last executing test programs: 2m49.724326026s ago: executing program 3 (id=298): ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7", 0x4c}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x1) write$cgroup_int(r5, &(0x7f00000003c0)=0xd9d, 0x12) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000400)=ANY=[@ANYBLOB="01dbc211"], 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000040)) unshare(0x20000400) 2m48.724131493s ago: executing program 3 (id=302): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(r2, &(0x7f0000000000)="81", 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x70, 0x0, 0x9, 0x305, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x4}}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x70}}, 0x0) close(r2) syz_genetlink_get_family_id$nl80211(0x0, r5) r6 = syz_open_dev$loop(0x0, 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) recvmsg(r5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) openat$procfs(0xffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m44.82829999s ago: executing program 3 (id=312): socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0xe27) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x6, 0x30, 0xffffffffffffffff, 0x80000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x800012, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r2) setpgid(0x0, r2) mount$9p_fd(0x0, 0x0, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r3, 0x810c9365, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = open(&(0x7f0000000000)='.\x00', 0x500, 0x0) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000100)='./file2\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r6, 0x9360, 0x800000000000001) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2m44.636050543s ago: executing program 3 (id=315): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000000)=0xc76e, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xb}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2) r4 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x2}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) recvmmsg(r7, &(0x7f0000001280)=[{{&(0x7f0000000440)=@rc={0x1f, @none}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f00000012c0)=""/261, 0x105}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000840)=""/130, 0x82}, {&(0x7f00000005c0)=""/201, 0xc9}, {&(0x7f0000000780)=""/106, 0x6a}, {&(0x7f0000000a00)=""/226, 0xe2}, {&(0x7f00000001c0)=""/12, 0xc}, {&(0x7f0000000b00)=""/82, 0x52}], 0x9, &(0x7f0000000c00)=""/209, 0xd1}, 0x1}, {{0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000d80)=""/193, 0xc1}, {&(0x7f0000000e80)=""/102, 0x66}, {&(0x7f0000000f00)=""/146, 0x92}, {&(0x7f0000000fc0)=""/148, 0x94}, {&(0x7f0000001080)=""/218, 0xda}, {&(0x7f0000001180)=""/186, 0xba}], 0x6}, 0xb1f}], 0x2, 0x100, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaae482a937000000000008004500fde1000000000011907800000000e000000100004e20009c907802000000000000000000000082d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d170194bd7b1b034999bd8d5e0e5c42a23de36a21643b33cfa231a427159c"], 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x2007, @fd_index=0x7, 0x0, 0x0}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m43.828170885s ago: executing program 3 (id=318): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="09000000040000000400", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00LN\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioprio_get$pid(0x2, r3) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r8, &(0x7f0000000580), 0x0}, 0x20) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) 2m43.755444828s ago: executing program 32 (id=318): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="09000000040000000400", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00LN\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) ioprio_get$pid(0x2, r3) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r8, &(0x7f0000000580), 0x0}, 0x20) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) 7.393005611s ago: executing program 0 (id=1068): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x20000009) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_batadv\x00', {0x2}, 0x8001}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$TCFLSH(r6, 0x400455c8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x41, 0x1, 0x70bd27, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x1}]}, 0x20}}, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0xfffffffe, {}, 0x5, 0x107ffffffe}}}, 0x90) 6.546566256s ago: executing program 1 (id=1069): ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7", 0x4c}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x1) write$cgroup_int(r4, &(0x7f00000003c0)=0xd9d, 0x12) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000400)=ANY=[@ANYBLOB="01dbc211"], 0x2, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) unshare(0x4040400) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$FICLONE(r6, 0x40049409, r5) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) 6.018737324s ago: executing program 4 (id=1073): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000930a000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000020000009511000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_clone(0x800c000, &(0x7f0000001480)="627807434619734911420e123cb6f44fb54d82f86f3720b1d5ecd9651a9fcb2a1c358b9cd99a9da0b00953486764e0c7d13faa0d43ad3164e14aa9d4eafc2ae39ce2be18d63433b7dfc78608200e69639a", 0x51, 0x0, 0x0, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[], 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000440)=ANY=[@ANYBLOB="4debcb6e8551d0723d52caada04d0af8053be4fdbc3482d4365e8cc17730172fa94fccbe27853e5c483cdb45a64eb9fba9007e82592ff3edd128001937b045027f38aa857b6353e75826a682483fafb7199f67d058c36b7440f1ef83b1dc8fecaab8c2b884e915e60e49a4d105c267a0e1d3d9043391a8ed60f64d3e757ae7ef140be6cc4d446bbab98117eb0d421b10924c0422791fc67b8f82ee682cb54d1dfb9e2a6b47319306e80f62d92566526f9d616f6626da7fc890fcf1d75f44151688e4b81bdc0dfd0a8279e716a011852a"]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x40}}, 0x806) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009000000000000000002000100000000000000000200000000030005000000000002000000e00000010000000000000000017f8c98dc0ddf9e9bfa93bb4fd8a47ec23ff0b06108246e1805611c3d4aa3f6f9dd6ba5768ef53b8e9d0166"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x2000c080}, 0x840) 5.442898845s ago: executing program 1 (id=1074): ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186", 0x4b}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x1) write$cgroup_int(r5, &(0x7f00000003c0)=0xd9d, 0x12) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000400)=ANY=[@ANYBLOB="01dbc211"], 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000040)) unshare(0x20000400) 4.925952956s ago: executing program 4 (id=1076): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, 0x0, 0x0) r3 = timerfd_create(0x0, 0x80000) timerfd_settime(r3, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4.847049371s ago: executing program 0 (id=1077): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x101, &(0x7f0000005280)) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0), 0x0, 0x10, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000001080)={0x6, 0x10, 0x2, 0x5, 0xfe, 0x9, 0x2, 0x7f, 0x1, 0x71, 0x4, 0x53, 0xb}, 0xe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000140)) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x316}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) 4.846720452s ago: executing program 2 (id=1078): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, 0x0, 0x0) r3 = timerfd_create(0x0, 0x80000) timerfd_settime(r3, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4.441973745s ago: executing program 1 (id=1079): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540), 0x0, 0x0) close(r4) 3.577158311s ago: executing program 4 (id=1080): r0 = socket$inet(0x2, 0x2, 0x1) creat(&(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\\', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x54}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe000001000000001400120002"], 0x30}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) ioperm(0x8, 0x7, 0x1) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) 3.575735727s ago: executing program 0 (id=1088): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f0000000440)=ANY=[@ANYRES32=r1], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) msgsnd(0x0, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x1004, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x20048040}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x40000) read$FUSE(r1, &(0x7f0000005380)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r8, 0x201, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r8, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000400)=0x1, 0x4) 3.469730475s ago: executing program 2 (id=1081): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x7) writev(r0, &(0x7f00000001c0), 0x3f) syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x40002) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1f4) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x150) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f0000000500)={0x2011, 0x1, 0x1}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="10000000010000002dbd7000000000a0"], 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1ff}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={0x0, 0x3, r4, 0x200}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'sh\x00', 0x13}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c0000000000119078000000000000000091d3ec60ad2c75888ede6100144e2100009078d3957967f9a75f00ddc1b38bc02515fdfb84efd42e95b7d08c3a13234789f2d060f70d0f01427ce0fe44e2edd023aaa98089b2feec225ba89bf1a3ed672c2d33b9387edcf5025387658af4102a781bd97a318fb106134089"], 0x0) landlock_restrict_self(r1, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 3.41740601s ago: executing program 2 (id=1082): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x0, 0x9, 0x5}, {0x15, 0x2, 0x0, 0x401, 0x8001, 0x1404}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300)='gfs2meta\x00', 0x7416, &(0x7f0000000540)='usrqu\x92ta\xd1\x19\xdc1X\xd28h\x14\xeb\x8b\xec\xa3\x18\xc2a\x94\x89\xeddF`\xa2s\x15x\xd9\xf7+\x97\xd2\xcc\\\xac\aB\xfe\x8d\xaa\xd54\xca\xc3Y\x1cDRBn\xb8C\x14Gs\xefrE\xd9\xcf#\xb8X\xc2\x19\xd6\xb9\x1cE\xebIZ\xf8\xa5\x9e\xdcUe\xf7\xfcF+\xbd-i\x12S7\xdb\xd1n\x8f\x9e\xe7\xbc\xfc&}\x7f\v\x1cJ\x1b\xdd\xf9\xd7\x1e7\xe1[\x8f\'\x0e]\xd8r\x7frC\x9cX\xe1{)\x00\x9d\xe2(e}<\xb5\xb7I>1\xab\xfb\x01%\xd9\xa1M\x02_\\%?[H\xe4%\xc3WDf`\a\xa6\xbb\a\x0e\xd8\xb0\x9aq\xd8\xfa\x84\xdc') chdir(0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000002bc0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40081271, &(0x7f0000000280)=0x2000) syz_io_uring_setup(0x1005c23, &(0x7f0000000240)={0x0, 0x0, 0x13290, 0x3}, &(0x7f0000000100), &(0x7f0000000000)) 2.932770289s ago: executing program 1 (id=1083): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x28044010) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r3, 0x0, 0x10000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2b, 0x80801, 0x1) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x1c) poll(&(0x7f0000000040)=[{r6, 0x400}], 0x1, 0x9) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x94, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x10, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5d68, 0x9, 0x25e7, 0x80000000, 0x7ff}, 0x7, 0x0, 0x0, 0x7, 0xfffffffa, 0x2, 0x0, 0x3, 0x6, 0x8, {0xe, 0x8, 0x80000000, 0x7, 0xfff}}}}]}, 0x94}}, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r9 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000280)=""/239, 0xef}], 0x1, 0x0, 0x3c}, 0x2) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) 2.460951426s ago: executing program 4 (id=1084): ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7", 0x4c}, {0x0}], 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x1) write$cgroup_int(r5, &(0x7f00000003c0)=0xd9d, 0x12) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000400)=ANY=[@ANYBLOB="01dbc211"], 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000040)) unshare(0x20000400) 2.321343162s ago: executing program 0 (id=1085): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file1\x00', &(0x7f00000004c0), 0x0, &(0x7f00000002c0)=ANY=[]) mkdir(&(0x7f0000000000)='./file0\x00', 0x4d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{0x10000000, 0x1, 0x200a, 0xb}, {0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r6) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000040)={0xa}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8001, &(0x7f0000000000)=0x6, 0x8, 0x0) mount$9p_virtio(&(0x7f0000000000), 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB]) read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020}, 0x2020) r7 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r7, 0x0, 0x58) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 2.296250838s ago: executing program 2 (id=1086): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000100000002"], 0x0, 0x4e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)=0x10, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$netlink(0x10, 0x3, 0x14) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r2, 0x0, 0x0) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0xb49e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200), 0xa0201, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a80)=""/20, 0x14}], 0x1}, 0x0) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25CTLCON(r9, 0x541b, &(0x7f0000000100)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x63, 0xffffffffffff0001, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$FICLONERANGE(r6, 0x4020940d, &(0x7f0000000000)={{r6}, 0x1, 0x7, 0x101}) 1.742845297s ago: executing program 1 (id=1087): ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec00004000f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186", 0x4b}, {0x0}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x1) write$cgroup_int(r5, &(0x7f00000003c0)=0xd9d, 0x12) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000400)=ANY=[@ANYBLOB="01dbc211"], 0x2, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r6 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, r6}, &(0x7f0000000240), &(0x7f0000000040)) unshare(0x20000400) 1.482983349s ago: executing program 4 (id=1089): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x800, 0x70bd2c, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, 0x0, 0x0) r3 = timerfd_create(0x0, 0x80000) timerfd_settime(r3, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.262636886s ago: executing program 2 (id=1090): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x800, 0x70bd2c}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f000060c000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff5000/0x3000)=nil) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x7c45, &(0x7f0000000080)={0x0, 0x20, 0x13100, 0x0, 0xfffffffc}, 0x0, 0x0) r3 = timerfd_create(0x0, 0x80000) timerfd_settime(r3, 0x1, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100), &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.262319558s ago: executing program 0 (id=1091): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, 0x0, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendto$inet6(r4, &(0x7f0000000240)="c4", 0x1, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f00000003c0)={'syztnl0\x00', r3, 0x4, 0xaf, 0x3, 0x8, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x80, 0x6, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000ed0071101e000e0000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 732.614066ms ago: executing program 0 (id=1092): syz_open_dev$cec(&(0x7f00000002c0), 0xffffffffffffffff, 0x210380) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xffaa, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_io_uring_setup(0x1000110d, &(0x7f0000000140)={0x0, 0xbcb4, 0x1, 0x1}, &(0x7f00000000c0), &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT=r4], 0x125) r5 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT=r6, @ANYRES32, @ANYBLOB="f3abc73d29aafbb54c2e7299c4f718d1bb76c1489b2de937fed5134d1f68bd42893250e08224b7b837a3d917f439b6ae92cb2e7784a7c9cefb14399218c755a5a74a63aa274727dabc3a42af29e714ade6c5cca6bd0098d82a3f16aa3fb5881f8c5f0193195427500adc1795848869836561c82a8158f5af9875294b43b805f3a219a164dc16ce4f", @ANYRES32, @ANYRESDEC=r0], 0x50) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0x48, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000080)="1a00006d6ad96f66a7d9c191", 0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r7, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) listen(r6, 0x20000005) r8 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 652.90231ms ago: executing program 1 (id=1093): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00B\x00', "006e34e400"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [], {0x20, 0x1}, [], {0x10, 0x2}}, 0x24, 0x2) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, &(0x7f0000000100)) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x10, 0x6, 0x4ec, 0x190, 0x33c, 0x190, 0x190, 0xc8, 0x424, 0x424, 0x424, 0x424, 0x424, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @loopback}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'pimreg\x00', 'veth1_macvtap\x00'}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [0xffffffff, 0xffffff00, 0xff000000, 0xff], [], 'sit0\x00', 'gretap0\x00', {}, {0xff}, 0x67, 0x0, 0x1, 0x40}, 0x0, 0xa4, 0xe4}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "24390d4d8e6abaf968029911108a220a07a511dec200"}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x3f, 0x9, 0x4, 0x13}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x548) sync_file_range(r2, 0x80004004, 0x6, 0x2) listen(r0, 0x0) 182.84309ms ago: executing program 2 (id=1094): r0 = socket$inet(0x2, 0x2, 0x1) creat(&(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77df2a87ba315ab8da00", "f9fe8002", "acc28000", "1eb15fbb", ["d8085781ae0cff21223446fe", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00']}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\\', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x54}}, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe000001000000001400120002"], 0x30}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) ioperm(0x8, 0x7, 0x1) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2004000) 0s ago: executing program 4 (id=1095): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x8, 0x2, 0xfffffffe}) r4 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141101) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) r7 = dup(r5) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r7}, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x2) readv(r9, 0x0, 0x0) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES64=r9], 0x20}}, 0x20040840) io_uring_enter(r8, 0x2ded, 0x4000, 0x42, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x20, 0x0, {0xa, 0x0, 0x4}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x800) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x80) kernel console output (not intermixed with test programs): ady present! [ 45.745113][ T5950] Cannot create hsr debugfs directory [ 45.764563][ T5946] hsr_slave_0: entered promiscuous mode [ 45.766539][ T5946] hsr_slave_1: entered promiscuous mode [ 45.768340][ T5946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.770529][ T5946] Cannot create hsr debugfs directory [ 45.813955][ T5952] hsr_slave_0: entered promiscuous mode [ 45.815940][ T5952] hsr_slave_1: entered promiscuous mode [ 45.817831][ T5952] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.819992][ T5952] Cannot create hsr debugfs directory [ 46.015827][ T5943] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.020245][ T5943] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.027646][ T5943] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 46.033243][ T5943] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 46.046128][ T5950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.051571][ T5950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 46.054663][ T5950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 46.065702][ T5950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 46.084443][ T5946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 46.088256][ T5946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 46.099380][ T5946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 46.104123][ T5946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 46.119926][ T5952] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.124720][ T5952] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.128898][ T5952] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.135213][ T5952] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.165962][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.193780][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.200811][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.203069][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.219727][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.221875][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.231788][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.239297][ T5946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.249169][ T5952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.267085][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.273201][ T5946] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.279057][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.281138][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.290898][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.293024][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.298624][ T5952] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.307695][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.310522][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.315054][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.317329][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.332377][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.334493][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.337907][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.340022][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.387694][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.412983][ T5943] veth0_vlan: entered promiscuous mode [ 46.417036][ T5943] veth1_vlan: entered promiscuous mode [ 46.429655][ T5943] veth0_macvtap: entered promiscuous mode [ 46.434510][ T5943] veth1_macvtap: entered promiscuous mode [ 46.439275][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.454093][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.457999][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.463481][ T5952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.467461][ T5943] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.471095][ T5943] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.476312][ T5943] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.478867][ T5943] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.490379][ T5946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.517770][ T5950] veth0_vlan: entered promiscuous mode [ 46.529851][ T5950] veth1_vlan: entered promiscuous mode [ 46.536886][ T5952] veth0_vlan: entered promiscuous mode [ 46.548934][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.552880][ T5952] veth1_vlan: entered promiscuous mode [ 46.553070][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.567454][ T5950] veth0_macvtap: entered promiscuous mode [ 46.572422][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.574952][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.587141][ T5946] veth0_vlan: entered promiscuous mode [ 46.589761][ T5950] veth1_macvtap: entered promiscuous mode [ 46.599180][ T5952] veth0_macvtap: entered promiscuous mode [ 46.607684][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.610774][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.614355][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.616701][ T5946] veth1_vlan: entered promiscuous mode [ 46.623117][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.624125][ T5952] veth1_macvtap: entered promiscuous mode [ 46.630988][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.635899][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.640035][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.646550][ T5950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.649065][ T5950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.652365][ T5950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.661967][ T5950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.673701][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.676775][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.679552][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.682851][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.687101][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.698468][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.701534][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.704528][ T5952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.707521][ T5952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.710748][ T5952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.715037][ T5952] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.717567][ T5952] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.720044][ T5952] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.723140][ T5952] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.733042][ T5946] veth0_macvtap: entered promiscuous mode [ 46.739133][ T5946] veth1_macvtap: entered promiscuous mode [ 46.751346][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.754188][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.760978][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.764857][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.767757][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.770772][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.773841][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.776872][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.780719][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.794956][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.795050][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.797975][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.803602][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.806451][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.809457][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.812586][ T5946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.815670][ T5946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.819087][ T5946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.826853][ T5946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.829439][ T5946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.832083][ T5946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.834786][ T5946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.843626][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.846060][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.862703][ T5948] Bluetooth: hci1: command tx timeout [ 46.870156][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.872700][ T5948] Bluetooth: hci3: command tx timeout [ 46.873217][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.874689][ T5948] Bluetooth: hci2: command tx timeout [ 46.878400][ T5948] Bluetooth: hci0: command tx timeout [ 46.899023][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.908199][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.927659][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.930816][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.191480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 47.291466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 47.295735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 47.404167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 48.233893][ T6034] ipvlan1: entered allmulticast mode [ 48.235513][ T6034] veth0_vlan: entered allmulticast mode [ 48.905983][ T68] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 48.941785][ T64] Bluetooth: hci0: command tx timeout [ 48.943244][ T5948] Bluetooth: hci2: command tx timeout [ 48.946061][ T64] Bluetooth: hci3: command tx timeout [ 48.947184][ T5308] Bluetooth: hci1: command tx timeout [ 49.321725][ T6012] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 49.449306][ T6057] bond0: entered promiscuous mode [ 49.450852][ T6057] bond_slave_0: entered promiscuous mode [ 49.452739][ T6057] bond_slave_1: entered promiscuous mode [ 49.481316][ T6004] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 49.631368][ T6004] usb 5-1: Using ep0 maxpacket: 16 [ 49.637092][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 49.640365][ T6004] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1296, setting to 1024 [ 49.649323][ T6004] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 49.653486][ T6004] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 49.656216][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.667086][ T6004] usb 5-1: config 0 descriptor?? [ 49.669681][ T6044] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 49.985970][ T6004] usbhid 5-1:0.0: can't add hid device: -71 [ 49.989932][ T6004] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 50.002315][ T6004] usb 5-1: USB disconnect, device number 2 [ 51.031308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 51.085279][ T64] Bluetooth: hci3: command tx timeout [ 51.086107][ T5955] Bluetooth: hci1: command tx timeout [ 51.086937][ T64] Bluetooth: hci0: command tx timeout [ 51.105466][ T5948] Bluetooth: hci2: command tx timeout [ 51.111441][ T5957] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.261418][ T5957] usb 7-1: Using ep0 maxpacket: 32 [ 51.264291][ T5957] usb 7-1: config 0 interface 0 has no altsetting 0 [ 51.268110][ T5957] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 51.272269][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.275582][ T5957] usb 7-1: Product: syz [ 51.277491][ T5957] usb 7-1: Manufacturer: syz [ 51.279427][ T5957] usb 7-1: SerialNumber: syz [ 51.288421][ T5957] usb 7-1: config 0 descriptor?? [ 51.766696][ T5957] gs_usb 7-1:0.0: Couldn't get device config: (err=-71) [ 51.768788][ T5957] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 51.774724][ T5957] usb 7-1: USB disconnect, device number 2 [ 53.101426][ T5948] Bluetooth: hci0: command tx timeout [ 53.101460][ T5955] Bluetooth: hci3: command tx timeout [ 53.182932][ T5955] Bluetooth: hci1: command tx timeout [ 53.183007][ T5948] Bluetooth: hci2: command tx timeout [ 56.082002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.182258][ T6129] netfs: Couldn't get user pages (rc=-14) [ 56.218614][ T6129] 9pnet_virtio: no channels available for device syz [ 56.221986][ T6129] fuse: Bad value for 'fd' [ 56.251307][ T6008] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 56.261421][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.264536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.322023][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.328327][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 56.334738][ T6137] bridge_slave_1: left allmulticast mode [ 56.337194][ T6137] bridge_slave_1: left promiscuous mode [ 56.340556][ T6137] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.401491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.421874][ T6008] usb 5-1: Using ep0 maxpacket: 32 [ 56.432156][ T6008] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 56.437245][ T6008] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 56.439863][ T6008] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 56.443383][ T6008] usb 5-1: Product: syz [ 56.444719][ T6008] usb 5-1: Manufacturer: syz [ 56.446078][ T6008] usb 5-1: SerialNumber: syz [ 56.448234][ T6008] usb 5-1: config 0 descriptor?? [ 56.450019][ T6119] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.740521][ T6146] can0: slcan on ttyS3. [ 57.122061][ T6008] usb 5-1: USB disconnect, device number 3 [ 57.403015][ T6139] can0 (unregistered): slcan off ttyS3. [ 57.558368][ T6173] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.392102][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 58.541973][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 58.544651][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.547736][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.550595][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 58.554446][ T25] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 58.556906][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.563628][ T25] usb 5-1: config 0 descriptor?? [ 58.974509][ T25] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 58.977554][ T25] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 58.981904][ T25] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 58.984276][ T25] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 58.986427][ T25] shield 0003:0955:7214.0002: unknown main item tag 0x0 [ 58.992239][ T25] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 59.010861][ T25] shield 0003:0955:7214.0002: Registered Thunderstrike controller [ 59.015524][ T25] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 59.175397][ T6206] random: crng reseeded on system resumption [ 59.188998][ T25] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 59.189695][ T73] usb 5-1: USB disconnect, device number 4 [ 59.192455][ T25] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 59.199143][ T25] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 59.203210][ T25] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 59.719289][ T6267] Invalid option length (656790) for dns_resolver key [ 60.852368][ T6275] block nbd3: shutting down sockets [ 61.263479][ T6295] overlayfs: conflicting options: userxattr,verity=require [ 61.272589][ T6295] sg_read: process 48 (syz.2.53) changed security contexts after opening file descriptor, this is not allowed. [ 61.827638][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 61.900315][ T6306] Zero length message leads to an empty skb [ 61.983649][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 61.987128][ T25] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 61.991929][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 61.995467][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 61.999863][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 62.008397][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 62.011504][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 62.014434][ T25] usb 5-1: Product: syz [ 62.016129][ T25] usb 5-1: Manufacturer: syz [ 62.020827][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 62.023051][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 62.037273][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 62.039836][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 62.226731][ T25] usb 5-1: USB disconnect, device number 5 [ 62.891426][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 63.064946][ T25] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 63.067510][ T25] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 63.070443][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 63.073085][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 63.076271][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 63.099453][ T25] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 63.102351][ T25] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 63.105040][ T25] usb 5-1: Product: syz [ 63.106313][ T25] usb 5-1: Manufacturer: syz [ 63.126544][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 63.128122][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 63.138832][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 63.141332][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 63.196523][ T6336] syz.3.65 uses obsolete (PF_INET,SOCK_PACKET) [ 63.737740][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.739883][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.741953][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.743785][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.745608][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.747384][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.749296][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.751261][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.753459][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.755793][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.758012][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.759774][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.761657][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.763434][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.765246][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.767058][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.768838][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.770634][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.772442][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.774235][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.776420][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.778770][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.781082][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.783487][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.785482][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.787246][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.789025][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.790903][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.792558][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.794378][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.796247][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.798116][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.800306][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.802489][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.804275][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.806098][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.807918][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.809304][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 63.809780][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.812151][ T6376] bridge_slave_0: left allmulticast mode [ 63.813874][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.815432][ T6376] bridge_slave_0: left promiscuous mode [ 63.816985][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.819601][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.820977][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.824142][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.825973][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.827767][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.829446][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.831479][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.833803][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.836094][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.837915][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.839548][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.841341][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.843017][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.844817][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.846844][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.849172][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.851497][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.853912][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.856099][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.858535][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.860803][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.863241][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.865749][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.868046][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.870472][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.872782][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.875228][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.877678][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.880143][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.882605][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.885109][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.887413][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.889855][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.892172][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.894740][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.897037][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.899463][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.901754][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.904232][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.906501][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.908918][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.911223][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.913694][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.915970][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.918425][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.920707][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.923065][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.925559][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.927784][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.930213][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.932487][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.935111][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.937765][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.940195][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.942663][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.945129][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.947579][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.950033][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.952537][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.955038][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.957500][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.959799][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.962217][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.964690][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.967116][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.968941][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.970745][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.972447][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.974198][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.975828][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.977658][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.979293][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.981029][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.982737][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.985839][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.987568][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.989478][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.991272][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.993355][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.995792][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 63.997598][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 63.999349][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.000976][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 64.002814][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.004511][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.006130][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 64.007933][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.009714][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.011489][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.013815][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.016257][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.018299][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.020741][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.023183][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.025593][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.027964][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.030200][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 64.031953][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.034255][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 64.036814][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.038804][ C2] cdc_wdm 5-1:1.0: Stall on int endpoint [ 64.040483][ C2] cdc_wdm 5-1:1.0: Cannot schedule work [ 64.043101][ C2] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 64.046615][ T9] usb 5-1: USB disconnect, device number 6 [ 64.371706][ T6384] random: crng reseeded on system resumption [ 64.379290][ T6384] Restarting kernel threads ... done. [ 64.391485][ T39] audit: type=1326 audit(1738491449.176:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.3.70" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf744e579 code=0x0 [ 65.479237][ T6389] orangefs_mount: mount request failed with -4 [ 66.504473][ T6417] netlink: 'syz.3.77': attribute type 9 has an invalid length. [ 68.231680][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.81'. [ 68.234560][ T6431] bridge_slave_1: left allmulticast mode [ 68.239077][ T6431] bridge_slave_1: left promiscuous mode [ 68.240843][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.247978][ T6431] bridge_slave_0: left allmulticast mode [ 68.249780][ T6431] bridge_slave_0: left promiscuous mode [ 68.251912][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.563574][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 70.795446][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.798379][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.782394][ T6492] process 'syz.2.93' launched './file0' with NULL argv: empty string added [ 71.790041][ T6492] ======================================================= [ 71.790041][ T6492] WARNING: The mand mount option has been deprecated and [ 71.790041][ T6492] and is ignored by this kernel. Remove the mand [ 71.790041][ T6492] option from the mount to silence this warning. [ 71.790041][ T6492] ======================================================= [ 72.782248][ T6500] random: crng reseeded on system resumption [ 73.613010][ T6517] Process accounting resumed [ 75.805244][ T6543] usb 2-1: USB disconnect, device number 2 [ 76.068382][ T6548] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.070510][ T6548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.125621][ T6548] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.146527][ T6548] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.148307][ T6548] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.169091][ T6548] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.195089][ T6548] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.204142][ T6548] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.224382][ T6548] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 77.132643][ T6561] bond0: entered promiscuous mode [ 77.134198][ T6561] bond_slave_0: entered promiscuous mode [ 77.135894][ T6561] bond_slave_1: entered promiscuous mode [ 77.151738][ T6012] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 78.061495][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 78.211363][ T6004] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 78.221393][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 78.223260][ T5948] Bluetooth: hci3: command 0x0405 tx timeout [ 78.504921][ T6004] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.507905][ T6004] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 78.510484][ T6004] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 78.513853][ T6004] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 78.516437][ T6004] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.520310][ T6589] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 78.523754][ T6004] hub 7-1:1.0: bad descriptor, ignoring hub [ 78.525555][ T6004] hub 7-1:1.0: probe with driver hub failed with error -5 [ 78.527795][ T6004] cdc_wdm 7-1:1.0: skipping garbage [ 78.529354][ T6004] cdc_wdm 7-1:1.0: skipping garbage [ 78.532123][ T6004] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 78.533900][ T6004] cdc_wdm 7-1:1.0: Unknown control protocol [ 78.803807][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 78.806365][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 78.893015][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 78.895517][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 78.987663][ T25] usb 7-1: USB disconnect, device number 3 [ 80.141560][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.302009][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.302118][ T5308] Bluetooth: hci3: command 0x0405 tx timeout [ 81.041717][ T2289] cfg80211: failed to load regulatory.db [ 82.221506][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.382655][ T5308] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.385100][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 84.461318][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 84.564319][ T6651] netlink: 'syz.1.121': attribute type 1 has an invalid length. [ 84.567427][ T6651] netlink: 224 bytes leftover after parsing attributes in process `syz.1.121'. [ 84.653038][ T6650] input: syz0 as /devices/virtual/input/input6 [ 84.898985][ T39] audit: type=1800 audit(1738491469.686:3): pid=6655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.120" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 85.761797][ T6012] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 86.017901][ T6667] bond0: entered promiscuous mode [ 86.019430][ T6667] bond_slave_0: entered promiscuous mode [ 86.021122][ T6667] bond_slave_1: entered promiscuous mode [ 86.556138][ T5955] Bluetooth: hci3: command 0x0405 tx timeout [ 87.907717][ T6714] overlayfs: failed to resolve './file0': -2 [ 88.468045][ T6723] input: syz0 as /devices/virtual/input/input7 [ 93.989257][ T6761] evm: overlay not supported [ 94.004267][ T6751] syz.0.135: attempt to access beyond end of device [ 94.004267][ T6751] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 94.471618][ T6751] XFS (nbd0): SB validate failed with error -5. [ 95.261855][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 95.271436][ T6782] bond0: entered promiscuous mode [ 95.273585][ T6782] bond_slave_0: entered promiscuous mode [ 95.281290][ T6782] bond_slave_1: entered promiscuous mode [ 95.707502][ T6791] bond0: Error: Cannot enslave bond to itself. [ 96.392435][ T6803] infiniband syz2: set active [ 96.395998][ T6803] infiniband syz2: added veth0_to_batadv [ 96.438736][ T6803] RDS/IB: syz2: added [ 96.440946][ T6803] smc: adding ib device syz2 with port count 1 [ 96.445008][ T6803] smc: ib device syz2 port 1 has pnetid [ 98.561386][ T6825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.154'. [ 98.565003][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.154'. [ 98.568516][ T6825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.154'. [ 98.572799][ T6825] netlink: 36 bytes leftover after parsing attributes in process `syz.0.154'. [ 99.191430][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.381326][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 99.411811][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.415868][ T25] usb 5-1: config 0 has no interfaces? [ 99.420198][ T25] usb 5-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 99.424530][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.427761][ T25] usb 5-1: Product: syz [ 99.437435][ T25] usb 5-1: Manufacturer: syz [ 99.439473][ T25] usb 5-1: SerialNumber: syz [ 99.446309][ T25] usb 5-1: config 0 descriptor?? [ 99.743859][ T6857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.161'. [ 99.982580][ T6861] xt_time: unknown flags 0xf0 [ 99.984378][ T6844] syz.3.158: attempt to access beyond end of device [ 99.984378][ T6844] nbd3: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 100.005179][ T6844] XFS (nbd3): SB validate failed with error -5. [ 100.627522][ T25] IPVS: starting estimator thread 0... [ 100.713168][ T6867] IPVS: using max 39 ests per chain, 93600 per kthread [ 101.035913][ T6869] ip6tnl1: entered promiscuous mode [ 102.036358][ T6888] overlayfs: failed to resolve './file0': -2 [ 102.524122][ T6004] usb 5-1: USB disconnect, device number 7 [ 103.545939][ T6915] tun0: tun_chr_ioctl cmd 1074025675 [ 103.559809][ T6915] tun0: persist enabled [ 103.717115][ T6927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.176'. [ 103.719743][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.176'. [ 103.722563][ T6927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.176'. [ 103.725575][ T6927] netlink: 36 bytes leftover after parsing attributes in process `syz.2.176'. [ 105.390328][ T6953] overlayfs: failed to resolve './file0': -2 [ 105.647982][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 105.811394][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 105.832516][ T25] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.835463][ T25] usb 8-1: config 0 has no interfaces? [ 105.893222][ T25] usb 8-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 105.895960][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.899824][ T25] usb 8-1: Product: syz [ 105.901159][ T25] usb 8-1: Manufacturer: syz [ 105.921776][ T25] usb 8-1: SerialNumber: syz [ 105.932079][ T25] usb 8-1: config 0 descriptor?? [ 105.989565][ T6955] ipip0: entered promiscuous mode [ 106.442988][ T6302] libceph: connect (1)[c::]:6789 error -101 [ 106.445822][ T6302] libceph: mon0 (1)[c::]:6789 connect error [ 106.453692][ T6302] libceph: connect (1)[c::]:6789 error -101 [ 106.457450][ T6302] libceph: mon0 (1)[c::]:6789 connect error [ 106.579541][ T6964] ceph: No mds server is up or the cluster is laggy [ 107.299373][ T35] usb 8-1: USB disconnect, device number 2 [ 108.063038][ T6988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.642354][ T7020] autofs: Unknown parameter '0x0000000000000000' [ 110.544694][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 111.128529][ T7038] warning: `syz.1.200' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.387247][ T7064] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 112.393633][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 112.434571][ T2289] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 112.711331][ T2289] usb 7-1: Using ep0 maxpacket: 8 [ 112.823789][ T2289] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.202872][ T2289] usb 7-1: config 0 has no interfaces? [ 113.206854][ T2289] usb 7-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 113.209482][ T2289] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.211886][ T2289] usb 7-1: Product: syz [ 113.213125][ T2289] usb 7-1: Manufacturer: syz [ 113.214498][ T2289] usb 7-1: SerialNumber: syz [ 113.216771][ T2289] usb 7-1: config 0 descriptor?? [ 113.420782][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 113.481547][ T35] usb 7-1: USB disconnect, device number 4 [ 114.062032][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 114.064710][ T7103] bridge_slave_1: left allmulticast mode [ 114.066421][ T7103] bridge_slave_1: left promiscuous mode [ 114.068231][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.072533][ T7103] bridge_slave_0: left allmulticast mode [ 114.074285][ T7103] bridge_slave_0: left promiscuous mode [ 114.076047][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.951017][ T7117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 115.029936][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 115.979087][ T7134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.213'. [ 115.987980][ T6007] hid-generic 0006:0003:007F.0003: unknown main item tag 0x0 [ 115.990277][ T6007] hid-generic 0006:0003:007F.0003: item fetching failed at offset 5/132 [ 115.993227][ T6007] hid-generic 0006:0003:007F.0003: probe with driver hid-generic failed with error -22 [ 116.308888][ T7150] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 116.401121][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 116.958945][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 118.599216][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 118.901332][ T6012] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 119.241614][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.222'. [ 119.245256][ T7187] bridge_slave_1: left allmulticast mode [ 119.247559][ T7187] bridge_slave_1: left promiscuous mode [ 119.249926][ T7187] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.259340][ T7187] bridge_slave_0: left allmulticast mode [ 119.261626][ T7187] bridge_slave_0: left promiscuous mode [ 119.264116][ T7187] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.292749][ T6012] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.296281][ T6012] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 119.299198][ T6012] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.302114][ T6012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.306588][ T7182] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 119.312335][ T6012] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.844555][ T73] usb 7-1: USB disconnect, device number 5 [ 120.028422][ T7201] siw: device registration error -23 [ 120.281831][ T7206] Bluetooth: MGMT ver 1.23 [ 121.245435][ T7221] ip6tnl1: entered promiscuous mode [ 122.045560][ T73] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 122.351327][ T73] usb 7-1: Using ep0 maxpacket: 8 [ 122.355908][ T73] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.359268][ T73] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.362526][ T73] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.364553][ T73] usb 7-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 122.367213][ T73] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.375032][ T73] usb 7-1: config 0 descriptor?? [ 122.621429][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.840830][ T73] usbhid 7-1:0.0: can't add hid device: -71 [ 123.842670][ T73] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 123.848071][ T73] usb 7-1: USB disconnect, device number 6 [ 123.906881][ T7254] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 124.026901][ T7256] autofs: Unknown parameter '0x0000000000000000' [ 124.233549][ T6012] IPVS: starting estimator thread 0... [ 124.321407][ T7259] IPVS: using max 39 ests per chain, 93600 per kthread [ 124.664954][ T7265] can0: slcan on ttyS3. [ 125.502724][ T7261] can0 (unregistered): slcan off ttyS3. [ 126.787079][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 126.808954][ T7314] ipvlan2: entered promiscuous mode [ 126.814410][ T7314] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 126.821195][ T7314] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 126.925805][ T7315] sctp: [Deprecated]: syz.3.249 (pid 7315) Use of int in max_burst socket option deprecated. [ 126.925805][ T7315] Use struct sctp_assoc_value instead [ 127.087320][ T7321] smc: removing ib device syz2 [ 127.276690][ T7320] infiniband syz0: set down [ 127.288849][ T7320] infiniband syz0: added bond0 [ 127.439603][ T7320] RDS/IB: syz0: added [ 127.441567][ T7320] smc: adding ib device syz0 with port count 1 [ 127.444014][ T7320] smc: ib device syz0 port 1 has pnetid [ 127.453278][ T1171] Bluetooth: hci4: Frame reassembly failed (-84) [ 127.887591][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.253'. [ 129.375314][ T7352] netlink: 32 bytes leftover after parsing attributes in process `syz.0.256'. [ 129.431785][ T1171] Bluetooth: hci5: Frame reassembly failed (-84) [ 129.501380][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 129.508092][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 129.983267][ T5955] Bluetooth: hci1: command 0x0c1a tx timeout [ 130.035723][ T7357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.258'. [ 131.479799][ T5308] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 131.482767][ T5955] Bluetooth: hci5: command 0x1003 tx timeout [ 131.551442][ T6012] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 131.711616][ T6012] usb 6-1: Using ep0 maxpacket: 8 [ 131.775432][ T6012] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.780019][ T6012] usb 6-1: config 0 has no interfaces? [ 131.787680][ T6012] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=4e.59 [ 131.790427][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.798316][ T6012] usb 6-1: Product: syz [ 131.799592][ T6012] usb 6-1: Manufacturer: syz [ 131.812850][ T6012] usb 6-1: SerialNumber: syz [ 131.842611][ T6012] usb 6-1: config 0 descriptor?? [ 132.268042][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.272339][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.381942][ T6007] usb 6-1: USB disconnect, device number 2 [ 132.387718][ T7378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 134.204116][ T7409] hsr0: entered allmulticast mode [ 134.205771][ T7409] hsr_slave_0: entered allmulticast mode [ 134.207433][ T7409] hsr_slave_1: entered allmulticast mode [ 134.282603][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 134.286954][ T7411] ipvlan2: entered promiscuous mode [ 134.290416][ T7411] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 134.293374][ T7411] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 135.288871][ T7429] ip6tnl1: entered promiscuous mode [ 135.289770][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 136.419444][ T5955] Bluetooth: hci4: sending frame failed (-49) [ 136.422174][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 138.683260][ T7475] ceph: No mds server is up or the cluster is laggy [ 139.396527][ T6012] IPVS: starting estimator thread 0... [ 139.514374][ T7483] IPVS: using max 38 ests per chain, 91200 per kthread [ 139.672432][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 140.513746][ T7505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.287'. [ 141.481383][ T25] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 141.585901][ T7519] netlink: 'syz.0.293': attribute type 4 has an invalid length. [ 141.644493][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.649465][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.653343][ T25] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 141.660608][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.664953][ T25] usb 6-1: config 0 descriptor?? [ 142.096110][ T7515] lo speed is unknown, defaulting to 1000 [ 142.098772][ T7515] lo speed is unknown, defaulting to 1000 [ 142.101336][ T7520] »»»»»»: renamed from lo (while UP) [ 142.117502][ T7515] »»»»»» speed is unknown, defaulting to 1000 [ 142.187889][ T7515] infiniband sz1: set active [ 142.189929][ T6007] »»»»»» speed is unknown, defaulting to 1000 [ 142.196240][ T7515] infiniband sz1: added »»»»»» [ 142.252298][ T7515] RDS/IB: sz1: added [ 142.253669][ T7515] smc: adding ib device sz1 with port count 1 [ 142.255512][ T7515] smc: ib device sz1 port 1 has pnetid [ 142.257878][ T6007] »»»»»» speed is unknown, defaulting to 1000 [ 142.260813][ T7515] »»»»»» speed is unknown, defaulting to 1000 [ 142.287864][ T39] audit: type=1326 audit(1738491527.067:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7523 comm="syz.2.294" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 142.318495][ T7515] »»»»»» speed is unknown, defaulting to 1000 [ 142.407548][ T56] IPVS: starting estimator thread 0... [ 142.502165][ T25] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 142.505326][ T7532] IPVS: using max 38 ests per chain, 91200 per kthread [ 142.507438][ T25] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 142.510899][ T25] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 142.513399][ T25] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 142.515658][ T25] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 142.518173][ T25] cm6533_jd 0003:0D8C:0022.0004: No inputs registered, leaving [ 142.531981][ T25] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 142.682812][ T7515] »»»»»» speed is unknown, defaulting to 1000 [ 142.845347][ T7515] »»»»»» speed is unknown, defaulting to 1000 [ 143.951843][ T2289] usb 6-1: reset high-speed USB device number 3 using dummy_hcd [ 144.140360][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 144.676520][ T6007] libceph: connect (1)[c::]:6789 error -101 [ 144.678628][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 144.712202][ T7560] ceph: No mds server is up or the cluster is laggy [ 144.901653][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.300'. [ 144.936874][ T6007] libceph: connect (1)[c::]:6789 error -101 [ 144.939788][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 145.073080][ T7563] netlink: 'syz.3.302': attribute type 2 has an invalid length. [ 145.076283][ T7563] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 145.079604][ T7563] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 145.277593][ T5957] usb 6-1: USB disconnect, device number 3 [ 146.141359][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 146.375871][ T7583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.384417][ T7583] program syz.2.305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.251934][ T5955] Bluetooth: hci4: sending frame failed (-49) [ 148.255084][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 148.258583][ T7606] Bluetooth: hci4: Frame reassembly failed (-84) [ 148.860910][ T7616] ceph: No mds server is up or the cluster is laggy [ 148.867442][ T6007] libceph: connect (1)[c::]:6789 error -101 [ 148.873929][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 149.093193][ T39] audit: type=1800 audit(1738491533.877:5): pid=7621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.314" name="bus" dev="overlay" ino=466 res=0 errno=0 [ 149.449651][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.555137][ T2289] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.560320][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.581900][ T5955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.586745][ T5955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.591819][ T5955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.594640][ T5955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.597126][ T5955] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.599478][ T5955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.663636][ T7630] »»»»»» speed is unknown, defaulting to 1000 [ 149.692490][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.775795][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.783151][ T2289] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 149.787209][ T2289] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 149.790626][ T2289] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 149.794494][ T2289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.801066][ T7623] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 149.809200][ T2289] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.889066][ T7630] chnl_net:caif_netlink_parms(): no params data found [ 150.377284][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.381916][ T1139] bond_slave_0: left promiscuous mode [ 150.385480][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.388247][ T1139] bond_slave_1: left promiscuous mode [ 150.390559][ T1139] bond0 (unregistering): Released all slaves [ 150.393047][ T6007] usb 5-1: USB disconnect, device number 8 [ 150.418793][ T1139] bond1 (unregistering): Released all slaves [ 150.547725][ T7630] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.549817][ T7630] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.556832][ T7630] bridge_slave_0: entered allmulticast mode [ 150.558973][ T7630] bridge_slave_0: entered promiscuous mode [ 150.561680][ T7630] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.564083][ T7630] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.566199][ T7630] bridge_slave_1: entered allmulticast mode [ 150.568352][ T7630] bridge_slave_1: entered promiscuous mode [ 150.745714][ T7630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.750131][ T7630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.791796][ T7630] team0: Port device team_slave_0 added [ 150.795245][ T7630] team0: Port device team_slave_1 added [ 150.847518][ T7630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.849592][ T7630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.863363][ T7630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.867334][ T7630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.869569][ T7630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.891723][ T7630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.919382][ T7630] hsr_slave_0: entered promiscuous mode [ 150.921590][ T7630] hsr_slave_1: entered promiscuous mode [ 150.923775][ T7630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.926240][ T7630] Cannot create hsr debugfs directory [ 151.107929][ T7630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 151.120859][ T7630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 151.124725][ T7630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 151.133637][ T7630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 151.150527][ T7630] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.153597][ T7630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.156319][ T7630] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.158985][ T7630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.186235][ T1139] hsr_slave_0: left promiscuous mode [ 151.188792][ T1139] hsr_slave_1: left promiscuous mode [ 151.193593][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.198155][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.209923][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.213732][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.213785][ T7668] netlink: 60 bytes leftover after parsing attributes in process `syz.1.322'. [ 151.246626][ T1139] veth1_macvtap: left promiscuous mode [ 151.248743][ T1139] veth0_macvtap: left promiscuous mode [ 151.250923][ T1139] veth1_vlan: left promiscuous mode [ 151.253050][ T1139] veth0_vlan: left promiscuous mode [ 151.599369][ T7674] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 151.602256][ T7674] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 151.623236][ T7674] vhci_hcd vhci_hcd.0: Device attached [ 151.665781][ T5308] Bluetooth: hci1: command tx timeout [ 151.801441][ T56] vhci_hcd: vhci_device speed not set [ 151.863757][ T56] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 151.979532][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 152.057217][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 152.370742][ T7679] Illegal XDP return value 4294967274 on prog (id 42) dev N/A, expect packet loss! [ 152.465259][ T7675] vhci_hcd: connection reset by peer [ 152.473689][ T1171] vhci_hcd: stop threads [ 152.475891][ T1171] vhci_hcd: release socket [ 152.479737][ T1171] vhci_hcd: disconnect device [ 152.597374][ T68] smc: removing ib device sz1 [ 152.621691][ T6008] »»»»»» speed is unknown, defaulting to 1000 [ 152.625814][ T101] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.640531][ T101] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.727965][ T7630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.737309][ T7630] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.744923][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.747033][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.766944][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.769323][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.951352][ T1139] IPVS: stop unused estimator thread 0... [ 152.960941][ T7630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.290933][ T7701] netlink: 24 bytes leftover after parsing attributes in process `syz.2.325'. [ 153.338031][ T7630] veth0_vlan: entered promiscuous mode [ 153.345400][ T7630] veth1_vlan: entered promiscuous mode [ 153.362186][ T7630] veth0_macvtap: entered promiscuous mode [ 153.365594][ T7630] veth1_macvtap: entered promiscuous mode [ 153.373457][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.376570][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.379346][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.383099][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.385919][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.388893][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.394222][ T7630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.406209][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.409454][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.424303][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.427336][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.430262][ T7630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.441822][ T7630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.445333][ T7630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.449476][ T7630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.454145][ T7630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.456704][ T7630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.459228][ T7630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.751364][ T5308] Bluetooth: hci1: command tx timeout [ 153.790535][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.793746][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.815684][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.818480][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.098414][ T7732] Bluetooth: MGMT ver 1.23 [ 155.006311][ T7755] pim6reg: entered allmulticast mode [ 155.105822][ T7755] pim6reg: left allmulticast mode [ 155.294882][ T7768] ceph: No mds server is up or the cluster is laggy [ 155.332861][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 155.336790][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 155.710773][ T5955] block nbd2: Receive control failed (result -32) [ 155.713004][ T5308] block nbd2: Receive control failed (result -32) [ 155.725695][ T7763] block nbd2: shutting down sockets [ 155.834674][ T5308] Bluetooth: hci1: command tx timeout [ 156.096110][ T7788] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 156.106841][ T7785] IPVS: stopping backup sync thread 7788 ... [ 156.116237][ T7785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 156.604847][ T7790] syz.1.329 (7790): /proc/7781/oom_adj is deprecated, please use /proc/7781/oom_score_adj instead. [ 157.021400][ T56] vhci_hcd: vhci_device speed not set [ 157.524365][ T7805] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 157.550749][ T7805] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 157.901512][ T5308] Bluetooth: hci1: command tx timeout [ 159.291735][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 159.637446][ T7837] ceph: No mds server is up or the cluster is laggy [ 160.065899][ T7850] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 160.401575][ T5955] Bluetooth: hci2: SCO packet for unknown connection handle 768 [ 161.341383][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 161.341516][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 161.491077][ T7869] bond0: (slave bond_slave_0): Releasing backup interface [ 161.494558][ T7869] bond_slave_0: left promiscuous mode [ 161.498200][ T7869] bond0: (slave bond_slave_1): Releasing backup interface [ 161.500976][ T7869] bond_slave_1: left promiscuous mode [ 161.519510][ T7869] team0: Port device team_slave_0 removed [ 161.531185][ T7869] team0: Port device team_slave_1 removed [ 161.534475][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.537388][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.542410][ T7869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.544638][ T7869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.577013][ T7870] team0: Mode changed to "loadbalance" [ 161.678016][ T7869] vlan0: entered promiscuous mode [ 161.683987][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.350'. [ 162.585031][ T6006] libceph: connect (1)[c::]:6789 error -101 [ 162.587190][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 162.640473][ T7881] ceph: No mds server is up or the cluster is laggy [ 163.015963][ T6302] IPVS: starting estimator thread 0... [ 163.101359][ T7892] IPVS: using max 26 ests per chain, 62400 per kthread [ 163.243416][ T7888] ceph: No mds server is up or the cluster is laggy [ 163.696578][ T7902] Bluetooth: hci4: Frame reassembly failed (-84) [ 163.699869][ T101] Bluetooth: hci4: Frame reassembly failed (-84) [ 164.855412][ T7933] bridge_slave_0: left allmulticast mode [ 164.857198][ T7933] bridge_slave_0: left promiscuous mode [ 164.859480][ T7933] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.868104][ T7933] bridge_slave_1: left allmulticast mode [ 164.871715][ T7933] bridge_slave_1: left promiscuous mode [ 164.874290][ T7933] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.913940][ T7930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.359'. [ 164.919355][ T7933] bond0: (slave bond_slave_0): Releasing backup interface [ 164.926910][ T7933] bond0: (slave bond_slave_1): Releasing backup interface [ 164.943900][ T7933] team0: Port device team_slave_0 removed [ 164.950939][ T7933] team0: Port device team_slave_1 removed [ 164.954618][ T7933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.957134][ T7933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.959951][ T7933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.963018][ T7933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.974881][ T7935] team0: Mode changed to "loadbalance" [ 165.072868][ T7933] vlan0: entered promiscuous mode [ 165.078773][ T7933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 165.741590][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 165.911206][ T7972] ip6tnl1: entered promiscuous mode [ 166.612736][ T5955] block nbd0: Receive control failed (result -32) [ 166.612737][ T5308] block nbd0: Receive control failed (result -32) [ 166.666602][ T7975] block nbd0: shutting down sockets [ 167.378966][ T39] audit: type=1800 audit(1738491552.157:6): pid=7999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.365" name="bus" dev="overlay" ino=594 res=0 errno=0 [ 167.439426][ T8006] netlink: 'syz.1.368': attribute type 9 has an invalid length. [ 170.137848][ T8031] netlink: 24 bytes leftover after parsing attributes in process `syz.4.374'. [ 170.231390][ T6006] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 170.495831][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.499231][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.502505][ T6006] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.506357][ T6006] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.509075][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.517937][ T6006] usb 5-1: config 0 descriptor?? [ 170.938275][ T6006] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 171.015666][ T6006] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 171.230703][ T8030] QAT: failed to copy from user cfg_data. [ 171.724095][ T8062] xt_CT: You must specify a L4 protocol and not use inversions on it [ 171.751365][ T6006] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 171.780860][ T56] usb 5-1: USB disconnect, device number 9 [ 171.821942][ T8060] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 171.823182][ T8061] IPVS: stopping backup sync thread 8060 ... [ 172.002022][ T6006] usb 7-1: Using ep0 maxpacket: 8 [ 172.004745][ T6006] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 172.007134][ T6006] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 172.009957][ T6006] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 172.012936][ T6006] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 172.015987][ T6006] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.019764][ T6006] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 172.022461][ T6006] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.299510][ T6006] usb 7-1: usb_control_msg returned -32 [ 172.301478][ T6006] usbtmc 7-1:16.0: can't read capabilities [ 172.558816][ T8087] siw: device registration error -23 [ 172.571531][ T8072] lo speed is unknown, defaulting to 1000 [ 172.580329][ T8072] lo speed is unknown, defaulting to 1000 [ 172.584312][ T8072] lo speed is unknown, defaulting to 1000 [ 172.622685][ T8088] »»»»»»: renamed from lo (while UP) [ 172.922285][ T8072] infiniband sz1: set active [ 172.923720][ T6006] »»»»»» speed is unknown, defaulting to 1000 [ 172.925530][ T8072] infiniband sz1: added »»»»»» [ 172.934050][ T8072] RDS/IB: sz1: added [ 172.935284][ T8072] smc: adding ib device sz1 with port count 1 [ 172.937095][ T8072] smc: ib device sz1 port 1 has pnetid [ 172.938860][ T6006] »»»»»» speed is unknown, defaulting to 1000 [ 172.940900][ T8072] »»»»»» speed is unknown, defaulting to 1000 [ 172.976173][ T8072] »»»»»» speed is unknown, defaulting to 1000 [ 173.016830][ T8072] »»»»»» speed is unknown, defaulting to 1000 [ 173.052546][ T8072] »»»»»» speed is unknown, defaulting to 1000 [ 173.609785][ T8110] netlink: 24 bytes leftover after parsing attributes in process `syz.1.387'. [ 174.008384][ T2289] usb 7-1: USB disconnect, device number 7 [ 174.942041][ T8137] pim6reg: entered allmulticast mode [ 174.947044][ T8137] pim6reg: left allmulticast mode [ 175.943625][ T8149] netlink: 20 bytes leftover after parsing attributes in process `syz.4.393'. [ 176.554955][ T8152] rdma_rxe: rxe_newlink: failed to add lo [ 176.562570][ T8152] »»»»»»: renamed from lo (while UP) [ 176.875683][ T8164] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.971404][ T6004] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 177.142982][ T6004] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.145940][ T6004] usb 5-1: config 0 interface 0 has no altsetting 0 [ 177.152855][ T6004] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 177.155644][ T6004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.158045][ T6004] usb 5-1: Product: syz [ 177.159289][ T6004] usb 5-1: Manufacturer: syz [ 177.160696][ T6004] usb 5-1: SerialNumber: syz [ 177.168413][ T6004] usb 5-1: config 0 descriptor?? [ 177.172785][ T6004] usb 5-1: selecting invalid altsetting 0 [ 177.384777][ T39] audit: type=1326 audit(1738491562.174:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8161 comm="syz.0.396" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 177.464263][ T6004] usb 5-1: USB disconnect, device number 10 [ 177.562422][ T8173] [U] [ 177.563933][ T8173] [U] [ 177.565077][ T8173] [U] [ 177.566178][ T8173] [U] [ 177.567470][ T8173] [U] [ 177.568618][ T8173] [U] [ 177.569707][ T8173] [U] [ 177.570781][ T8173] [U] [ 177.572506][ T8173] [U] [ 177.573617][ T8173] [U] [ 177.574695][ T8173] [U] [ 177.719955][ T8169] netlink: 60 bytes leftover after parsing attributes in process `syz.4.398'. [ 178.141517][ T5955] Bluetooth: hci1: command tx timeout [ 178.398218][ T8181] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.401031][ T8181] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.403735][ T8181] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.406286][ T8181] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.409516][ T8181] vxlan0: entered promiscuous mode [ 178.411282][ T8181] vxlan0: entered allmulticast mode [ 178.441507][ T8181] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.444908][ T8181] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.448210][ T8181] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.451723][ T8181] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.498723][ T8188] tipc: Started in network mode [ 178.500739][ T8188] tipc: Node identity 4, cluster identity 4711 [ 178.504831][ T8188] tipc: Node number set to 4 [ 178.705439][ T8190] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 179.779795][ T8173] [U] [ 180.820644][ T8224] siw: device registration error -23 [ 181.790303][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 181.792899][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 181.809639][ T8236] vivid-001: disconnect [ 182.131759][ T8249] ceph: No mds server is up or the cluster is laggy [ 182.248408][ T8233] vivid-001: reconnect [ 183.166648][ T8268] blktrace: Concurrent blktraces are not allowed on sg0 [ 184.073625][ T8288] siw: device registration error -23 [ 184.104979][ T8275] rdma_rxe: rxe_newlink: failed to add lo [ 184.431188][ T8275] »»»»»»: renamed from lo (while UP) [ 184.509893][ T8288] »»»»»» speed is unknown, defaulting to 1000 [ 184.961340][ T2289] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 185.112864][ T2289] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 185.117188][ T2289] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 185.124493][ T2289] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 185.128032][ T2289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.140545][ T8295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 185.160470][ T2289] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 186.065228][ T25] usb 7-1: USB disconnect, device number 8 [ 187.319017][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 187.351004][ T8327] netlink: 1080 bytes leftover after parsing attributes in process `syz.4.436'. [ 187.353788][ T8327] netlink: 1080 bytes leftover after parsing attributes in process `syz.4.436'. [ 187.504547][ T5955] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 187.507931][ T5955] Bluetooth: hci3: Injecting HCI hardware error event [ 187.513598][ T5955] Bluetooth: hci3: hardware error 0x00 [ 188.225358][ T8350] syzkaller1: entered promiscuous mode [ 188.227461][ T8350] syzkaller1: entered allmulticast mode [ 189.581384][ T5955] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 192.091482][ T35] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 192.243035][ T35] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 192.247474][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.255376][ T35] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 192.258971][ T35] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 192.262212][ T35] usb 7-1: Manufacturer: syz [ 192.266739][ T35] usb 7-1: config 0 descriptor?? [ 192.311447][ T35] rc_core: IR keymap rc-hauppauge not found [ 192.313219][ T35] Registered IR keymap rc-empty [ 192.315902][ T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 192.319465][ T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 192.671402][ T6008] usb 7-1: USB disconnect, device number 9 [ 193.461161][ T8430] ceph: No mds server is up or the cluster is laggy [ 193.581932][ T5955] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 193.591440][ T5955] Bluetooth: hci1: Injecting HCI hardware error event [ 193.596060][ T5955] Bluetooth: hci1: hardware error 0x00 [ 193.662110][ T6008] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 193.681922][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.684563][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.842847][ T6008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.846104][ T6008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.848873][ T6008] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 193.853505][ T6008] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 193.856109][ T6008] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.865390][ T6008] usb 9-1: config 0 descriptor?? [ 194.322392][ T6008] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 194.326200][ T6008] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 194.642849][ T8436] QAT: failed to copy from user cfg_data. [ 194.845536][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 194.848053][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 195.103567][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 195.106088][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 195.213800][ T6008] usb 9-1: USB disconnect, device number 2 [ 195.262890][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 195.270872][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 195.611675][ T9] libceph: connect (1)[c::]:6789 error -101 [ 195.614220][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 195.661416][ T5955] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 195.673906][ T8466] ceph: No mds server is up or the cluster is laggy [ 195.751375][ T5955] Bluetooth: hci2: command 0x0405 tx timeout [ 195.811576][ T8485] usb usb4: usbfs: process 8485 (syz.4.482) did not claim interface 0 before use [ 195.936125][ T8498] pim6reg: entered allmulticast mode [ 195.944106][ T8498] pim6reg: left allmulticast mode [ 196.668862][ T8498] 9pnet_fd: Insufficient options for proto=fd [ 197.616327][ T8517] ceph: No mds server is up or the cluster is laggy [ 198.380731][ T8568] usb usb9: usbfs: process 8568 (syz.1.511) did not claim interface 0 before use [ 198.521587][ T8577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.515'. [ 198.538860][ T73] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 198.580395][ T8578] ceph: No mds server is up or the cluster is laggy [ 198.731381][ T73] usb 5-1: Using ep0 maxpacket: 8 [ 198.757901][ T73] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 198.765431][ T73] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 198.776751][ T73] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 198.784729][ T73] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 198.792348][ T73] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.801886][ T73] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 198.809668][ T73] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.078061][ T73] usb 5-1: usb_control_msg returned -32 [ 199.081780][ T73] usbtmc 5-1:16.0: can't read capabilities [ 199.181415][ T5308] Bluetooth: hci2: command 0x0405 tx timeout [ 199.488103][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 199.490032][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 199.519560][ T8595] ceph: No mds server is up or the cluster is laggy [ 199.520077][ T8600] fuse: Bad value for 'fd' [ 200.075076][ T8614] usb usb1: usbfs: process 8614 (syz.1.525) did not claim interface 0 before use [ 200.861434][ T5955] Bluetooth: hci4: sending frame failed (-49) [ 200.865529][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 200.921203][ T73] usb 5-1: USB disconnect, device number 11 [ 200.960599][ T8626] usb usb1: usbfs: process 8626 (syz.4.529) did not claim interface 0 before use [ 201.754900][ T1171] Bluetooth: hci4: Frame reassembly failed (-84) [ 201.759284][ T1171] Bluetooth: hci4: Frame reassembly failed (-84) [ 201.766743][ T1171] Bluetooth: hci4: Frame reassembly failed (-84) [ 203.821379][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 203.821886][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 203.928029][ T1171] Bluetooth: hci4: Frame reassembly failed (-84) [ 204.517846][ T73] libceph: connect (1)[c::]:6789 error -101 [ 204.519914][ T73] libceph: mon0 (1)[c::]:6789 connect error [ 204.557543][ T8735] ceph: No mds server is up or the cluster is laggy [ 205.981365][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 205.981393][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 206.950567][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 206.952652][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 207.003014][ T8795] ceph: No mds server is up or the cluster is laggy [ 207.003109][ T8797] ceph: No mds server is up or the cluster is laggy [ 207.137774][ T8809] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 207.139776][ T8809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.142288][ T8809] vhci_hcd vhci_hcd.0: Device attached [ 207.308765][ T8812] ceph: No mds server is up or the cluster is laggy [ 207.381342][ T6012] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 207.391378][ T35] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 207.541351][ T6012] usb 9-1: Using ep0 maxpacket: 16 [ 207.553477][ T6012] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 207.556858][ T6012] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.559344][ T6012] usb 9-1: Product: syz [ 207.560772][ T6012] usb 9-1: Manufacturer: syz [ 207.563262][ T6012] usb 9-1: SerialNumber: syz [ 207.565728][ T6012] usb 9-1: config 0 descriptor?? [ 207.573129][ T6012] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 207.578710][ T6012] usb 9-1: Detected FT232H [ 207.658304][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.589'. [ 207.773190][ T8810] vhci_hcd: unknown pdu 1 [ 207.776177][ T68] vhci_hcd: stop threads [ 207.776220][ T6012] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 207.777465][ T68] vhci_hcd: release socket [ 207.781188][ T68] vhci_hcd: disconnect device [ 207.782074][ T6012] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 207.785761][ T6012] ftdi_sio 9-1:0.0: GPIO initialisation failed: -71 [ 207.789151][ T6012] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 207.796615][ T6012] usb 9-1: USB disconnect, device number 3 [ 207.805120][ T6012] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 207.809825][ T6012] ftdi_sio 9-1:0.0: device disconnected [ 207.852664][ T35] vhci_hcd: vhci_device speed not set [ 208.104178][ T8834] overlayfs: failed to resolve './file0': -2 [ 208.282282][ T8835] ceph: No mds server is up or the cluster is laggy [ 208.562119][ T6012] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 208.716933][ T6012] usb 9-1: Using ep0 maxpacket: 8 [ 208.727450][ T6012] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 208.739795][ T6012] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 208.751519][ T6012] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.770323][ T6012] usb 9-1: config 0 descriptor?? [ 208.841340][ T8850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.600'. [ 208.980796][ T6012] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 209.175289][ T8858] ceph: No mds server is up or the cluster is laggy [ 209.260995][ T62] usb 9-1: USB disconnect, device number 4 [ 209.600793][ T8869] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 209.726008][ T8869] /dev/sr0: Can't open blockdev [ 209.795159][ T8871] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 209.798050][ T8871] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 209.801908][ T8871] vhci_hcd vhci_hcd.0: Device attached [ 210.041405][ T6008] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 210.061914][ T6007] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 210.211358][ T6007] usb 5-1: Using ep0 maxpacket: 16 [ 210.226749][ T6007] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 210.229613][ T6007] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.232265][ T6007] usb 5-1: Product: syz [ 210.233806][ T6007] usb 5-1: Manufacturer: syz [ 210.235348][ T6007] usb 5-1: SerialNumber: syz [ 210.244790][ T6007] usb 5-1: config 0 descriptor?? [ 210.255309][ T6007] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 210.263096][ T6007] usb 5-1: Detected FT232H [ 210.347715][ T8896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 210.457632][ T6007] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 210.461506][ T8874] vhci_hcd: connection reset by peer [ 210.462125][ T6007] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 210.463357][ T101] vhci_hcd: stop threads [ 210.466514][ T101] vhci_hcd: release socket [ 210.469290][ T101] vhci_hcd: disconnect device [ 210.470462][ T6007] ftdi_sio 5-1:0.0: GPIO initialisation failed: -71 [ 210.473386][ T6007] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 210.476737][ T6007] usb 5-1: USB disconnect, device number 12 [ 210.482383][ T6007] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 210.488542][ T6007] ftdi_sio 5-1:0.0: device disconnected [ 210.541528][ T6008] vhci_hcd: vhci_device speed not set [ 210.659286][ T8881] ceph: No mds server is up or the cluster is laggy [ 211.003040][ T6012] libceph: connect (1)[c::]:6789 error -101 [ 211.005688][ T6012] libceph: mon0 (1)[c::]:6789 connect error [ 211.119919][ T8899] ceph: No mds server is up or the cluster is laggy [ 211.440621][ T8924] overlayfs: failed to resolve './file0': -2 [ 211.868171][ T8919] ceph: No mds server is up or the cluster is laggy [ 211.991437][ T35] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 212.245208][ T8945] ceph: No mds server is up or the cluster is laggy [ 212.249417][ T8948] fuse: Bad value for 'fd' [ 212.361343][ T6012] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 212.436383][ T35] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 212.439576][ T35] usb 6-1: config 0 has no interface number 0 [ 212.442111][ T35] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.446294][ T35] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 212.449791][ T35] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 212.453145][ T35] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 212.456254][ T35] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 212.459268][ T35] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.463055][ T35] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 212.465634][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.468937][ T35] usb 6-1: config 0 descriptor?? [ 212.471498][ T8936] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.473726][ T8936] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 212.477935][ T35] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 212.521373][ T6012] usb 7-1: Using ep0 maxpacket: 16 [ 212.524504][ T6012] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 212.527887][ T6012] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 212.535026][ T6012] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 212.537703][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.540197][ T6012] usb 7-1: Product: syz [ 212.541570][ T6012] usb 7-1: Manufacturer: syz [ 212.542959][ T6012] usb 7-1: SerialNumber: syz [ 212.545231][ T6012] usb 7-1: config 0 descriptor?? [ 212.688486][ T73] usb 6-1: USB disconnect, device number 4 [ 212.692491][ T73] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 212.760188][ T6012] appledisplay 7-1:0.0: Error while getting initial brightness: -71 [ 212.766861][ T6012] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -71 [ 212.779296][ T6012] usb 7-1: USB disconnect, device number 10 [ 213.578268][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 213.581351][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 213.787010][ T8988] ceph: No mds server is up or the cluster is laggy [ 213.787362][ T8992] fuse: Bad value for 'fd' [ 214.588889][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 214.751607][ T9000] ceph: No mds server is up or the cluster is laggy [ 214.807331][ T9025] overlayfs: failed to resolve './file0': -2 [ 214.931846][ T9029] ceph: No mds server is up or the cluster is laggy [ 214.945086][ T9033] fuse: Bad value for 'fd' [ 215.189721][ T9037] overlayfs: failed to resolve './file0': -2 [ 215.581448][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 215.581470][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 215.683352][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 215.687022][ T9045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 215.921483][ T35] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 216.108076][ T9062] overlayfs: failed to resolve './file0': -2 [ 216.311380][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 216.314104][ T35] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 216.317009][ T35] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.319570][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.064069][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.664'. [ 217.107513][ T9067] ceph: No mds server is up or the cluster is laggy [ 218.380815][ T9118] ceph: No mds server is up or the cluster is laggy [ 218.694620][ T62] usb 6-1: USB disconnect, device number 5 [ 219.320574][ T9132] gtp0: entered promiscuous mode [ 219.404435][ T9139] dccp_xmit_packet: Payload too large (65475) for featneg. [ 219.671360][ T6007] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 219.734193][ T9148] ceph: No mds server is up or the cluster is laggy [ 219.841314][ T6007] usb 7-1: Using ep0 maxpacket: 8 [ 219.846948][ T6007] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 219.849608][ T6007] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.852549][ T6007] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.855625][ T6007] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.858469][ T6007] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.862331][ T6007] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.865092][ T6007] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.078898][ T6007] usb 7-1: usb_control_msg returned -32 [ 220.080706][ T6007] usbtmc 7-1:16.0: can't read capabilities [ 220.434087][ T9163] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 220.438134][ T6302] usb 7-1: USB disconnect, device number 11 [ 220.528159][ T1171] Bluetooth: hci4: Frame reassembly failed (-84) [ 220.821366][ T25] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 220.972998][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.976220][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 220.980151][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.983708][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.988975][ T25] usb 5-1: config 0 descriptor?? [ 220.998135][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 221.707533][ T73] libceph: connect (1)[c::]:6789 error -101 [ 221.714302][ T73] libceph: mon0 (1)[c::]:6789 connect error [ 221.778455][ T9184] ceph: No mds server is up or the cluster is laggy [ 221.805369][ T9175] ceph: No mds server is up or the cluster is laggy [ 222.014567][ T5955] Bluetooth: hci2: unexpected event for opcode 0x0c46 [ 222.069495][ T5955] Bluetooth: hci2: unexpected event for opcode 0x0402 [ 222.497103][ T9209] ptrace attach of ""[9210] was attempted by "/syz-executor exec"[9209] [ 222.543919][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 222.650117][ T9214] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 222.671683][ T9214] bond1: entered promiscuous mode [ 222.673331][ T9214] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.680033][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.713'. [ 222.781450][ T9219] netlink: 14 bytes leftover after parsing attributes in process `syz.4.715'. [ 222.790391][ T9214] bond1 (unregistering): Released all slaves [ 222.894201][ T9221] gtp0: entered promiscuous mode [ 223.583943][ T9] usb 5-1: USB disconnect, device number 13 [ 223.665073][ T9242] dccp_xmit_packet: Payload too large (65475) for featneg. [ 223.871966][ T9237] ceph: No mds server is up or the cluster is laggy [ 224.367856][ T9238] ceph: No mds server is up or the cluster is laggy [ 224.426470][ T9] libceph: connect (1)[c::]:6789 error -101 [ 224.428379][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 224.463984][ T9258] ceph: No mds server is up or the cluster is laggy [ 224.991718][ T9283] ceph: No mds server is up or the cluster is laggy [ 225.446574][ T73] libceph: connect (1)[c::]:6789 error -22 [ 225.455422][ T73] libceph: mon0 (1)[c::]:6789 connect error [ 225.502782][ T9295] ceph: No mds server is up or the cluster is laggy [ 226.180627][ T39] audit: type=1326 audit(1738491610.963:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9314 comm="syz.1.744" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x0 [ 226.279762][ T9318] ceph: No mds server is up or the cluster is laggy [ 226.499711][ T9326] block nbd4: not configured, cannot reconfigure [ 227.258986][ T73] libceph: connect (1)[c::]:6789 error -22 [ 227.304167][ T9343] ceph: No mds server is up or the cluster is laggy [ 227.333703][ T73] libceph: mon0 (1)[c::]:6789 connect error [ 228.489249][ T9367] input: syz0 as /devices/virtual/input/input9 [ 228.944325][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 229.533365][ T9387] ceph: No mds server is up or the cluster is laggy [ 229.591349][ T73] libceph: connect (1)[c::]:6789 error -22 [ 229.593832][ T73] libceph: mon0 (1)[c::]:6789 connect error [ 229.641527][ T9390] ceph: No mds server is up or the cluster is laggy [ 230.206298][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 230.483059][ T9405] block nbd0: NBD_DISCONNECT [ 230.486840][ T9405] block nbd0: Disconnected due to user request. [ 230.490085][ T9405] block nbd0: shutting down sockets [ 230.951387][ T5955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 231.392108][ T9415] Set syz1 is full, maxelem 65536 reached [ 231.799066][ T9430] ceph: No mds server is up or the cluster is laggy [ 234.340068][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.788'. [ 234.420430][ T9485] »»»»»»: entered allmulticast mode [ 234.433928][ T9485] tunl0: entered allmulticast mode [ 234.442376][ T9485] gre0: entered allmulticast mode [ 234.450678][ T9485] gretap0: entered allmulticast mode [ 234.457879][ T9485] erspan0: entered allmulticast mode [ 234.462594][ T9485] ip_vti0: entered allmulticast mode [ 234.466270][ T9485] ip6_vti0: entered allmulticast mode [ 234.470238][ T9485] sit0: entered allmulticast mode [ 234.476000][ T9485] ip6tnl0: entered allmulticast mode [ 234.479995][ T9485] ip6gre0: entered allmulticast mode [ 234.489516][ T9485] ip6gretap0: entered allmulticast mode [ 234.493589][ T9485] vcan0: entered allmulticast mode [ 234.496196][ T9485] bond0: entered allmulticast mode [ 234.499782][ T9485] dummy0: entered allmulticast mode [ 234.506045][ T9485] nlmon0: entered allmulticast mode [ 234.508307][ T9485] caif0: entered allmulticast mode [ 234.510195][ T9485] batadv0: entered allmulticast mode [ 234.513977][ T9485] vxcan0: entered allmulticast mode [ 234.516045][ T9485] vxcan1: entered allmulticast mode [ 234.518760][ T9485] veth0: entered allmulticast mode [ 234.522594][ T9485] veth1: entered allmulticast mode [ 234.526627][ T9485] wg0: entered allmulticast mode [ 234.536618][ T9485] wg1: entered allmulticast mode [ 234.538962][ T9485] wg2: entered allmulticast mode [ 234.546850][ T9485] veth0_to_bridge: entered allmulticast mode [ 234.553198][ T9485] bridge_slave_0: entered allmulticast mode [ 234.575400][ T9485] veth1_to_bridge: entered allmulticast mode [ 234.579860][ T9485] bridge_slave_1: entered allmulticast mode [ 234.584585][ T9485] veth0_to_bond: entered allmulticast mode [ 234.592791][ T9485] bond_slave_0: entered allmulticast mode [ 234.602357][ T9485] veth1_to_bond: entered allmulticast mode [ 234.606416][ T9485] bond_slave_1: entered allmulticast mode [ 234.609418][ T9485] veth0_to_team: entered allmulticast mode [ 234.613847][ T9485] team_slave_0: entered allmulticast mode [ 234.616690][ T9485] veth1_to_team: entered allmulticast mode [ 234.620690][ T9485] team_slave_1: entered allmulticast mode [ 234.631309][ T9485] veth0_to_batadv: entered allmulticast mode [ 234.636892][ T9485] batadv_slave_0: entered allmulticast mode [ 234.642466][ T9485] veth1_to_batadv: entered allmulticast mode [ 234.647627][ T9485] batadv_slave_1: entered allmulticast mode [ 234.652252][ T9485] xfrm0: entered allmulticast mode [ 234.657055][ T9485] veth0_to_hsr: entered allmulticast mode [ 234.661065][ T9485] hsr_slave_0: entered allmulticast mode [ 234.668316][ T9485] veth1_to_hsr: entered allmulticast mode [ 234.670974][ T9485] hsr_slave_1: entered allmulticast mode [ 234.674377][ T9485] hsr0: entered allmulticast mode [ 234.677508][ T9485] veth1_virt_wifi: entered allmulticast mode [ 234.680831][ T9485] veth0_virt_wifi: entered allmulticast mode [ 234.683969][ T9485] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 234.687239][ T9485] veth1_vlan: entered allmulticast mode [ 234.690442][ T9485] veth0_vlan: entered allmulticast mode [ 234.695367][ T9485] vlan0: left promiscuous mode [ 234.696826][ T9485] vlan0: entered allmulticast mode [ 234.698378][ T9485] vlan1: entered allmulticast mode [ 234.700307][ T9485] macvlan0: entered allmulticast mode [ 234.703796][ T9485] macvlan1: entered allmulticast mode [ 234.706172][ T9485] ipvlan0: entered allmulticast mode [ 234.707806][ T9485] ipvlan1: entered allmulticast mode [ 234.710227][ T9485] veth1_macvtap: entered allmulticast mode [ 234.714532][ T9485] veth0_macvtap: entered allmulticast mode [ 234.717432][ T9485] macvtap0: entered allmulticast mode [ 234.720029][ T9485] macsec0: entered allmulticast mode [ 234.724248][ T9485] geneve0: entered allmulticast mode [ 234.726956][ T9485] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.729552][ T9485] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.732871][ T9485] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.735440][ T9485] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.738222][ T9485] geneve1: entered allmulticast mode [ 234.744149][ T9485] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 234.747336][ T9485] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 234.750382][ T9485] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 234.754028][ T9485] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 234.759621][ T9485] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 234.766475][ T9485] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 234.769327][ T9485] ip6tnl1: left promiscuous mode [ 234.770813][ T9485] ip6tnl1: entered allmulticast mode [ 234.773047][ T9485] gtp0: entered allmulticast mode [ 234.774610][ T9485] ieee802154 phy1 wpan1: entered allmulticast mode [ 234.922807][ T9499] pim6reg: entered allmulticast mode [ 234.952488][ T9496] ceph: No mds server is up or the cluster is laggy [ 236.365799][ T9515] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 236.369501][ T9515] overlayfs: failed to set xattr on upper [ 236.373070][ T9515] overlayfs: ...falling back to redirect_dir=nofollow. [ 236.375120][ T9515] overlayfs: ...falling back to index=off. [ 236.376786][ T9515] overlayfs: ...falling back to uuid=null. [ 236.576864][ T6007] libceph: connect (1)[c::]:6789 error -22 [ 236.587611][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 236.629147][ T9524] ceph: No mds server is up or the cluster is laggy [ 237.358412][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 239.622881][ T9580] ceph: No mds server is up or the cluster is laggy [ 240.809810][ T9598] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1523369646 (12186957168 ns) > initial count (699924040 ns). Using initial count to start timer. [ 240.858036][ T9601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.819'. [ 240.870659][ T9603] 9pnet_fd: Insufficient options for proto=fd [ 240.878752][ T9603] netlink: 64 bytes leftover after parsing attributes in process `syz.1.818'. [ 242.116145][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 242.118916][ T1139] Bluetooth: hci4: Frame reassembly failed (-84) [ 243.013630][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.826'. [ 244.141383][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 244.142078][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 245.104172][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.837'. [ 245.586318][ T6006] libceph: connect (1)[c::]:6789 error -22 [ 245.588649][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 245.641964][ T9678] ceph: No mds server is up or the cluster is laggy [ 245.669248][ T9683] netlink: 'syz.0.840': attribute type 10 has an invalid length. [ 245.671764][ T9683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.840'. [ 245.676118][ T9683] team0: entered promiscuous mode [ 245.677776][ T9683] team_slave_0: entered promiscuous mode [ 245.685824][ T9683] team_slave_1: entered promiscuous mode [ 245.687595][ T9683] team0: entered allmulticast mode [ 245.689101][ T9683] team_slave_0: entered allmulticast mode [ 245.691029][ T9683] team_slave_1: entered allmulticast mode [ 245.696205][ T9683] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 246.652952][ T9695] ceph: No mds server is up or the cluster is laggy [ 247.527421][ T9719] ceph: No mds server is up or the cluster is laggy [ 247.807132][ T9717] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 248.910435][ T9735] ceph: No mds server is up or the cluster is laggy [ 249.319706][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 249.323487][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 249.361717][ T9743] ceph: No mds server is up or the cluster is laggy [ 249.386336][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'. [ 250.937234][ T9780] »»»»»» speed is unknown, defaulting to 1000 [ 250.946259][ T9781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.863'. [ 251.421677][ T5308] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 252.788089][ T5955] Bluetooth: hci4: sending frame failed (-49) [ 252.790789][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 253.247108][ T9813] netlink: zone id is out of range [ 255.017049][ T9840] capability: warning: `syz.2.885' uses deprecated v2 capabilities in a way that may be insecure [ 255.079379][ T9840] ref_ctr going negative. vaddr: 0x20ffc002, curr val: -29824, delta: 1 [ 255.083361][ T39] audit: type=1804 audit(1739016439.865:9): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.885" name="/newroot/208/file0" dev="tmpfs" ino=1247 res=1 errno=0 [ 255.089474][ T9840] ref_ctr increment failed for inode: 0x4df offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888012c16400 [ 255.107001][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.152467][ T9860] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 256.155806][ T9860] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 256.159016][ T9860] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 257.507823][ T9881] netlink: 44 bytes leftover after parsing attributes in process `syz.2.889'. [ 258.010120][ T9882] ceph: No mds server is up or the cluster is laggy [ 258.061356][ T5955] Bluetooth: hci2: command 0x0405 tx timeout [ 259.122187][ T39] audit: type=1326 audit(1739016443.915:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 259.131742][ T39] audit: type=1326 audit(1739016443.915:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 259.139992][ T39] audit: type=1326 audit(1739016443.925:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.894" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 259.153416][ T39] audit: type=1326 audit(1739016443.925:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 259.153923][ T9905] netlink: 6 bytes leftover after parsing attributes in process `syz.4.895'. [ 259.160741][ T39] audit: type=1326 audit(1739016443.925:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 259.171375][ T39] audit: type=1326 audit(1739016443.925:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.894" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 259.177668][ T39] audit: type=1326 audit(1739016443.925:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.894" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 259.185371][ T39] audit: type=1326 audit(1739016443.925:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.894" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc85a7 code=0x7ffc0000 [ 259.191788][ T39] audit: type=1326 audit(1739016443.925:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9902 comm="syz.1.894" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 259.827688][ T9914] ceph: No mds server is up or the cluster is laggy [ 259.829836][ T6008] libceph: connect (1)[c::]:6789 error -101 [ 259.831681][ T6008] libceph: mon0 (1)[c::]:6789 connect error [ 260.145010][ T6004] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 260.529543][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.899'. [ 260.571455][ T6004] usb 5-1: Using ep0 maxpacket: 32 [ 260.577102][ T6004] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 260.586311][ T6004] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.592834][ T6004] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 260.601410][ T6004] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 260.609528][ T6004] usb 5-1: Product: syz [ 260.618204][ T6004] usb 5-1: Manufacturer: syz [ 260.620212][ T6004] usb 5-1: SerialNumber: syz [ 260.630985][ T6004] usb 5-1: config 0 descriptor?? [ 260.642804][ T6004] ldusb 5-1:0.0: Interrupt in endpoint not found [ 261.610243][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.904'. [ 263.073884][ T9961] ceph: No mds server is up or the cluster is laggy [ 263.084363][ T6007] usb 5-1: USB disconnect, device number 14 [ 263.661403][ T5308] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 264.877773][ T9989] ceph: No mds server is up or the cluster is laggy [ 265.737339][T10012] ceph: No mds server is up or the cluster is laggy [ 265.898013][ T6007] libceph: connect (1)[c::]:6789 error -101 [ 265.899933][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 266.483093][T10029] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 266.721954][T10029] /dev/sr0: Can't open blockdev [ 267.524801][T10042] MTD: Couldn't look up './file0': -15 [ 267.541088][T10036] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 267.771459][ T6012] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 267.897133][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.930'. [ 267.901484][ T6012] usb 5-1: device descriptor read/64, error -71 [ 267.901593][T10052] netlink: 80 bytes leftover after parsing attributes in process `syz.4.930'. [ 267.907560][T10052] netlink: 80 bytes leftover after parsing attributes in process `syz.4.930'. [ 268.491331][ T6012] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 268.731411][ T6012] usb 5-1: device descriptor read/64, error -71 [ 268.860494][ T6012] usb usb5-port1: attempt power cycle [ 269.415409][ T6012] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 269.431777][ T6012] usb 5-1: device descriptor read/8, error -71 [ 269.651926][T10074] cgroup: Bad value for 'name' [ 269.671396][ T6012] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 269.692001][ T6012] usb 5-1: device descriptor read/8, error -71 [ 269.692303][T10074] netlink: 52 bytes leftover after parsing attributes in process `syz.4.935'. [ 269.696447][T10074] ieee802154 phy1 gr: renamed from wpan1 [ 269.749080][T10083] netlink: zone id is out of range [ 269.801604][ T6012] usb usb5-port1: unable to enumerate USB device [ 270.243636][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.936'. [ 271.003258][T10102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.940'. [ 271.460174][ T6006] libceph: connect (1)[c::]:6789 error -22 [ 271.487559][ T6006] libceph: mon0 (1)[c::]:6789 connect error [ 271.514485][T10108] ceph: No mds server is up or the cluster is laggy [ 272.683603][ T6012] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 272.841420][ T6012] usb 6-1: Using ep0 maxpacket: 8 [ 272.845410][ T6012] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 272.849874][ T6012] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.853474][ T6012] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.856464][ T6012] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.860259][ T6012] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.863566][ T6012] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.868165][ T6012] usbtmc 6-1:16.0: bulk endpoints not found [ 273.018376][T10132] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 274.009233][T10151] netlink: zone id is out of range [ 274.885947][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.953'. [ 275.421617][ T6007] usb 6-1: USB disconnect, device number 6 [ 275.438668][T10163] ceph: No mds server is up or the cluster is laggy [ 276.911879][T10195] netlink: 4 bytes leftover after parsing attributes in process `syz.0.962'. [ 277.242390][T10195] unsupported nlmsg_type 40 [ 277.355251][T10191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.962'. [ 277.708586][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 277.737463][T10203] netlink: 6 bytes leftover after parsing attributes in process `syz.1.965'. [ 279.321211][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 279.725839][T10227] netlink: 6 bytes leftover after parsing attributes in process `syz.1.978'. [ 279.901687][ T5308] Bluetooth: hci2: command 0x0405 tx timeout [ 282.837088][T10268] netlink: 6 bytes leftover after parsing attributes in process `syz.2.980'. [ 282.890290][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 282.913707][T10272] xt_SECMARK: invalid mode: 0 [ 282.917071][ T39] kauditd_printk_skb: 124 callbacks suppressed [ 282.917085][ T39] audit: type=1326 audit(1739016467.705:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.981" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 282.928115][ T39] audit: type=1326 audit(1739016467.705:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.981" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 282.936224][ T39] audit: type=1326 audit(1739016467.705:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.981" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 282.944495][ T39] audit: type=1326 audit(1739016467.705:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.981" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 282.952988][ T39] audit: type=1326 audit(1739016467.705:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.981" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 282.960920][ T39] audit: type=1326 audit(1739016467.705:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.981" exe="/syz-executor" sig=0 arch=40000003 syscall=340 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 282.968571][ T39] audit: type=1326 audit(1739016467.705:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.981" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 282.976718][ T39] audit: type=1326 audit(1739016467.705:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.981" exe="/syz-executor" sig=0 arch=40000003 syscall=156 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 282.984833][ T39] audit: type=1326 audit(1739016467.705:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.981" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 282.992902][ T39] audit: type=1326 audit(1739016467.705:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10271 comm="syz.2.981" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x7ffc0000 [ 283.839900][T10283] random: crng reseeded on system resumption [ 283.924233][T10283] 9pnet: Could not find request transport: fdïª\´no=0x00000000000000090x0000000000000009 [ 286.188984][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.992'. [ 286.215793][T10309] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 286.219521][T10309] batman_adv: batadv0: Adding interface: gretap1 [ 286.222187][T10309] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.232182][T10309] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 286.506225][T10321] netlink: 6 bytes leftover after parsing attributes in process `syz.2.993'. [ 287.011362][ T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 287.181356][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 287.184023][ T25] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.187284][ T25] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.190044][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 287.192149][ T25] usb 7-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 287.194730][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.198115][ T25] usb 7-1: config 0 descriptor?? [ 287.787829][ T25] aquacomputer_d5next 0003:0C70:F010.0007: hidraw0: USB HID v0.05 Device [HID 0c70:f010] on usb-dummy_hcd.2-1/input0 [ 288.510747][T10355] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1002'. [ 288.757307][T10357] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1003'. [ 289.077839][T10366] input: syz1 as /devices/virtual/input/input10 [ 289.088946][ T6007] libceph: connect (1)[c::]:6789 error -22 [ 289.091022][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 289.131283][T10367] ceph: No mds server is up or the cluster is laggy [ 289.251258][ T6012] usb 7-1: reset high-speed USB device number 12 using dummy_hcd [ 289.267579][T10371] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 290.500182][T10389] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1012'. [ 290.768141][T10394] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1013'. [ 291.141818][ T25] usb 7-1: USB disconnect, device number 12 [ 292.108203][T10412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1016'. [ 292.828678][T10426] rdma_rxe: rxe_newlink: failed to add bond0 [ 293.618235][T10435] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1023'. [ 293.714432][T10440] ipt_REJECT: ECHOREPLY no longer supported. [ 293.729938][T10441] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1025'. [ 293.998724][ T73] libceph: connect (1)[c::]:6789 error -101 [ 294.000999][ T73] libceph: mon0 (1)[c::]:6789 connect error [ 294.016033][T10444] ceph: No mds server is up or the cluster is laggy [ 294.886513][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1026'. [ 294.913968][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'. [ 294.939843][T10460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1028'. [ 295.294059][T10476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1031'. [ 295.329330][T10473] ceph: No mds server is up or the cluster is laggy [ 296.435867][T10492] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 296.443969][T10492] batman_adv: batadv0: Adding interface: gretap1 [ 296.446386][T10492] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.453532][T10492] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 296.700926][T10494] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1036'. [ 297.189056][T10500] ceph: No mds server is up or the cluster is laggy [ 297.229946][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 297.622283][T10508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1038'. [ 297.733162][T10520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.742416][T10520] bond0: (slave rose0): Enslaving as an active interface with an up link [ 298.712816][ C0] llc_conn_state_process: llc_conn_service failed [ 299.416046][T10555] ceph: No mds server is up or the cluster is laggy [ 299.932207][T10570] ceph: No mds server is up or the cluster is laggy [ 300.679385][T10575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1048'. [ 301.646769][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1052'. [ 301.732363][T10595] ceph: No mds server is up or the cluster is laggy [ 301.743851][ T6007] libceph: connect (1)[c::]:6789 error -22 [ 301.746047][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 302.002435][ T6007] libceph: connect (1)[c::]:6789 error -22 [ 302.004535][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 302.824495][T10611] ceph: No mds server is up or the cluster is laggy [ 302.856221][ T6007] libceph: connect (1)[c::]:6789 error -22 [ 302.858418][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 303.199760][T10619] input: syz1 as /devices/virtual/input/input11 [ 303.350880][T10619] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 303.925913][ T6007] libceph: connect (1)[c::]:6789 error -22 [ 303.928439][ T6007] libceph: mon0 (1)[c::]:6789 connect error [ 303.948428][T10630] ceph: No mds server is up or the cluster is laggy [ 304.631417][T10641] ceph: No mds server is up or the cluster is laggy [ 304.633794][ T73] libceph: connect (1)[c::]:6789 error -101 [ 304.635786][ T73] libceph: mon0 (1)[c::]:6789 connect error [ 305.508122][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1061'. [ 306.255811][T10662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1064'. [ 306.263547][ T101] Bluetooth: hci4: Frame reassembly failed (-84) [ 306.281666][T10667] Bluetooth: hci4: Frame reassembly failed (-84) [ 306.697026][T10673] ipt_ECN: cannot use operation on non-tcp rule [ 306.712150][T10675] input: syz1 as /devices/virtual/input/input12 [ 306.786360][T10675] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 306.837816][T10673] netlink: 'syz.4.1071': attribute type 4 has an invalid length. [ 307.978292][T10691] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1075'. [ 308.301563][ T5308] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 308.307696][ T5955] Bluetooth: hci4: command 0x1003 tx timeout [ 309.465503][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 309.511144][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1078'. [ 309.745500][ T39] kauditd_printk_skb: 18 callbacks suppressed [ 309.745512][ T39] audit: type=1326 audit(1739016494.536:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10715 comm="syz.2.1081" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 309.918963][T10727] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1080'. [ 309.970703][T10730] tipc: Started in network mode [ 309.972428][T10730] tipc: Node identity 4, cluster identity 4711 [ 309.974298][T10730] tipc: Node number set to 4 [ 312.733359][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 313.016788][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 313.258747][T10786] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1094'. [ 313.310663][T10785] netlink: 'syz.4.1095': attribute type 10 has an invalid length. [ 313.313251][T10785] ieee802154 phy1 gr: left allmulticast mode [ 313.335927][T10785] ieee802154 phy1 gr: entered allmulticast mode [ 313.345207][ T6007] ================================================================== [ 313.348127][ T6007] BUG: KASAN: null-ptr-deref in mac802154_header_create+0x193/0x560 [ 313.350519][ T6007] Write of size 4 at addr 000000000000004c by task kworker/1:4/6007 [ 313.354044][ T6007] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 313.355012][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: kworker/1:4 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 313.355032][ T6007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.355044][ T6007] Workqueue: mld mld_ifc_work [ 313.355068][ T6007] Call Trace: [ 313.355073][ T6007] [ 313.355079][ T6007] dump_stack_lvl+0x116/0x1f0 [ 313.355102][ T6007] kasan_report+0xd9/0x110 [ 313.355114][ T6007] ? mac802154_header_create+0x193/0x560 [ 313.355126][ T6007] ? mac802154_header_create+0x193/0x560 [ 313.355137][ T6007] kasan_check_range+0xef/0x1a0 [ 313.355150][ T6007] mac802154_header_create+0x193/0x560 [ 313.355160][ T6007] ? __pfx_mac802154_header_create+0x10/0x10 [ 313.355171][ T6007] ? mark_held_locks+0x9f/0xe0 [ 313.355183][ T6007] ? irqentry_exit+0x3b/0x90 [ 313.355196][ T6007] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.355210][ T6007] ? neigh_connected_output+0x44a/0x620 [ 313.355226][ T6007] ? __pfx_mac802154_header_create+0x10/0x10 [ 313.355236][ T6007] neigh_connected_output+0x363/0x620 [ 313.355252][ T6007] ip6_finish_output2+0xb20/0x2090 [ 313.355264][ T6007] ip6_finish_output+0x3f9/0x1360 [ 313.355275][ T6007] ip6_output+0x1f8/0x540 [ 313.355285][ T6007] mld_sendpack+0x9f0/0x11d0 [ 313.355296][ T6007] ? __pfx_mld_sendpack+0x10/0x10 [ 313.355309][ T6007] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 313.355321][ T6007] mld_ifc_work+0x740/0xca0 [ 313.355333][ T6007] process_one_work+0x958/0x1b30 [ 313.355345][ T6007] ? __pfx_jump_label_update_timeout+0x10/0x10 [ 313.355359][ T6007] ? __pfx_process_one_work+0x10/0x10 [ 313.355370][ T6007] ? assign_work+0x1a0/0x250 [ 313.355380][ T6007] worker_thread+0x6c8/0xf00 [ 313.355391][ T6007] ? __kthread_parkme+0x148/0x220 [ 313.355405][ T6007] ? __pfx_worker_thread+0x10/0x10 [ 313.355415][ T6007] kthread+0x3af/0x750 [ 313.355424][ T6007] ? __pfx_kthread+0x10/0x10 [ 313.355433][ T6007] ? lock_acquire+0x2f/0xb0 [ 313.355444][ T6007] ? __pfx_kthread+0x10/0x10 [ 313.355453][ T6007] ret_from_fork+0x45/0x80 [ 313.355465][ T6007] ? __pfx_kthread+0x10/0x10 [ 313.355473][ T6007] ret_from_fork_asm+0x1a/0x30 [ 313.355486][ T6007] [ 313.355490][ T6007] ================================================================== [ 313.565272][T10785] bond0: (slave gr): Enslaving as an active interface with an up link [ 313.649474][ T6007] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 313.652235][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: kworker/1:4 Not tainted 6.13.0-syzkaller-09760-g69e858e0b8b2 #0 [ 313.655188][ T6007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 313.658215][ T6007] Workqueue: mld mld_ifc_work [ 313.659598][ T6007] Call Trace: [ 313.660572][ T6007] [ 313.661452][ T6007] dump_stack_lvl+0x3d/0x1f0 [ 313.663155][ T6007] panic+0x71d/0x800 [ 313.664601][ T6007] ? __pfx_panic+0x10/0x10 [ 313.666413][ T6007] ? preempt_schedule_thunk+0x1a/0x30 [ 313.668599][ T6007] ? preempt_schedule_common+0x44/0xc0 [ 313.670629][ T6007] ? check_panic_on_warn+0x1f/0xb0 [ 313.672562][ T6007] check_panic_on_warn+0xab/0xb0 [ 313.674138][ T6007] end_report+0x117/0x180 [ 313.675466][ T6007] kasan_report+0xe9/0x110 [ 313.676824][ T6007] ? mac802154_header_create+0x193/0x560 [ 313.678475][ T6007] ? mac802154_header_create+0x193/0x560 [ 313.680167][ T6007] kasan_check_range+0xef/0x1a0 [ 313.681636][ T6007] mac802154_header_create+0x193/0x560 [ 313.683270][ T6007] ? __pfx_mac802154_header_create+0x10/0x10 [ 313.685047][ T6007] ? mark_held_locks+0x9f/0xe0 [ 313.686470][ T6007] ? irqentry_exit+0x3b/0x90 [ 313.687861][ T6007] ? lockdep_hardirqs_on+0x7c/0x110 [ 313.689394][ T6007] ? neigh_connected_output+0x44a/0x620 [ 313.690993][ T6007] ? __pfx_mac802154_header_create+0x10/0x10 [ 313.693128][ T6007] neigh_connected_output+0x363/0x620 [ 313.695204][ T6007] ip6_finish_output2+0xb20/0x2090 [ 313.696691][ T6007] ip6_finish_output+0x3f9/0x1360 [ 313.698194][ T6007] ip6_output+0x1f8/0x540 [ 313.699495][ T6007] mld_sendpack+0x9f0/0x11d0 [ 313.700872][ T6007] ? __pfx_mld_sendpack+0x10/0x10 [ 313.702446][ T6007] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 313.704098][ T6007] mld_ifc_work+0x740/0xca0 [ 313.705471][ T6007] process_one_work+0x958/0x1b30 [ 313.706952][ T6007] ? __pfx_jump_label_update_timeout+0x10/0x10 [ 313.708791][ T6007] ? __pfx_process_one_work+0x10/0x10 [ 313.710365][ T6007] ? assign_work+0x1a0/0x250 [ 313.711776][ T6007] worker_thread+0x6c8/0xf00 [ 313.713629][ T6007] ? __kthread_parkme+0x148/0x220 [ 313.715694][ T6007] ? __pfx_worker_thread+0x10/0x10 [ 313.717732][ T6007] kthread+0x3af/0x750 [ 313.718984][ T6007] ? __pfx_kthread+0x10/0x10 [ 313.720356][ T6007] ? lock_acquire+0x2f/0xb0 [ 313.721940][ T6007] ? __pfx_kthread+0x10/0x10 [ 313.723392][ T6007] ret_from_fork+0x45/0x80 [ 313.724722][ T6007] ? __pfx_kthread+0x10/0x10 [ 313.726092][ T6007] ret_from_fork_asm+0x1a/0x30 [ 313.727555][ T6007] [ 313.729168][ T6007] Kernel Offset: disabled [ 313.730454][ T6007] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:21:38 Registers: info registers vcpu 0 CPU#0 EAX=f6b5b820 EBX=ffffffff ECX=ffffffff EDX=89ee9e8b ESI=89ee99f3 EDI=ffffffff EBP=f6af75b0 ESP=ffa50cf0 EIP=f70b7a18 EFL=00000212 [----A--] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 56bc8440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000201f5000 CR3=0000000077afa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000017c00000000 0000000500000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff853824b5 RDI=ffffffff9aacfea0 RBP=ffffffff9aacfe60 RSP=ffffc90003fc71f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3030303030303057 R12=0000000000000000 R13=0000000000000061 R14=ffffffff9aacfe60 R15=0000000000000000 RIP=ffffffff853824df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000000000000 CR3=0000000077a20000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffffc9000d1dfd60 RCX=ffffc9000d801000 RDX=1ffff92001a3bfb6 RSI=ffffffff89421daa RDI=ffffc9000d1dfdb8 RBP=0000000000000000 RSP=ffffc9000d1dfa40 R8 =0000000000000005 R9 =0000000000000400 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffc9000d1dfb70 R14=0000000000000000 R15=00000000200c9a40 RIP=ffffffff89421dcd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b600000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002000c000 CR3=0000000077a20000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=0000000000000000 RCX=ffffffff8195e942 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff888021975398 RBP=0000000000000000 RSP=ffffc900069a7868 R8 =0000000000000000 R9 =fffffbfff2dc3fb6 R10=ffffffff96e1fdb7 R11=0000000000000002 R12=ffffed100432ea6d R13=ffff888021974880 R14=0000000000000005 R15=ffff8880219753c0 RIP=ffffffff819531e0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000556df0fafe88 CR3=000000004b5ee000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=611c1485611c1485 611c1485611c1485 611c1485611c1485 611c1485611c1485 611c1485611c1485 611c1485611c1485 611c1485611c1485 611c1485611c1485 ZMM22=71b6e9ff71b6e9ff 71b6e9ff71b6e9ff 71b6e9ff71b6e9ff 71b6e9ff71b6e9ff 71b6e9ff71b6e9ff 71b6e9ff71b6e9ff 71b6e9ff71b6e9ff 71b6e9ff71b6e9ff ZMM23=f77de735f77de735 f77de735f77de735 f77de735f77de735 f77de735f77de735 f77de735f77de735 f77de735f77de735 f77de735f77de735 f77de735f77de735 ZMM24=ffcd1551ffcd1551 ffcd1551ffcd1551 ffcd1551ffcd1551 ffcd1551ffcd1551 ffcd1551ffcd1551 ffcd1551ffcd1551 ffcd1551ffcd1551 ffcd1551ffcd1551 ZMM25=12b64c9a12b64c9a 12b64c9a12b64c9a 12b64c9a12b64c9a 12b64c9a12b64c9a 12b64c9a12b64c9a 12b64c9a12b64c9a 12b64c9a12b64c9a 12b64c9a12b64c9a ZMM26=fd67e204fd67e204 fd67e204fd67e204 fd67e204fd67e204 fd67e204fd67e204 fd67e204fd67e204 fd67e204fd67e204 fd67e204fd67e204 fd67e204fd67e204 ZMM27=9b8829569b882956 9b8829569b882956 9b8829569b882956 9b8829569b882956 9b8829569b882956 9b8829569b882956 9b8829569b882956 9b8829569b882956 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=7c0a00007c0a0000 7c0a00007c0a0000 7c0a00007c0a0000 7c0a00007c0a0000 7c0a00007c0a0000 7c0a00007c0a0000 7c0a00007c0a0000 7c0a00007c0a0000