCNT(r4, 0x2, 0xe, &(0x7f0000000340)=""/111) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r6, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) open(&(0x7f0000000240)='./file1\x00', 0x10b801, 0x20) 10m40.919643499s ago: executing program 0 (id=82): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) link(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000180)={[0x5]}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c004}, 0x24040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 10m25.207839978s ago: executing program 32 (id=82): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f00000004c0)={0x0, 0x1, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x1) link(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000180)={[0x5]}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c004}, 0x24040000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 2m28.39278128s ago: executing program 3 (id=1150): ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000800)) syz_io_uring_setup(0xa0, 0x0, &(0x7f0000000640), &(0x7f0000000280)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="37bf6a1e07da850943000500"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m27.292714439s ago: executing program 3 (id=1153): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffe}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x18, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 2m25.888165833s ago: executing program 3 (id=1155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/186, 0xba) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) ioctl$MEDIA_IOC_DEVICE_INFO(0xffffffffffffffff, 0xc1007c00, 0x0) r7 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r7, 0x40189206, &(0x7f0000000180)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000180)="ca59b928b749d890ac5cd191cc1ca34f2adb5234f45dcf280dba15c95de65da9bcd73281c72d635cd214fdd914808b1e8dbc3d5412b4e4b249428435599982383dd11ad1a86c73f98c4387c26b9e255dee112e11206a8e41b69ce5f36460270a2a5a66a57bc22c476e778fc35929c670930bba8c4ab81440c0ed09eb97fce65a5c24fabd6e1d9217512b8ecb76dbfce362f0908f170de9a4b427aeca0c1632f220a789c7a8fb172eeab15110f93271063c75611683e6a4fb1038e1b8a047", 0xbe}], 0x1) 2m24.692354619s ago: executing program 3 (id=1158): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$security_evm(&(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000240)=@sha1={0x1, "076886f7ea42da64b49397ed03f512f72d917b4a"}, 0x15, 0x7) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='devtmpfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m24.485558476s ago: executing program 3 (id=1160): accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x2711}, 0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0xffffffffd65b9251, 0x4, 0x4000000804, 0x7, 0x10, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x5, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0xe, &(0x7f00000001c0), &(0x7f0000000200)=0x4) socket$unix(0x1, 0x5, 0x0) 2m23.210321139s ago: executing program 3 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(0xffffffffffffffff, &(0x7f0000000700)=""/90, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = creat(0x0, 0x96) close(r3) eventfd(0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 2m22.248407836s ago: executing program 33 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x24040808) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0}) getdents(0xffffffffffffffff, &(0x7f0000000700)=""/90, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = creat(0x0, 0x96) close(r3) eventfd(0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 21.818902838s ago: executing program 5 (id=1417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0x2d59, 0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 18.110135468s ago: executing program 5 (id=1425): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r3, &(0x7f0000000700)=""/90, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = creat(0x0, 0x96) close(r4) eventfd(0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 17.558532272s ago: executing program 2 (id=1429): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="140100001a00000128bd7000fedbdf250a100004fd01fe02002c000099000880823471791e926cb913673fd0ffe340c0a3dc043e2f0cb93fb089f18d7e7ff6a718c9597a9ad7fd8fc2c65e30e036090b1bc70468b9f5a97c9136918c3cd36776a5d79d70c90f0f734154dd58209d3f158cae7403542251dd1229d91cccf23a01ffc88f2ae1fdb0f04de747748fea612950077a57a5238d7ae648a4c1c76ef38853ec4da125e5a50cd46463929baaa38ec9d3ee619100000008000300", @ANYRES32=0x0, @ANYBLOB="080006000500000008001900", @ANYRES32=0x0, @ANYBLOB="080006008201000014000500ff020000000000000000000000000001140005000000000000000000000000000000000014000500fc00000000000000000000000000000099e1e94ba4bf15357ea039bb88f987eef3e842c4281ea055561f0ce12e766f5b57e82e8d994addfd19a3f22be2dfef27437e90ad45f1fd443db836be67a86e6c67166cea8fde8ebb09d65a8969bc79a6d1ba6ca85c9028c5c4257e2bf9c24d950d69c395962e15bcdea8ae6c2db037ec01d20b4a23ce5474f0046aba0d85c8f7a8a2b6a072f0654bcca95aa3cd27e2b1b49064ec464a73cc156b3d4d"], 0xffffffffffffff69}}, 0x48002) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x800) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x0}) syz_io_uring_setup(0x186b, &(0x7f00000007c0)={0x0, 0xe1ba, 0x80, 0x0, 0x10}, &(0x7f0000000700), &(0x7f0000000080)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) 16.33532313s ago: executing program 2 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x14, 0x2, [@TCA_FW_MASK={0x8, 0x5, 0x10800}, @TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x7}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24000001) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 16.113663508s ago: executing program 2 (id=1432): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x14}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r8, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 11.738671642s ago: executing program 2 (id=1433): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0x2d59, 0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 11.708812164s ago: executing program 1 (id=1434): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x8a, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 11.459691414s ago: executing program 1 (id=1435): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x1, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 11.38890332s ago: executing program 5 (id=1436): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') read$FUSE(r2, &(0x7f0000000340)={0x2020}, 0x2020) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) sendmsg$kcm(r1, 0x0, 0x0) 10.981167423s ago: executing program 4 (id=1437): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7368, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 10.593644084s ago: executing program 2 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000280), 0x800000000020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {}, 0x20000, 0x1, {0x0}}) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x13f, 0x3}}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cb, 0x0) 10.515424981s ago: executing program 4 (id=1439): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="140100001a00000128bd7000fedbdf250a100004fd01fe02002c000099000880823471791e926cb913673fd0ffe340c0a3dc043e2f0cb93fb089f18d7e7ff6a718c9597a9ad7fd8fc2c65e30e036090b1bc70468b9f5a97c9136918c3cd36776a5d79d70c90f0f734154dd58209d3f158cae7403542251dd1229d91cccf23a01ffc88f2ae1fdb0f04de747748fea612950077a57a5238d7ae648a4c1c76ef38853ec4da125e5a50cd46463929baaa38ec9d3ee619100000008000300", @ANYRES32=0x0, @ANYBLOB="080006000500000008001900", @ANYRES32=0x0, @ANYBLOB="080006008201000014000500ff020000000000000000000000000001140005000000000000000000000000000000000014000500fc00000000000000000000000000000099e1e94ba4bf15357ea039bb88f987eef3e842c4281ea055561f0ce12e766f5b57e82e8d994addfd19a3f22be2dfef27437e90ad45f1fd443db836be67a86e6c67166cea8fde8ebb09d65a8969bc79a6d1ba6ca85c9028c5c4257e2bf9c24d950d69c395962e15bcdea8ae6c2db037ec01d20b4a23ce5474f0046aba0d85c8f7a8a2b6a072f0654bcca95aa3cd27e2b1b49064ec464a73cc156b3d4d"], 0xffffffffffffff69}}, 0x48002) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x800) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x0}) syz_io_uring_setup(0x186b, &(0x7f00000007c0)={0x0, 0xe1ba, 0x80, 0x0, 0x10}, &(0x7f0000000700), &(0x7f0000000080)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) 10.498982062s ago: executing program 1 (id=1440): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x14}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x83f, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 7.270764523s ago: executing program 1 (id=1441): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x14}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r8, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r9 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.893519193s ago: executing program 4 (id=1442): socket(0x10, 0x3, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) pipe2(0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100), 0x10) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 3.179979353s ago: executing program 1 (id=1443): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000140)={0x30, 0x30, 0x30}}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0}) 3.135230077s ago: executing program 2 (id=1444): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x4, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) syz_fuse_handle_req(r2, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r3, &(0x7f0000000700)=""/90, 0x20000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = creat(0x0, 0x96) close(r4) eventfd(0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) 2.416832844s ago: executing program 1 (id=1445): syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETGAMMA(r3, 0xc02064a5, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) read$snddsp(0xffffffffffffffff, &(0x7f0000000240)=""/1, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x4e20, 0xffff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x3}}, 0x0, 0x0, 0x24, 0x0, "10722bc808a275736b9c8b0a6d7c3ad873467bea66ccef24706660d6b5f3e9abfd8bb4ae1a5f51183230758b7eeb9de2dd94c891d075aee6cb0b2641dcb87f3486ec22120e4d62f729cf54aa857cc71e"}, 0xd8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x11, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) r9 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r9, 0x0, 0x0) r10 = syz_open_procfs(r0, &(0x7f00000000c0)='net/anycast6\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX=r10, @ANYBLOB=',\x00']) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000000)='rcu_utilization\x00', 0x0, 0x0) 2.289442365s ago: executing program 5 (id=1446): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0x2d59, 0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) 2.187611933s ago: executing program 4 (id=1447): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x7368, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) 1.808869934s ago: executing program 4 (id=1448): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x1, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7, 0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x0, 0xffffffff, 0x5dd]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x1, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x1, 0x0, @tick=0x401, {}, {}, @quote={{0x2, 0x2}, 0x9}}], 0xc4) read$snapshot(r1, 0x0, 0xffffffbf) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7fffffff, 0x2, 0x7, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000bf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.250459899s ago: executing program 5 (id=1449): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r0}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES8=r1], 0x14}}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x83f, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x2, 0x8, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) 313.832184ms ago: executing program 4 (id=1450): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, &(0x7f0000000140), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="140100001a00000128bd7000fedbdf250a100004fd01fe02002c000099000880823471791e926cb913673fd0ffe340c0a3dc043e2f0cb93fb089f18d7e7ff6a718c9597a9ad7fd8fc2c65e30e036090b1bc70468b9f5a97c9136918c3cd36776a5d79d70c90f0f734154dd58209d3f158cae7403542251dd1229d91cccf23a01ffc88f2ae1fdb0f04de747748fea612950077a57a5238d7ae648a4c1c76ef38853ec4da125e5a50cd46463929baaa38ec9d3ee619100000008000300", @ANYRES32=0x0, @ANYBLOB="080006000500000008001900", @ANYRES32=0x0, @ANYBLOB="080006008201000014000500ff020000000000000000000000000001140005000000000000000000000000000000000014000500fc00000000000000000000000000000099e1e94ba4bf15357ea039bb88f987eef3e842c4281ea055561f0ce12e766f5b57e82e8d994addfd19a3f22be2dfef27437e90ad45f1fd443db836be67a86e6c67166cea8fde8ebb09d65a8969bc79a6d1ba6ca85c9028c5c4257e2bf9c24d950d69c395962e15bcdea8ae6c2db037ec01d20b4a23ce5474f0046aba0d85c8f7a8a2b6a072f0654bcca95aa3cd27e2b1b49064ec464a73cc156b3d4d"], 0xffffffffffffff69}}, 0x48002) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x800) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x0}) syz_io_uring_setup(0x186b, &(0x7f00000007c0)={0x0, 0xe1ba, 0x80, 0x0, 0x10}, &(0x7f0000000700), &(0x7f0000000080)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) 0s ago: executing program 5 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_SET_CPUID(0x1e, r0, 0x1, 0x1012) futex(&(0x7f000000cffc)=0x1, 0x6, 0xffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0xf0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mbind(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x9, 0xf21, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 75.006494][ T5779] cgroup: Unknown subsys name 'net' [ 75.140529][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.778953][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.809405][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.819124][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.819352][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.827251][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.836275][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.842144][ T5799] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.849586][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.855770][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.864232][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.870472][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.877333][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.883678][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.890540][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.904121][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.912176][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.932783][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.940186][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.940827][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.962427][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.970350][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.983027][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.002030][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.010491][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.024004][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.378509][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 79.566203][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 79.598520][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.605961][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.613619][ T5790] bridge_slave_0: entered allmulticast mode [ 79.620715][ T5790] bridge_slave_0: entered promiscuous mode [ 79.651910][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.659227][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.684797][ T5790] bridge_slave_1: entered allmulticast mode [ 79.699656][ T5790] bridge_slave_1: entered promiscuous mode [ 79.760907][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.780056][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 79.793369][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.814683][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 79.887430][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.894921][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.904296][ T5788] bridge_slave_0: entered allmulticast mode [ 79.911225][ T5788] bridge_slave_0: entered promiscuous mode [ 79.922073][ T5790] team0: Port device team_slave_0 added [ 79.956745][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.964760][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.972707][ T5788] bridge_slave_1: entered allmulticast mode [ 79.979684][ T5788] bridge_slave_1: entered promiscuous mode [ 79.999151][ T5790] team0: Port device team_slave_1 added [ 80.062225][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.102671][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.125098][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.133150][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.159525][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.196594][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.204318][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.211478][ T5798] bridge_slave_0: entered allmulticast mode [ 80.218952][ T5798] bridge_slave_0: entered promiscuous mode [ 80.228117][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.235647][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.243182][ T5798] bridge_slave_1: entered allmulticast mode [ 80.250174][ T5798] bridge_slave_1: entered promiscuous mode [ 80.269001][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.276122][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.302791][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.320944][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.328707][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.336066][ T5793] bridge_slave_0: entered allmulticast mode [ 80.343584][ T5793] bridge_slave_0: entered promiscuous mode [ 80.380413][ T5788] team0: Port device team_slave_0 added [ 80.408036][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.416403][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.423922][ T5793] bridge_slave_1: entered allmulticast mode [ 80.430864][ T5793] bridge_slave_1: entered promiscuous mode [ 80.439764][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.452722][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.463539][ T5788] team0: Port device team_slave_1 added [ 80.545585][ T5790] hsr_slave_0: entered promiscuous mode [ 80.552057][ T5790] hsr_slave_1: entered promiscuous mode [ 80.561217][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.585278][ T5798] team0: Port device team_slave_0 added [ 80.593173][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.600149][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.626195][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.639146][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.646258][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.672577][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.686021][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.709660][ T5798] team0: Port device team_slave_1 added [ 80.788485][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.796305][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.822735][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.836913][ T5793] team0: Port device team_slave_0 added [ 80.846807][ T5793] team0: Port device team_slave_1 added [ 80.870859][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.877990][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.904334][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.933126][ T50] Bluetooth: hci1: command tx timeout [ 80.969334][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.976738][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.002984][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.014012][ T50] Bluetooth: hci0: command tx timeout [ 81.016549][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.026539][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.054074][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.080775][ T5788] hsr_slave_0: entered promiscuous mode [ 81.087455][ T5788] hsr_slave_1: entered promiscuous mode [ 81.094171][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.102031][ T50] Bluetooth: hci2: command tx timeout [ 81.102246][ T50] Bluetooth: hci3: command tx timeout [ 81.107761][ T5788] Cannot create hsr debugfs directory [ 81.180536][ T5798] hsr_slave_0: entered promiscuous mode [ 81.186946][ T5798] hsr_slave_1: entered promiscuous mode [ 81.193609][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.201387][ T5798] Cannot create hsr debugfs directory [ 81.251557][ T5793] hsr_slave_0: entered promiscuous mode [ 81.258129][ T5793] hsr_slave_1: entered promiscuous mode [ 81.264464][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.272110][ T5793] Cannot create hsr debugfs directory [ 81.595831][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.617528][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.628553][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.638847][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.699485][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.716304][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.730833][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.742040][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.819895][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.873364][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.906476][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.919042][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.980841][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.014713][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.039225][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.054441][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.114824][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.157259][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.179386][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.249427][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.257044][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.284061][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.312316][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.319518][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.380952][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.388123][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.399977][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.407186][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.437098][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.491415][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.548838][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.590605][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.613954][ T1314] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.621118][ T1314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.688657][ T1314] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.695931][ T1314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.741489][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.813709][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.855851][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.863125][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.905584][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.912816][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.991285][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.012540][ T5802] Bluetooth: hci1: command tx timeout [ 83.093255][ T5802] Bluetooth: hci0: command tx timeout [ 83.165722][ T5790] veth0_vlan: entered promiscuous mode [ 83.173106][ T5802] Bluetooth: hci3: command tx timeout [ 83.177465][ T50] Bluetooth: hci2: command tx timeout [ 83.228303][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.256394][ T5790] veth1_vlan: entered promiscuous mode [ 83.350392][ T5790] veth0_macvtap: entered promiscuous mode [ 83.375203][ T5790] veth1_macvtap: entered promiscuous mode [ 83.390749][ T5788] veth0_vlan: entered promiscuous mode [ 83.435803][ T5788] veth1_vlan: entered promiscuous mode [ 83.482967][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.501224][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.526755][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.541204][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.550669][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.563807][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.578396][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.596474][ T5788] veth0_macvtap: entered promiscuous mode [ 83.618688][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.629708][ T5788] veth1_macvtap: entered promiscuous mode [ 83.659490][ T5798] veth0_vlan: entered promiscuous mode [ 83.680623][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.692092][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.709266][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.739963][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.750682][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.764415][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.776965][ T5798] veth1_vlan: entered promiscuous mode [ 83.808354][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.819008][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.829097][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.838620][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.910424][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.930383][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.974770][ T5793] veth0_vlan: entered promiscuous mode [ 83.989085][ T5798] veth0_macvtap: entered promiscuous mode [ 84.000763][ T5798] veth1_macvtap: entered promiscuous mode [ 84.044655][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.045510][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.062006][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.074047][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.077542][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.086203][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.104491][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.118241][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.130356][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.141772][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.155458][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.167188][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.201429][ T5798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.210418][ T5798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.220735][ T5798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.229531][ T5798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.240803][ T5793] veth1_vlan: entered promiscuous mode [ 84.269094][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.296887][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.383781][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.392529][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.470646][ T5793] veth0_macvtap: entered promiscuous mode [ 84.513582][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.542469][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.589434][ T1314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.619209][ T5793] veth1_macvtap: entered promiscuous mode [ 84.628061][ T1314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.710968][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.736087][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.769052][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.806330][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.821470][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.836976][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.866865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.976426][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.987113][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.137199][ T50] Bluetooth: hci1: command tx timeout [ 85.157620][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.168329][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.180850][ T50] Bluetooth: hci0: command tx timeout [ 85.186299][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.186314][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.186330][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.188860][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.252525][ T50] Bluetooth: hci3: command tx timeout [ 85.262463][ T50] Bluetooth: hci2: command tx timeout [ 85.284576][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.312281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.352311][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.405197][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.437332][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.472548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.721887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 85.788389][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.823759][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.832837][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.843171][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.853388][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.862955][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.890734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.913644][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.922972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.966409][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.984158][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.995065][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.004938][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.228836][ T1314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.259242][ T1314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.403128][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.411016][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.936526][ T27] cfg80211: failed to load regulatory.db [ 87.112215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.172574][ T50] Bluetooth: hci1: command tx timeout [ 87.254227][ T50] Bluetooth: hci0: command tx timeout [ 87.332786][ T50] Bluetooth: hci2: command tx timeout [ 87.333347][ T5802] Bluetooth: hci3: command tx timeout [ 88.484394][ T5917] Bluetooth: MGMT ver 1.22 [ 88.540868][ T5917] Bluetooth: hci0: unsupported parameter 128 [ 88.643497][ T5917] Bluetooth: hci0: unsupported parameter 128 [ 89.167496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 89.453834][ T5924] netlink: 'syz.2.15': attribute type 2 has an invalid length. [ 89.461825][ T5924] netlink: 'syz.2.15': attribute type 2 has an invalid length. [ 90.191965][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 91.751649][ C1] sched: RT throttling activated [ 92.342857][ T5944] Bluetooth: hci0: unsupported parameter 128 [ 92.348937][ T5944] Bluetooth: hci0: unsupported parameter 128 [ 92.397187][ T5943] __nla_validate_parse: 45 callbacks suppressed [ 92.397203][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.501042][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.566183][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.647290][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.718805][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.728776][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.737616][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.746571][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.757104][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 92.766034][ T5943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'. [ 93.201042][ T5955] syz.0.26[5955]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.595383][ T5983] Bluetooth: hci0: unsupported parameter 128 [ 96.602608][ T5983] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 101.522859][ T6023] Zero length message leads to an empty skb [ 102.216443][ T6025] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.705435][ T6087] __nla_validate_parse: 98 callbacks suppressed [ 110.705451][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.61'. [ 115.017485][ T6112] syz.1.69 uses obsolete (PF_INET,SOCK_PACKET) [ 122.287273][ T6162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.83'. [ 122.297399][ T6162] netlink: 36 bytes leftover after parsing attributes in process `syz.2.83'. [ 123.483088][ T6176] 9pnet_fd: Insufficient options for proto=fd [ 125.285670][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 125.927778][ T6192] 9pnet_fd: Insufficient options for proto=fd [ 126.919951][ T6201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.92'. [ 126.948836][ T6201] netlink: 36 bytes leftover after parsing attributes in process `syz.2.92'. [ 128.793127][ T6216] 9pnet_fd: Insufficient options for proto=fd [ 130.202708][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.1.101'. [ 130.636498][ T6234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.101'. [ 132.804651][ T6259] syzkaller1: entered promiscuous mode [ 132.810193][ T6259] syzkaller1: entered allmulticast mode [ 133.600204][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.634440][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.538213][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 139.547707][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 139.556687][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 139.612236][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 139.622771][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 139.630274][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 139.943448][ T6319] overlay: ./file0 is not a directory [ 140.066808][ T5856] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.467119][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.523908][ T5856] usb 4-1: config 0 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 140.601798][ T5856] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.647458][ T5856] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 140.704376][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.916386][ T5856] usb 4-1: config 0 descriptor?? [ 140.940114][ T5856] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 140.984746][ T1314] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.178062][ T5842] usb 4-1: USB disconnect, device number 2 [ 141.304995][ T1314] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.889003][ T5802] Bluetooth: hci4: command tx timeout [ 142.046257][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.090442][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.111974][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.121267][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.132491][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.141542][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.162806][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.228913][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.259352][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.329385][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.126'. [ 142.596045][ T1314] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.043131][ T1314] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.212851][ T6347] 9pnet_fd: Insufficient options for proto=fd [ 143.747989][ T6309] chnl_net:caif_netlink_parms(): no params data found [ 144.212096][ T5802] Bluetooth: hci4: command tx timeout [ 145.772070][ T6359] overlay: ./file0 is not a directory [ 146.291743][ T5802] Bluetooth: hci4: command tx timeout [ 148.253532][ T6309] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.365326][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.391249][ T5802] Bluetooth: hci4: command tx timeout [ 148.490575][ T6309] bridge_slave_0: entered allmulticast mode [ 151.820769][ T6309] bridge_slave_0: entered promiscuous mode [ 151.937453][ T6309] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.977096][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.000966][ T6309] bridge_slave_1: entered allmulticast mode [ 152.039695][ T6309] bridge_slave_1: entered promiscuous mode [ 152.651330][ T6376] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 152.743156][ T6309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.551859][ T6309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.698941][ T6309] team0: Port device team_slave_0 added [ 153.846669][ T6309] team0: Port device team_slave_1 added [ 155.562180][ T6309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.682069][ T6309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.749808][ T6309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.963851][ T6395] __nla_validate_parse: 44 callbacks suppressed [ 155.963869][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 156.020104][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 156.207470][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 156.960882][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 156.990097][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 157.013113][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 157.022459][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 157.031339][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 157.051757][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 157.061497][ T6395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.142'. [ 157.072303][ T6309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.079290][ T6309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.111179][ T6309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.662219][ T6309] hsr_slave_0: entered promiscuous mode [ 157.709400][ T6309] hsr_slave_1: entered promiscuous mode [ 157.794227][ T6309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.816419][ T6309] Cannot create hsr debugfs directory [ 158.739250][ T6439] 9pnet_fd: Insufficient options for proto=fd [ 159.429485][ T1314] hsr_slave_0: left promiscuous mode [ 159.613038][ T1314] hsr_slave_1: left promiscuous mode [ 159.633980][ T1314] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.804651][ T1314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.284868][ T1314] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.293012][ T1314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.600934][ T1314] bridge_slave_1: left allmulticast mode [ 160.678052][ T1314] bridge_slave_1: left promiscuous mode [ 160.695724][ T1314] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.770633][ T1314] bridge_slave_0: left allmulticast mode [ 160.848305][ T1314] bridge_slave_0: left promiscuous mode [ 160.864181][ T1314] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.572513][ T1314] veth1_macvtap: left promiscuous mode [ 161.578645][ T1314] veth0_macvtap: left promiscuous mode [ 161.586947][ T1314] veth1_vlan: left promiscuous mode [ 161.606307][ T1314] veth0_vlan: left promiscuous mode [ 163.907701][ T6483] 9pnet_fd: Insufficient options for proto=fd [ 166.344827][ T1314] team0 (unregistering): Port device team_slave_1 removed [ 166.649448][ T1314] team0 (unregistering): Port device team_slave_0 removed [ 166.770606][ T1314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.060295][ T1314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.992937][ T6517] 9pnet_fd: Insufficient options for proto=fd [ 168.475760][ T1314] bond0 (unregistering): Released all slaves [ 170.202160][ T6477] __nla_validate_parse: 44 callbacks suppressed [ 170.202252][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 170.257292][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 170.269500][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 170.283599][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 170.660747][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 170.669735][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 170.679222][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 170.701761][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 170.710629][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 170.728051][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.157'. [ 170.928294][ T6528] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.943067][ T6309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.978420][ T6309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.054266][ T6309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.102247][ T6309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.976966][ T6309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.016937][ T6309] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.055895][ T3479] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.063122][ T3479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.104424][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.111671][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.485631][ T6309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.626753][ T6309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.268579][ T6309] veth0_vlan: entered promiscuous mode [ 178.660387][ T6309] veth1_vlan: entered promiscuous mode [ 178.968874][ T6309] veth0_macvtap: entered promiscuous mode [ 179.946608][ T6309] veth1_macvtap: entered promiscuous mode [ 180.016078][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.075334][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.091640][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.111635][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.134743][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.907737][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.920898][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.943774][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.956668][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.969851][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.982650][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.994783][ T6309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.007575][ T6309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.008346][ T6619] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 181.035287][ T6309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.162159][ T6309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.171322][ T6309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.180661][ T6309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.377542][ T6309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.652149][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.684258][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.790954][ T1096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.031812][ T1096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.704013][ T6641] syzkaller1: entered promiscuous mode [ 182.721908][ T6641] syzkaller1: entered allmulticast mode [ 186.141750][ T6681] overlay: ./file0 is not a directory [ 187.530876][ T6698] syzkaller1: entered promiscuous mode [ 187.593585][ T6698] syzkaller1: entered allmulticast mode [ 190.593555][ T6735] overlay: ./file0 is not a directory [ 194.492912][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.499397][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.562633][ T6776] netlink: zone id is out of range [ 196.568348][ T6777] capability: warning: `syz.1.216' uses deprecated v2 capabilities in a way that may be insecure [ 196.618760][ T6776] __nla_validate_parse: 44 callbacks suppressed [ 196.618777][ T6776] netlink: 56 bytes leftover after parsing attributes in process `syz.2.217'. [ 197.122951][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 197.132184][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 197.141040][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 197.150383][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 197.159401][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 197.168370][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 197.179168][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 197.188556][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 197.197904][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 199.481037][ T6794] overlay: ./file0 is not a directory [ 202.171674][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 202.177768][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 202.184134][ T5804] Bluetooth: Unexpected continuation frame (len 4) [ 204.413872][ T6832] __nla_validate_parse: 45 callbacks suppressed [ 204.414059][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 204.431049][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 204.440057][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 204.448921][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 204.457866][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 204.467060][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 204.477998][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 204.488115][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 204.497043][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 204.507782][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.229'. [ 206.173091][ T6839] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 206.255759][ T6839] CIFS mount error: No usable UNC path provided in device string! [ 206.255759][ T6839] [ 206.332114][ T6849] 9pnet_fd: Insufficient options for proto=fd [ 207.183148][ T6839] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 207.294478][ T6853] overlay: ./file0 is not a directory [ 210.128587][ T50] Bluetooth: Unexpected continuation frame (len 4) [ 210.529578][ T6877] __nla_validate_parse: 43 callbacks suppressed [ 210.529652][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 210.545189][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 210.554243][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 211.001712][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 211.011544][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 211.034704][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 211.045518][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 211.055283][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 211.065045][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 211.074706][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.239'. [ 212.123005][ T6893] 9pnet_fd: Insufficient options for proto=fd [ 212.544837][ T6896] vivid-000: disconnect [ 212.734783][ T6896] netlink: set zone limit has 8 unknown bytes [ 213.326335][ T6885] vivid-000: reconnect [ 215.122806][ T6909] overlay: ./file0 is not a directory [ 217.214787][ T6934] __nla_validate_parse: 44 callbacks suppressed [ 217.214805][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 217.230316][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 217.239266][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 217.248438][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 217.257534][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 217.266624][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 217.276734][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 217.285948][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 217.295092][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 217.307081][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 219.321009][ T6945] 9pnet_fd: Insufficient options for proto=fd [ 221.944402][ T6973] overlay: ./file0 is not a directory [ 222.292630][ T6976] __nla_validate_parse: 43 callbacks suppressed [ 222.292647][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 222.308054][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 222.317086][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 222.326065][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 222.335119][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 222.344349][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 222.353493][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 222.362790][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 222.371920][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 222.381141][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.260'. [ 224.108197][ T6995] 9pnet_fd: Insufficient options for proto=fd [ 224.518215][ T6997] can0: slcan on ttyS3. [ 224.823472][ T6996] can0 (unregistered): slcan off ttyS3. [ 227.296906][ T7022] overlay: ./file0 is not a directory [ 227.992702][ T7028] vivid-004: disconnect [ 228.010111][ T7028] netlink: set zone limit has 8 unknown bytes [ 228.551696][ T7020] vivid-004: reconnect [ 231.532197][ T7058] can0: slcan on ttyS3. [ 232.032827][ T7058] can0 (unregistered): slcan off ttyS3. [ 232.496509][ T7066] __nla_validate_parse: 96 callbacks suppressed [ 232.496526][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 232.511885][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 232.520729][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 232.540798][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 232.911485][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 232.921435][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 232.931141][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 232.943702][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 232.954593][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 232.963963][ T7066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.280'. [ 233.747996][ T7076] overlay: ./file0 is not a directory [ 234.242533][ T7081] 9pnet_fd: Insufficient options for proto=fd [ 238.228234][ T7117] __nla_validate_parse: 44 callbacks suppressed [ 238.228251][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 238.382928][ T7121] overlay: ./file0 is not a directory [ 238.548105][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 239.700983][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 239.962174][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 239.987252][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 240.201070][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 240.253132][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 240.304478][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 240.657400][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 240.815187][ T7138] 9pnet_fd: Insufficient options for proto=fd [ 240.868503][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'. [ 244.242068][ T7172] __nla_validate_parse: 44 callbacks suppressed [ 244.242175][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 244.257511][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 244.266388][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 244.275462][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 244.284419][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 244.293734][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 244.303376][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 244.312651][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 244.321966][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 244.330939][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 245.154064][ T7175] overlay: ./file0 is not a directory [ 245.551065][ T7182] 9pnet_fd: Insufficient options for proto=fd [ 248.482592][ T7229] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 251.510863][ T7243] overlay: ./file0 is not a directory [ 252.475348][ T7250] CIFS mount error: No usable UNC path provided in device string! [ 252.475348][ T7250] [ 252.507365][ T7250] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 254.155415][ T7276] 9pnet_fd: Insufficient options for proto=fd [ 254.633458][ T5841] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 255.041641][ T5841] usb 2-1: Using ep0 maxpacket: 8 [ 255.052140][ T5841] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 255.064163][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.188109][ T5841] pvrusb2: Hardware description: Terratec Grabster AV400 [ 255.227311][ T5841] pvrusb2: ********** [ 255.231357][ T5841] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 255.248417][ T5841] pvrusb2: Important functionality might not be entirely working. [ 255.371941][ T5841] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 255.383637][ T5841] pvrusb2: ********** [ 255.592630][ T2320] pvrusb2: Invalid write control endpoint [ 255.916202][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.925248][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.186778][ T7274] pvrusb2: Invalid write control endpoint [ 256.983134][ T2320] pvrusb2: Invalid write control endpoint [ 257.065006][ T1187] usb 2-1: USB disconnect, device number 2 [ 257.217637][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 257.418363][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 257.426611][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 257.438114][ T2320] pvrusb2: Device being rendered inoperable [ 257.461273][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 257.471492][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 257.520168][ T2320] pvrusb2: Attached sub-driver cx25840 [ 257.539400][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 257.586246][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 258.215390][ T7321] __nla_validate_parse: 98 callbacks suppressed [ 258.222037][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 258.232756][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 258.242317][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 258.251164][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 258.260947][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 258.270649][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 258.282302][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 258.292085][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 258.301155][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 258.311877][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 259.257358][ T7315] sctp: [Deprecated]: syz.3.336 (pid 7315) Use of int in maxseg socket option. [ 259.257358][ T7315] Use struct sctp_assoc_value instead [ 259.582827][ T7333] 9pnet_fd: Insufficient options for proto=fd [ 263.103605][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 263.572043][ T7355] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 266.315036][ T7376] CIFS mount error: No usable UNC path provided in device string! [ 266.315036][ T7376] [ 266.341724][ T7376] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 267.704409][ T7396] 9pnet_fd: Insufficient options for proto=fd [ 268.490522][ T7403] __nla_validate_parse: 97 callbacks suppressed [ 268.490537][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 268.620924][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 268.696932][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 268.892680][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 269.393433][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 269.414193][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 269.512187][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 269.625196][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 269.651763][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 269.743062][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 271.062498][ T5802] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 276.464825][ T7457] __nla_validate_parse: 43 callbacks suppressed [ 276.471360][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 276.481641][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 276.490531][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 276.499471][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 276.510581][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 276.519585][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 276.528584][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 276.537577][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 276.546542][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 276.556163][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 279.804086][ T5802] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 282.701568][ C0] hrtimer: interrupt took 44633 ns [ 284.652053][ T7526] CIFS mount error: No usable UNC path provided in device string! [ 284.652053][ T7526] [ 284.662195][ T7526] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 285.841688][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 289.011634][ T28] audit: type=1326 audit(1754966943.892:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567918ebe9 code=0x7ffc0000 [ 289.106707][ T28] audit: type=1326 audit(1754966943.892:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567918ebe9 code=0x7ffc0000 [ 289.130417][ T28] audit: type=1326 audit(1754966943.902:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f567918ebe9 code=0x7ffc0000 [ 289.288372][ T28] audit: type=1326 audit(1754966943.902:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567918ebe9 code=0x7ffc0000 [ 289.660668][ T28] audit: type=1326 audit(1754966943.902:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567918ebe9 code=0x7ffc0000 [ 289.730420][ T28] audit: type=1326 audit(1754966943.902:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f567918ebe9 code=0x7ffc0000 [ 289.752796][ T28] audit: type=1326 audit(1754966943.902:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567918ebe9 code=0x7ffc0000 [ 289.954187][ T28] audit: type=1326 audit(1754966943.902:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567918ebe9 code=0x7ffc0000 [ 290.248953][ T28] audit: type=1326 audit(1754966943.902:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f567918ebe9 code=0x7ffc0000 [ 290.287661][ T28] audit: type=1326 audit(1754966943.902:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7555 comm="syz.1.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567918ebe9 code=0x7ffc0000 [ 290.335426][ T7567] __nla_validate_parse: 97 callbacks suppressed [ 290.335436][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 290.350615][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 290.359477][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 290.368432][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 290.377302][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 290.386817][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 290.395645][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 290.404446][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 290.413256][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 290.422118][ T7567] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'. [ 290.452776][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 291.301500][ T7574] overlay: ./file0 is not a directory [ 292.069214][ T50] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 296.561933][ T7624] overlay: ./file0 is not a directory [ 297.578606][ T7627] __nla_validate_parse: 44 callbacks suppressed [ 297.578622][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 297.596844][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 297.979643][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 297.991055][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 298.002527][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 298.012700][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 298.023387][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 298.036395][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 298.046189][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 298.064850][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 299.643589][ T7644] 9pnet_fd: Insufficient options for proto=fd [ 303.706335][ T7684] 9pnet_fd: Insufficient options for proto=fd [ 306.079586][ T7700] __nla_validate_parse: 44 callbacks suppressed [ 306.079644][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 306.095101][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 306.104143][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 306.113225][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 306.122165][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 306.131028][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 306.140408][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 306.149733][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 306.159612][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 306.169718][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 309.822563][ T7712] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 309.921163][ T7704] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 311.194371][ T7722] __nla_validate_parse: 43 callbacks suppressed [ 311.194500][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 311.402268][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 311.413947][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 311.423942][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 311.437990][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 311.448208][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 311.457216][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 311.468960][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 311.683349][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 311.755557][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 312.020663][ T7733] 9pnet_fd: Insufficient options for proto=fd [ 317.465148][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.638155][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.771590][ T7771] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 321.923532][ T7791] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.390982][ T7809] __nla_validate_parse: 45 callbacks suppressed [ 324.391001][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 324.542053][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 324.551026][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 324.560964][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 324.570335][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 324.579748][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 324.589932][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 324.599373][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 324.608929][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 325.049801][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.455'. [ 327.651607][ T7823] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 330.092506][ T7838] 9pnet_fd: Insufficient options for proto=fd [ 330.511338][ T7840] netlink: 'syz.4.467': attribute type 10 has an invalid length. [ 330.888096][ T7840] team0: Port device wlan1 added [ 332.383332][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 333.351800][ T7864] netlink: 'syz.4.475': attribute type 1 has an invalid length. [ 333.351964][ T7864] __nla_validate_parse: 44 callbacks suppressed [ 333.352047][ T7864] netlink: 224 bytes leftover after parsing attributes in process `syz.4.475'. [ 334.982420][ T7877] 9pnet_fd: Insufficient options for proto=fd [ 336.215414][ T7886] CIFS mount error: No usable UNC path provided in device string! [ 336.215414][ T7886] [ 336.229094][ T7886] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 338.723625][ T7910] netlink: 60 bytes leftover after parsing attributes in process `syz.4.490'. [ 339.464788][ T7914] 9pnet_fd: Insufficient options for proto=fd [ 342.314043][ T7933] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 344.358097][ T7950] 9pnet_fd: Insufficient options for proto=fd [ 347.759382][ T7983] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 348.370394][ T7989] 9pnet_fd: Insufficient options for proto=fd [ 349.511410][ T7994] CIFS mount error: No usable UNC path provided in device string! [ 349.511410][ T7994] [ 349.572581][ T7994] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 349.826588][ T7999] overlay: ./file0 is not a directory [ 352.635985][ T8027] 9pnet_fd: Insufficient options for proto=fd [ 354.065252][ T8033] CIFS mount error: No usable UNC path provided in device string! [ 354.065252][ T8033] [ 354.115472][ T8033] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 354.173571][ T8034] fuse: Bad value for 'fd' [ 354.721558][ T8040] overlay: ./file0 is not a directory [ 356.570781][ T8061] 9pnet_fd: Insufficient options for proto=fd [ 357.668402][ T8068] 9pnet_fd: Insufficient options for proto=fd [ 358.968862][ T8075] CIFS mount error: No usable UNC path provided in device string! [ 358.968862][ T8075] [ 358.995355][ T8075] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 359.025872][ T8075] fuse: Bad value for 'fd' [ 362.555790][ T8105] 9pnet_fd: Insufficient options for proto=fd [ 366.960194][ T8132] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 367.380251][ T8139] 9pnet_fd: Insufficient options for proto=fd [ 368.859226][ T8154] netlink: 'syz.2.558': attribute type 1 has an invalid length. [ 368.993376][ T8154] netlink: 224 bytes leftover after parsing attributes in process `syz.2.558'. [ 371.237056][ T8173] 9pnet_fd: Insufficient options for proto=fd [ 373.408397][ T8189] overlay: ./file0 is not a directory [ 374.923996][ T8201] fuse: Bad value for 'fd' [ 375.029038][ T8206] 9pnet_fd: Insufficient options for proto=fd [ 378.211852][ T8217] 9pnet_fd: Insufficient options for proto=fd [ 378.442185][ T8210] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 378.802994][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.809837][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.173009][ T8241] fuse: Bad value for 'fd' [ 380.285019][ T8244] 9pnet_fd: Insufficient options for proto=fd [ 383.908584][ T8267] xt_SECMARK: invalid mode: 2 [ 384.061715][ T8259] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 384.980268][ T8277] fuse: Bad value for 'fd' [ 385.040086][ T8273] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 385.048314][ T8273] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.590'. [ 385.762645][ T8291] 9pnet_fd: Insufficient options for proto=fd [ 390.705955][ T8312] CIFS mount error: No usable UNC path provided in device string! [ 390.705955][ T8312] [ 390.818778][ T8312] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 392.301758][ T8310] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 394.412299][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 394.451722][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 394.467169][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 394.567060][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 394.682000][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 394.890237][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 394.913094][ T8331] overlayfs: failed to resolve './file1': -2 [ 394.960179][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 395.000890][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 395.145958][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 395.382922][ T8327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 396.917352][ T8347] CIFS mount error: No usable UNC path provided in device string! [ 396.917352][ T8347] [ 396.947482][ T8347] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 397.912848][ T8352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 399.651743][ T8354] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 400.339672][ T8361] overlayfs: failed to resolve './file1': -2 [ 400.580220][ T8368] xt_CT: No such helper "snmp" [ 400.610241][ T8372] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 3, id = 0 [ 401.789393][ T8392] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 401.798022][ T8392] __nla_validate_parse: 44 callbacks suppressed [ 401.798035][ T8392] netlink: 224 bytes leftover after parsing attributes in process `syz.1.626'. [ 405.411946][ T8411] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 406.702946][ T8429] 9pnet_fd: Insufficient options for proto=fd [ 406.747458][ T8430] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 406.755436][ T8430] netlink: 224 bytes leftover after parsing attributes in process `syz.1.638'. [ 410.443394][ T8461] 9pnet_fd: Insufficient options for proto=fd [ 411.960178][ T8473] netlink: 'syz.2.649': attribute type 1 has an invalid length. [ 411.968057][ T8473] netlink: 224 bytes leftover after parsing attributes in process `syz.2.649'. [ 414.578495][ T8492] 9pnet_fd: Insufficient options for proto=fd [ 415.265277][ T8498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 416.067127][ T8511] CIFS mount error: No usable UNC path provided in device string! [ 416.067127][ T8511] [ 416.146389][ T8511] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 416.203353][ T8514] fuse: Bad value for 'fd' [ 417.435034][ T8530] syz.4.668: attempt to access beyond end of device [ 417.435034][ T8530] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 417.448298][ T8530] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32 [ 418.859498][ T8549] CIFS mount error: No usable UNC path provided in device string! [ 418.859498][ T8549] [ 418.900637][ T8549] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 420.131170][ T8570] netlink: 'syz.4.682': attribute type 1 has an invalid length. [ 420.139164][ T8570] netlink: 224 bytes leftover after parsing attributes in process `syz.4.682'. [ 421.262880][ T8588] CIFS mount error: No usable UNC path provided in device string! [ 421.262880][ T8588] [ 421.292430][ T8588] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 423.850236][ T8622] netlink: 'syz.4.700': attribute type 1 has an invalid length. [ 423.858052][ T8622] netlink: 224 bytes leftover after parsing attributes in process `syz.4.700'. [ 424.635773][ T8629] CIFS mount error: No usable UNC path provided in device string! [ 424.635773][ T8629] [ 424.666418][ T8629] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 425.101819][ T8638] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 427.868335][ T8662] netlink: 'syz.3.713': attribute type 1 has an invalid length. [ 427.876141][ T8662] netlink: 224 bytes leftover after parsing attributes in process `syz.3.713'. [ 428.235779][ T8664] overlayfs: failed to resolve './file0': -2 [ 434.246195][ T8721] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 434.254151][ T8721] netlink: 224 bytes leftover after parsing attributes in process `syz.2.729'. [ 434.447993][ T8719] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 440.095001][ T8784] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 440.259971][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.361254][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.175815][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 443.184879][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 443.193995][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 443.202937][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 443.211836][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 443.220719][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 443.229625][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 443.238554][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 443.247646][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 443.256598][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'. [ 445.045968][ T8822] overlayfs: failed to resolve './file0': -2 [ 446.686575][ T8840] fuse: Bad value for 'fd' [ 448.064400][ T8854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 449.512675][ T8867] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 449.695976][ T8875] fuse: Bad value for 'fd' [ 452.963784][ T8898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 453.115290][ T8900] overlayfs: failed to resolve './file0': -2 [ 455.440774][ T8918] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 455.880701][ T8921] syz.2.793: attempt to access beyond end of device [ 455.880701][ T8921] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 455.894102][ T8921] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 459.094671][ T8943] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 460.488866][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 461.234540][ T8958] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 462.767165][ T8972] syz.1.809: attempt to access beyond end of device [ 462.767165][ T8972] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 462.784313][ T8972] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 466.574758][ T8994] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 467.772832][ T9000] CIFS mount error: No usable UNC path provided in device string! [ 467.772832][ T9000] [ 467.786499][ T9000] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 467.996003][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 471.971566][ T9029] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 473.479662][ T9039] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 473.875859][ T9042] CIFS mount error: No usable UNC path provided in device string! [ 473.875859][ T9042] [ 473.886614][ T9042] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 475.853827][ T5802] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 476.814566][ T9073] overlayfs: failed to resolve './file1': -2 [ 476.973429][ T9076] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 477.668273][ T9085] CIFS mount error: No usable UNC path provided in device string! [ 477.668273][ T9085] [ 477.688482][ T9085] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 479.356964][ T9099] overlayfs: failed to resolve './file1': -2 [ 480.847279][ T9104] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 481.066942][ T9110] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 482.883795][ T9126] __nla_validate_parse: 44 callbacks suppressed [ 482.883832][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.856'. [ 487.903831][ T9148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.722016][ T9138] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 491.267799][ T9184] overlayfs: failed to resolve './file1': -2 [ 495.554097][ T9204] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 495.662986][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 495.672304][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 495.681327][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 495.690530][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 495.700044][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 495.709214][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 495.718216][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 495.727168][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 495.736418][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 495.745428][ T9215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.881'. [ 497.568915][ T9222] syz.3.883: attempt to access beyond end of device [ 497.568915][ T9222] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 497.584149][ T9222] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32 [ 498.624261][ T9229] 9pnet_fd: Insufficient options for proto=fd [ 500.976930][ T9235] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 501.655732][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.667177][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.069277][ T9257] __nla_validate_parse: 43 callbacks suppressed [ 502.069298][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 502.084909][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 502.094111][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 502.102993][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 502.111845][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 502.120846][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 502.129834][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 502.138924][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 502.149056][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 502.158084][ T9257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.893'. [ 502.509517][ T9259] loop7: detected capacity change from 0 to 7 [ 502.534365][ T9259] Dev loop7: unable to read RDB block 7 [ 502.540806][ T9259] loop7: unable to read partition table [ 502.946419][ T9259] loop7: partition table beyond EOD, truncated [ 502.996621][ T9259] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 503.087054][ T58] loop: Write error at byte offset 4, length 3584. [ 503.094815][ C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 503.104490][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 503.191717][ T9260] autofs4:pid:9260:autofs_fill_super: pipe file descriptor does not contain proper ops [ 504.087627][ T9270] 9pnet_fd: Insufficient options for proto=fd [ 504.544784][ T9275] syz.2.898: attempt to access beyond end of device [ 504.544784][ T9275] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 504.557738][ T9275] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 509.036573][ T9310] 9pnet_fd: Insufficient options for proto=fd [ 510.516599][ T9331] overlayfs: failed to resolve './file1': -2 [ 510.651469][ T9332] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 512.695533][ T9359] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 513.247104][ T1187] IPVS: starting estimator thread 0... [ 513.450626][ T9365] IPVS: using max 23 ests per chain, 55200 per kthread [ 513.491519][ T9368] overlayfs: failed to resolve './file1': -2 [ 513.993645][ T9371] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 514.179964][ T9376] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 514.216676][ T9376] fuse: Bad value for 'fd' [ 514.579629][ T9378] fuse: Bad value for 'group_id' [ 515.672409][ T9392] 9pnet_fd: Insufficient options for proto=fd [ 518.600040][ T9415] overlayfs: failed to resolve './file1': -2 [ 519.891701][ T9411] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 522.992101][ T9435] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 524.724418][ T9447] overlayfs: failed to resolve './file0': -2 [ 526.143763][ T9462] 9pnet_fd: Insufficient options for proto=fd [ 526.369891][ T9464] __nla_validate_parse: 45 callbacks suppressed [ 526.369907][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 526.558452][ T9468] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 526.568096][ T9467] fuse: Bad value for 'fd' [ 527.221950][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 527.231035][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 527.245813][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 527.261648][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 527.281993][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 527.315411][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 527.339864][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 527.371613][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 527.425181][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.950'. [ 528.262743][ T9473] overlayfs: missing 'lowerdir' [ 528.473589][ T9475] overlayfs: failed to resolve './file0': -2 [ 529.207753][ T9482] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 531.734064][ T9500] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 532.433825][ T9507] netlink: 'syz.2.965': attribute type 1 has an invalid length. [ 532.441722][ T9507] __nla_validate_parse: 44 callbacks suppressed [ 532.448073][ T9507] netlink: 224 bytes leftover after parsing attributes in process `syz.2.965'. [ 535.399090][ T9527] 9pnet_fd: Insufficient options for proto=fd [ 536.020840][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 536.240955][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 537.000415][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 537.055184][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 537.066185][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 537.075935][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 537.085092][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 537.096894][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 537.139638][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 539.600556][ T9550] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 539.608462][ T9550] __nla_validate_parse: 45 callbacks suppressed [ 539.608496][ T9550] netlink: 224 bytes leftover after parsing attributes in process `syz.4.976'. [ 540.313784][ T9552] overlayfs: missing 'lowerdir' [ 541.528833][ T9558] CIFS mount error: No usable UNC path provided in device string! [ 541.528833][ T9558] [ 541.539271][ T9558] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 541.549774][ T9558] fuse: Bad value for 'group_id' [ 541.768647][ T9561] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 542.034365][ T9563] syz.1.982: attempt to access beyond end of device [ 542.034365][ T9563] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 542.047156][ T9563] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 543.932539][ T9580] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 544.321494][ T9584] netlink: 'syz.1.987': attribute type 1 has an invalid length. [ 544.329221][ T9584] netlink: 224 bytes leftover after parsing attributes in process `syz.1.987'. [ 545.567457][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 545.725132][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 545.888355][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 546.022418][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 546.023377][ T9594] CIFS mount error: No usable UNC path provided in device string! [ 546.023377][ T9594] [ 546.031329][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 546.084196][ T9594] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 546.098139][ T9596] fuse: Bad value for 'group_id' [ 546.103320][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 546.260302][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 546.331596][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 546.340523][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 546.418675][ T9590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.989'. [ 546.615563][ T9600] syz.3.993: attempt to access beyond end of device [ 546.615563][ T9600] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 546.628493][ T9600] isofs_fill_super: bread failed, dev=nbd3, iso_blknum=16, block=32 [ 546.731697][ T9598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 548.152728][ T9618] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 549.061948][ T9621] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 550.042781][ T5879] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 550.134659][ T5879] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 550.220699][ T9635] CIFS mount error: No usable UNC path provided in device string! [ 550.220699][ T9635] [ 550.255404][ T9635] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 551.727359][ T9640] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 554.358430][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 554.358503][ T28] audit: type=1326 audit(1754967209.862:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.3.1007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79f738ebe9 code=0x0 [ 561.341681][ T9669] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 561.349467][ T9669] __nla_validate_parse: 44 callbacks suppressed [ 561.349478][ T9669] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1008'. [ 562.268183][ T9673] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 562.647490][ T9679] CIFS mount error: No usable UNC path provided in device string! [ 562.647490][ T9679] [ 562.657921][ T9679] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 563.077756][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 563.104773][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.111329][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.894465][ T9696] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 564.844136][ T9704] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 564.851963][ T9704] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1020'. [ 566.293077][ T9709] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.311319][ T9717] CIFS mount error: No usable UNC path provided in device string! [ 566.311319][ T9717] [ 566.350520][ T9717] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 566.762540][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 567.341671][ T9734] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 569.108151][ T9748] CIFS mount error: No usable UNC path provided in device string! [ 569.108151][ T9748] [ 569.204413][ T9748] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 573.559638][ T9784] CIFS mount error: No usable UNC path provided in device string! [ 573.559638][ T9784] [ 573.575483][ T9784] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 574.212463][ T9775] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 575.879264][ T9818] syz.4.1054: attempt to access beyond end of device [ 575.879264][ T9818] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 576.141099][ T28] audit: type=1326 audit(1754967231.642:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9816 comm="syz.3.1055" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79f738ebe9 code=0x0 [ 576.897143][ T9818] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32 [ 580.131498][ T9841] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 580.862230][ T28] audit: type=1326 audit(1754967236.272:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.3.1066" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79f738ebe9 code=0x0 [ 581.920872][ T9866] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.1069'. [ 582.191758][ T9867] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 582.198548][ T9867] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 582.207341][ T9867] vhci_hcd vhci_hcd.0: Device attached [ 583.243992][ T9869] vhci_hcd: connection closed [ 583.247649][ T58] vhci_hcd: stop threads [ 583.257983][ T1187] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 583.310450][ T58] vhci_hcd: release socket [ 583.316012][ T58] vhci_hcd: disconnect device [ 583.586257][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 586.131474][ T9891] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 587.595883][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 588.371908][ T1187] vhci_hcd: vhci_device speed not set [ 590.914193][ T5802] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 591.714396][ T28] audit: type=1326 audit(1754967247.212:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9951 comm="syz.1.1097" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f567918ebe9 code=0x0 [ 595.547214][ T9942] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 597.886778][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 598.048146][ T9987] overlayfs: missing 'lowerdir' [ 598.487802][ T28] audit: type=1326 audit(1754967253.992:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9985 comm="syz.3.1107" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79f738ebe9 code=0x0 [ 602.541599][ T9997] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 603.152668][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 603.380031][T10022] overlayfs: missing 'workdir' [ 603.644618][T10027] overlayfs: missing 'lowerdir' [ 604.998568][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1128'. [ 606.125906][ T5802] Bluetooth: Unexpected continuation frame (len 4) [ 607.706490][T10064] overlayfs: missing 'lowerdir' [ 610.817042][ T5802] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 613.077147][ T28] audit: type=1326 audit(1754967267.352:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10097 comm="syz.1.1141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f567918ebe9 code=0x0 [ 614.177161][T10118] syz.1.1147: attempt to access beyond end of device [ 614.177161][T10118] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 614.190211][T10118] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 617.862370][ T5879] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 618.510347][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.536611][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.569421][ T5879] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 618.616422][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.664131][ T5879] usb 2-1: config 0 descriptor?? [ 619.775716][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.796457][ T5879] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 619.848797][ T5879] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 620.444714][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.494959][ T5879] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x4D [ 620.591407][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.749330][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.035055][ T5879] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 621.451285][ T5879] usb 2-1: USB disconnect, device number 3 [ 623.490481][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 623.499914][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 623.510181][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 623.519181][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 623.528133][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 623.537103][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 623.546040][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 623.554973][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 623.607008][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 623.615952][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 624.774501][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.780879][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.857604][T10205] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 624.869184][T10205] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 624.877736][T10205] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 624.886502][T10205] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 624.900852][T10205] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 624.925001][T10205] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 626.246425][ T11] hsr_slave_0: left promiscuous mode [ 626.314722][ T11] hsr_slave_1: left promiscuous mode [ 626.328073][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 626.358006][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.460767][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.879706][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.908108][ T11] bridge_slave_1: left allmulticast mode [ 626.919518][ T11] bridge_slave_1: left promiscuous mode [ 626.937225][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.965113][ T11] bridge_slave_0: left allmulticast mode [ 626.981622][ T11] bridge_slave_0: left promiscuous mode [ 627.003429][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.022186][T10205] Bluetooth: hci1: command tx timeout [ 627.322215][ T11] veth1_macvtap: left promiscuous mode [ 627.327823][ T11] veth0_macvtap: left promiscuous mode [ 627.371933][ T11] veth1_vlan: left promiscuous mode [ 627.377467][ T11] veth0_vlan: left promiscuous mode [ 629.106020][T10205] Bluetooth: hci1: command tx timeout [ 630.569446][ T11] team0 (unregistering): Port device team_slave_1 removed [ 630.630905][ T11] team0 (unregistering): Port device team_slave_0 removed [ 630.704833][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.785029][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.840284][T10284] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 631.171597][T10205] Bluetooth: hci1: command tx timeout [ 633.252770][T10205] Bluetooth: hci1: command tx timeout [ 633.354311][ T11] bond0 (unregistering): Released all slaves [ 633.772927][T10203] chnl_net:caif_netlink_parms(): no params data found [ 635.192812][ T28] audit: type=1326 audit(1754967289.752:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10310 comm="syz.1.1200" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f567918ebe9 code=0x0 [ 635.978589][T10203] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.172153][T10203] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.222216][T10203] bridge_slave_0: entered allmulticast mode [ 636.229831][T10203] bridge_slave_0: entered promiscuous mode [ 636.239969][T10203] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.247286][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.254720][T10203] bridge_slave_1: entered allmulticast mode [ 636.262160][T10203] bridge_slave_1: entered promiscuous mode [ 637.128518][T10203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 637.302330][T10341] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 637.379049][T10342] input: syz1 as /devices/virtual/input/input5 [ 638.183761][T10203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.343515][T10353] 9pnet_fd: Insufficient options for proto=fd [ 638.580516][T10203] team0: Port device team_slave_0 added [ 638.588967][ T11] IPVS: stop unused estimator thread 0... [ 638.719867][T10203] team0: Port device team_slave_1 added [ 638.818663][T10203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.844559][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.038315][T10203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.141602][T10203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.221633][T10203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 639.274035][T10360] syz.1.1209: attempt to access beyond end of device [ 639.274035][T10360] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 639.287135][T10360] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 639.476753][T10203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 639.613056][T10203] hsr_slave_0: entered promiscuous mode [ 639.645734][T10203] hsr_slave_1: entered promiscuous mode [ 640.522771][T10203] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 640.563964][T10203] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 640.600958][T10203] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 640.614489][T10203] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 640.763415][T10203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.787931][T10203] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.838497][T10203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 640.849071][T10203] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 640.883280][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.890979][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.942584][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.949904][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.639608][T10203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.759307][T10408] program syz.4.1216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 642.894088][T10414] 9pnet_fd: Insufficient options for proto=fd [ 644.354562][T10203] veth0_vlan: entered promiscuous mode [ 644.584990][T10203] veth1_vlan: entered promiscuous mode [ 644.721789][T10437] syz.2.1222: attempt to access beyond end of device [ 644.721789][T10437] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 644.734794][T10437] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 645.107776][T10203] veth0_macvtap: entered promiscuous mode [ 645.143883][T10203] veth1_macvtap: entered promiscuous mode [ 645.171322][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.182177][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.998636][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.020068][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.036803][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 646.072777][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.145620][T10203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.207258][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.218654][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.257081][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.270105][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.285627][T10203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 646.301763][T10203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 646.343284][T10203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 646.359196][T10203] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.372145][T10203] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.516022][T10203] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.532301][T10203] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.761516][ T28] audit: type=1326 audit(1754967302.132:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10447 comm="syz.4.1226" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ea0d8ebe9 code=0x0 [ 650.501699][T10461] 9pnet_fd: Insufficient options for proto=fd [ 650.640849][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.709826][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.907205][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.928970][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.621296][T10480] syz.4.1231: attempt to access beyond end of device [ 651.621296][T10480] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 651.634498][T10480] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32 [ 654.291038][T10519] 9pnet_fd: Insufficient options for proto=fd [ 658.689836][T10573] 9pnet_fd: Insufficient options for proto=fd [ 659.189677][T10579] __nla_validate_parse: 45 callbacks suppressed [ 659.189693][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 659.205295][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 659.214634][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 659.223794][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 659.243646][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 659.252804][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 659.262669][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 659.271942][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 659.281435][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 659.290514][T10579] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1252'. [ 660.178476][T10582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.792123][T10621] 9pnet_fd: Insufficient options for proto=fd [ 665.651779][T10637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 667.724656][T10666] 9pnet_fd: Insufficient options for proto=fd [ 670.748538][T10677] __nla_validate_parse: 98 callbacks suppressed [ 670.748553][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 670.763817][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 670.791404][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 670.809377][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 670.852365][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 670.890776][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 670.900369][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 670.911480][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 670.930361][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 670.947460][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 674.380759][T10715] 9pnet_fd: Insufficient options for proto=fd [ 677.529874][T10750] 9pnet_fd: Insufficient options for proto=fd [ 680.071580][T10776] __nla_validate_parse: 96 callbacks suppressed [ 680.071594][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 680.086934][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 680.095920][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 680.104865][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 680.113827][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 680.123386][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 680.132691][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 680.141624][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 680.150552][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 680.159576][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1297'. [ 680.662333][T10780] binder_alloc: 10779: binder_alloc_buf, no vma [ 681.108981][T10794] 9pnet_fd: Insufficient options for proto=fd [ 684.552556][T10808] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 685.985475][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.994720][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.237036][T10840] 9pnet_fd: Insufficient options for proto=fd [ 686.586462][T10841] __nla_validate_parse: 43 callbacks suppressed [ 686.586479][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 686.663045][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 686.676305][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 686.715137][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 686.739145][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 687.055533][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 687.340326][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 687.359456][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 687.369773][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 687.632192][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1309'. [ 687.702721][T10849] fuse: Unknown parameter 'use00000000000000000000' [ 690.347524][T10883] 9pnet_fd: Insufficient options for proto=fd [ 692.462665][T10897] fuse: Unknown parameter 'user_i00000000000000000000' [ 695.123330][T10915] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 696.146417][T10934] fuse: Unknown parameter 'user_i00000000000000000000' [ 696.517821][T10941] __nla_validate_parse: 44 callbacks suppressed [ 696.517837][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 696.797174][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 697.162476][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 697.228137][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 697.632736][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 697.782981][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 698.280352][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 698.326273][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 698.379991][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 698.471250][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1334'. [ 699.086130][T10968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 700.000741][T10977] fuse: Unknown parameter 'user_i00000000000000000000' [ 705.701461][T11032] fuse: Unknown parameter 'user_id00000000000000000000' [ 706.574683][T11046] __nla_validate_parse: 44 callbacks suppressed [ 706.574697][T11046] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1359'. [ 707.692950][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 708.112265][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 708.228677][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 708.272107][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 708.292525][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 708.448486][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 708.458231][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 708.468508][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 708.481558][T11048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1360'. [ 713.520598][T11097] __nla_validate_parse: 44 callbacks suppressed [ 713.520673][T11097] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1370'. [ 714.881133][T11084] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 716.696950][T11101] syz.2.1371: attempt to access beyond end of device [ 716.696950][T11101] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 716.709962][T11101] isofs_fill_super: bread failed, dev=nbd2, iso_blknum=16, block=32 [ 718.260885][T11131] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 718.267431][T11131] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 718.276599][T11131] vhci_hcd vhci_hcd.0: Device attached [ 718.890507][T11133] vhci_hcd: connection closed [ 718.911682][ T3451] vhci_hcd: stop threads [ 718.951467][ T5856] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 718.961812][ T3451] vhci_hcd: release socket [ 718.966408][ T3451] vhci_hcd: disconnect device [ 720.025956][T11152] netlink: 4268 bytes leftover after parsing attributes in process `syz.1.1380'. [ 722.611427][T11159] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 722.829641][T11165] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 724.461610][ T5856] vhci_hcd: vhci_device speed not set [ 724.868925][T11182] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 724.875495][T11182] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 724.883237][T11182] vhci_hcd vhci_hcd.0: Device attached [ 725.108969][T11183] vhci_hcd: connection closed [ 725.110551][ T1314] vhci_hcd: stop threads [ 725.189751][ T1314] vhci_hcd: release socket [ 725.199717][ T8] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 725.210180][ T1314] vhci_hcd: disconnect device [ 725.227880][ T8] usb 41-1: enqueue for inactive port 0 [ 725.374000][T11193] syz.5.1390: attempt to access beyond end of device [ 725.374000][T11193] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 725.388073][T11193] isofs_fill_super: bread failed, dev=nbd5, iso_blknum=16, block=32 [ 725.422049][ T8] vhci_hcd: vhci_device speed not set [ 727.795922][T11202] netlink: 4268 bytes leftover after parsing attributes in process `syz.4.1391'. [ 731.815971][T11227] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 733.688270][T11246] syz.4.1400: attempt to access beyond end of device [ 733.688270][T11246] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 733.702955][T11246] isofs_fill_super: bread failed, dev=nbd4, iso_blknum=16, block=32 [ 734.146526][T11252] process 'syz.1.1401' launched './file0' with NULL argv: empty string added [ 734.192176][T11253] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1402'. [ 735.848132][T11267] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 740.165615][T11277] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 740.718263][T11295] syz.5.1413: attempt to access beyond end of device [ 740.718263][T11295] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 740.731371][T11295] isofs_fill_super: bread failed, dev=nbd5, iso_blknum=16, block=32 [ 741.220510][T11302] syz_tun: entered allmulticast mode [ 741.297418][T11302] dvmrp1: entered allmulticast mode [ 741.372743][T11301] syz_tun: left allmulticast mode [ 744.633969][T11320] binder: BINDER_SET_CONTEXT_MGR already set [ 744.646445][T11320] binder: 11319:11320 ioctl 4018620d 200000000040 returned -16 [ 745.082989][T11328] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 745.257398][T11330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 745.482575][T11318] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 745.489011][T11335] 9pnet_fd: Insufficient options for proto=fd [ 747.479092][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.497064][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.744868][T10205] Bluetooth: hci1: command 0x0406 tx timeout [ 750.791567][ T28] audit: type=1326 audit(1754967403.362:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11344 comm="syz.2.1432" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff0f58ebe9 code=0x0 [ 751.334835][T11354] binder: BINDER_SET_CONTEXT_MGR already set [ 751.359649][T11354] binder: 11352:11354 ioctl 4018620d 200000000040 returned -16 [ 755.621477][ T28] audit: type=1326 audit(1754967410.312:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11372 comm="syz.1.1440" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f567918ebe9 code=0x0 [ 758.765216][T11370] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 759.256972][ T28] audit: type=1326 audit(1754967411.612:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11380 comm="syz.1.1441" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f567918ebe9 code=0x0 [ 760.555707][T11394] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 760.796322][T11402] 9pnet_fd: Insufficient options for proto=fd [ 762.199965][ T28] audit: type=1326 audit(1754967417.572:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11408 comm="syz.5.1449" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f537898ebe9 code=0x0 [ 870.301401][ C1] ------------[ cut here ]------------ [ 870.307876][ C1] WARNING: CPU: 1 PID: 11418 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 870.318495][ C1] Modules linked in: [ 870.322403][ C1] CPU: 1 PID: 11418 Comm: syz.5.1451 Not tainted 6.6.101-syzkaller #0 [ 870.330553][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 870.340604][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 870.346948][ C1] Code: ff ff ff 48 c7 c7 a0 c4 ee 96 be 04 00 00 00 e8 2a a8 6c 00 48 89 df b8 01 00 00 00 87 05 4c 8f 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 54 d3 8c 74 47 48 c7 c0 9c b9 4a 8e 48 c1 e8 03 [ 870.366667][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 870.372739][ C1] RAX: 0000000000000000 RBX: ffffffff8cd35400 RCX: ffffffff81703546 [ 870.380722][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35400 [ 870.388689][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 870.396658][ C1] R10: dffffc0000000000 R11: fffffbfff2ddd894 R12: 0000000000002904 [ 870.404625][ C1] R13: 1ffff110171e7a6a R14: 0000000000000a02 R15: dffffc0000000000 [ 870.412592][ C1] FS: 00007f53798206c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 870.421515][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 870.428094][ C1] CR2: 000020000006b000 CR3: 0000000022516000 CR4: 00000000003506e0 [ 870.436064][ C1] Call Trace: [ 870.439343][ C1] [ 870.442200][ C1] rcu_core+0x612/0x1720 [ 870.446441][ C1] ? lock_chain_count+0x20/0x20 [ 870.451316][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 870.456708][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 870.461907][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 870.467141][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 870.472336][ C1] ? __run_timers+0x781/0x7d0 [ 870.477041][ C1] ? __run_timers+0x74e/0x7d0 [ 870.481719][ C1] ? detach_timer+0x2b0/0x2b0 [ 870.486392][ C1] ? detach_timer+0x2b0/0x2b0 [ 870.491067][ C1] ? lock_chain_count+0x20/0x20 [ 870.495928][ C1] handle_softirqs+0x280/0x820 [ 870.500704][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 870.505465][ C1] ? do_softirq+0x180/0x180 [ 870.509971][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 870.515172][ C1] __irq_exit_rcu+0xc7/0x190 [ 870.519769][ C1] ? irq_exit_rcu+0x20/0x20 [ 870.524272][ C1] irq_exit_rcu+0x9/0x20 [ 870.528524][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 870.534164][ C1] [ 870.537096][ C1] [ 870.540022][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 870.546007][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 870.552163][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 9a c8 f0 f6 48 89 df e8 b2 9a f1 f6 e8 4d 37 15 f7 fb bf 01 00 00 00 92 b2 e4 f6 65 8b 05 93 f8 8c 75 85 c0 74 02 5b c3 e8 70 da 89 [ 870.571760][ C1] RSP: 0018:ffffc90004f8fc98 EFLAGS: 00000282 [ 870.577839][ C1] RAX: ff0e7d0d23e9a700 RBX: ffff88807f45b780 RCX: ff0e7d0d23e9a700 [ 870.585811][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: 0000000000000001 [ 870.593778][ C1] RBP: ffff88807f45bc18 R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d [ 870.601759][ C1] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: 1ffff1100fe8b783 [ 870.609730][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 870.617708][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 870.622908][ C1] get_signal+0x11f5/0x1400 [ 870.627441][ C1] arch_do_signal_or_restart+0x96/0x780 [ 870.632990][ C1] ? get_sigframe_size+0x20/0x20 [ 870.637947][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 870.643439][ C1] exit_to_user_mode_loop+0x70/0x110 [ 870.648725][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 870.654269][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 870.659748][ C1] do_syscall_64+0x61/0xb0 [ 870.664184][ C1] ? clear_bhb_loop+0x40/0x90 [ 870.668853][ C1] ? clear_bhb_loop+0x40/0x90 [ 870.673527][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 870.679422][ C1] RIP: 0033:0x7f537898ebe7 [ 870.683852][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 870.703464][ C1] RSP: 002b:00007f5379820038 EFLAGS: 00000246 [ 870.709541][ C1] RAX: 00000000000000ca RBX: 00007f5378bb5fa0 RCX: 00007f537898ebe9 [ 870.717506][ C1] RDX: 00000000ffffffff RSI: 0000000000000006 RDI: 000020000000cffc [ 870.725472][ C1] RBP: 00007f5378a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 870.733449][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.741443][ C1] R13: 00007f5378bb6038 R14: 00007f5378bb5fa0 R15: 00007ffeb85b3da8 [ 870.749418][ C1] [ 870.752431][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 870.759699][ C1] CPU: 1 PID: 11418 Comm: syz.5.1451 Not tainted 6.6.101-syzkaller #0 [ 870.767836][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 870.777881][ C1] Call Trace: [ 870.781154][ C1] [ 870.783989][ C1] dump_stack_lvl+0x16c/0x230 [ 870.788667][ C1] ? show_regs_print_info+0x20/0x20 [ 870.793865][ C1] ? load_image+0x3b0/0x3b0 [ 870.798391][ C1] panic+0x2c0/0x710 [ 870.802295][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 870.806806][ C1] __warn+0x2e0/0x470 [ 870.810815][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 870.816534][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 870.822269][ C1] report_bug+0x2be/0x4f0 [ 870.826613][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 870.832372][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 870.838090][ C1] ? rcu_check_gp_start_stall+0x2de/0x460 [ 870.843807][ C1] handle_bug+0xcf/0x120 [ 870.848046][ C1] exc_invalid_op+0x1a/0x50 [ 870.852651][ C1] asm_exc_invalid_op+0x1a/0x20 [ 870.857507][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 870.863840][ C1] Code: ff ff ff 48 c7 c7 a0 c4 ee 96 be 04 00 00 00 e8 2a a8 6c 00 48 89 df b8 01 00 00 00 87 05 4c 8f 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 00 54 d3 8c 74 47 48 c7 c0 9c b9 4a 8e 48 c1 e8 03 [ 870.883449][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 870.889507][ C1] RAX: 0000000000000000 RBX: ffffffff8cd35400 RCX: ffffffff81703546 [ 870.897488][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35400 [ 870.905452][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 870.913412][ C1] R10: dffffc0000000000 R11: fffffbfff2ddd894 R12: 0000000000002904 [ 870.921394][ C1] R13: 1ffff110171e7a6a R14: 0000000000000a02 R15: dffffc0000000000 [ 870.929367][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 870.935092][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 870.940810][ C1] rcu_core+0x612/0x1720 [ 870.945047][ C1] ? lock_chain_count+0x20/0x20 [ 870.949890][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 870.955283][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 870.960476][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 870.965672][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 870.970858][ C1] ? __run_timers+0x781/0x7d0 [ 870.975532][ C1] ? __run_timers+0x74e/0x7d0 [ 870.980210][ C1] ? detach_timer+0x2b0/0x2b0 [ 870.984878][ C1] ? detach_timer+0x2b0/0x2b0 [ 870.989547][ C1] ? lock_chain_count+0x20/0x20 [ 870.994396][ C1] handle_softirqs+0x280/0x820 [ 870.999153][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 871.003928][ C1] ? do_softirq+0x180/0x180 [ 871.008438][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 871.013633][ C1] __irq_exit_rcu+0xc7/0x190 [ 871.018231][ C1] ? irq_exit_rcu+0x20/0x20 [ 871.022733][ C1] irq_exit_rcu+0x9/0x20 [ 871.026978][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 871.032606][ C1] [ 871.035528][ C1] [ 871.038451][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 871.044430][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 871.050231][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 9a c8 f0 f6 48 89 df e8 b2 9a f1 f6 e8 4d 37 15 f7 fb bf 01 00 00 00 92 b2 e4 f6 65 8b 05 93 f8 8c 75 85 c0 74 02 5b c3 e8 70 da 89 [ 871.069826][ C1] RSP: 0018:ffffc90004f8fc98 EFLAGS: 00000282 [ 871.075887][ C1] RAX: ff0e7d0d23e9a700 RBX: ffff88807f45b780 RCX: ff0e7d0d23e9a700 [ 871.083867][ C1] RDX: dffffc0000000000 RSI: ffffffff8aaaba40 RDI: 0000000000000001 [ 871.091859][ C1] RBP: ffff88807f45bc18 R08: ffffffff8e4a84ef R09: 1ffffffff1c9509d [ 871.099842][ C1] R10: dffffc0000000000 R11: fffffbfff1c9509e R12: 1ffff1100fe8b783 [ 871.107811][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 871.115797][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 871.121003][ C1] get_signal+0x11f5/0x1400 [ 871.125522][ C1] arch_do_signal_or_restart+0x96/0x780 [ 871.131067][ C1] ? get_sigframe_size+0x20/0x20 [ 871.136013][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 871.141484][ C1] exit_to_user_mode_loop+0x70/0x110 [ 871.146778][ C1] exit_to_user_mode_prepare+0xb1/0x140 [ 871.152322][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 871.157782][ C1] do_syscall_64+0x61/0xb0 [ 871.162194][ C1] ? clear_bhb_loop+0x40/0x90 [ 871.166862][ C1] ? clear_bhb_loop+0x40/0x90 [ 871.171576][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 871.177498][ C1] RIP: 0033:0x7f537898ebe7 [ 871.181905][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 871.201520][ C1] RSP: 002b:00007f5379820038 EFLAGS: 00000246 [ 871.207602][ C1] RAX: 00000000000000ca RBX: 00007f5378bb5fa0 RCX: 00007f537898ebe9 [ 871.215564][ C1] RDX: 00000000ffffffff RSI: 0000000000000006 RDI: 000020000000cffc [ 871.223536][ C1] RBP: 00007f5378a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 871.231506][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 871.239559][ C1] R13: 00007f5378bb6038 R14: 00007f5378bb5fa0 R15: 00007ffeb85b3da8 [ 871.247556][ C1] [ 871.250928][ C1] Kernel Offset: disabled [ 871.255738][ C1] Rebooting in 86400 seconds..