last executing test programs: 12.465144902s ago: executing program 3 (id=4478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) clock_gettime(0x7, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x14) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2002, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 9.635170741s ago: executing program 3 (id=4485): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x25, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x12}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r2, 0x0, 0x20008840) 9.378016428s ago: executing program 1 (id=4488): setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 9.331088381s ago: executing program 3 (id=4489): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000075b8b62e943fefae1913e055b8852885f3200b41a4a7e940141a3e9a708cfa000f58442c767bb8bac7e75a49ac5762e52f7f3bf6909e28d3468821124bce8d75bf8584dedd275c45e85bfa22d157b6d5ac4e569df05173d6ff9d8ed3bdf95c41f60f6a1b456842fecd0f09b6ab9136de2336b349cfe9cd308933da9b574e4f040f"], 0x40, 0x5ec, &(0x7f0000001640)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 8.191685526s ago: executing program 0 (id=4490): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f0000000480)={[{0x2d, 'net_prio'}]}, 0xa) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 7.990840254s ago: executing program 0 (id=4493): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$alg(0x26, 0x5, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x12, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) bind$inet6(r4, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) 7.912786199s ago: executing program 1 (id=4494): process_vm_readv(0x0, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/207, 0xcf}], 0x1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)=""/179, 0xb3}], 0x2, 0x0) 6.818932741s ago: executing program 4 (id=4496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040010) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x7}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 6.528268785s ago: executing program 2 (id=4497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, 0x0, 0x106, 0x2}}, 0x20) 6.462490332s ago: executing program 1 (id=4498): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93a", 0xbe, 0x805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x22, 0x0) 6.425550953s ago: executing program 0 (id=4499): socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x0, 0x0, r2, 0x2000, 0x10000000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 5.565249649s ago: executing program 4 (id=4500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = memfd_secret(0x0) futimesat(r4, 0x0, 0x0) 5.550009318s ago: executing program 1 (id=4501): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/snmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0xfffffffffffffffd}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff58, &(0x7f0000000000)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) read$FUSE(r3, 0x0, 0x0) 4.561952424s ago: executing program 2 (id=4502): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000024c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0506617, &(0x7f0000000080)=0x2) 4.495072237s ago: executing program 4 (id=4503): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x1}}, 0x0, 0x0, 0x6, 0x0, "10baa70a93289349d889de25b87376f64276337642b890d33cb5b592e66e6229bc5c7ac135fee1b3871b7ef6619db5b2a94edb6f73ea08b02aa3b47debd38b6d889a8c986b33eb49c3157f1f370dfd67"}, 0xd8) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f0000000480)={[{0x2d, 'net_prio'}]}, 0xa) close_range(r0, 0xffffffffffffffff, 0x10000000000000) 3.563424625s ago: executing program 1 (id=4504): setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) truncate(&(0x7f0000000200)='./file1\x00', 0x20fffffffc) 3.562916811s ago: executing program 2 (id=4505): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000000)=0xe0c0229) write$binfmt_aout(r0, &(0x7f0000000280)=ANY=[], 0xfce1) 3.535091465s ago: executing program 3 (id=4506): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) 3.519721326s ago: executing program 0 (id=4507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) clock_gettime(0x7, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x14) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2002, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000000)={0x0}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x2}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) 2.482544754s ago: executing program 2 (id=4508): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x3, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x86, 0xfff, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83c}) dup(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd4, 0x35}) close_range(r0, 0xffffffffffffffff, 0x0) 2.400559421s ago: executing program 4 (id=4509): process_vm_readv(0x0, &(0x7f0000001840)=[{&(0x7f00000004c0)=""/207, 0xcf}], 0x1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000000)=""/179, 0xb3}], 0x2, 0x0) 2.291460247s ago: executing program 4 (id=4510): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040010) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfff1}, {}, {0x7}}}, 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) 2.199667585s ago: executing program 2 (id=4511): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x7000000, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) 2.120761609s ago: executing program 3 (id=4512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, 0x0, 0x106, 0x2}}, 0x20) 2.120030608s ago: executing program 0 (id=4513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = memfd_secret(0x0) futimesat(r4, 0x0, 0x0) 2.002428311s ago: executing program 2 (id=4514): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/snmp6\x00') prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0xfffffffffffffffd}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff58, &(0x7f0000000000)=0x7) socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='\x00', 0x0) read$FUSE(r3, 0x0, 0x0) 1.170265404s ago: executing program 3 (id=4515): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 1.168779258s ago: executing program 4 (id=4516): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000024c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0xc0506617, &(0x7f0000000080)=0x2) 1.109290897s ago: executing program 1 (id=4517): socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x400) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x8000000000000000, 0x0, 0x2, 0x0, 0x100, 0x10001003}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0x1000000000, 0x689, 0x2, 0x3ffffffffd, 0x2, 0x7}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x1) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2a, 0x6, 0x0, {0x1, 0x0, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x0, 0x0, r2, 0x2000, 0x10000000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=4518): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x7, 0x1, 0x8, 0xff, 0x881}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x81082, 0x0) ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000300)={0x2}) setgroups(0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB], 0x24}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xc, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x7, 0x4) kernel console output (not intermixed with test programs): 0595][T13139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2198'. [ 846.351369][T13155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2204'. [ 847.722545][ T1209] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 848.553240][ T1209] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 848.561310][ T1209] usb 4-1: config 0 has no interface number 0 [ 848.582344][ T1209] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 848.591436][ T1209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.623630][ T1209] usb 4-1: config 0 descriptor?? [ 848.663898][ T1209] usb 4-1: selecting invalid altsetting 1 [ 848.670440][ T1209] dvb_ttusb_budget: ttusb_init_controller: error [ 848.705644][ T1209] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 848.969857][T13176] sp0: Synchronizing with TNC [ 849.044689][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2211'. [ 849.578103][ T1209] DVB: Unable to find symbol cx22700_attach() [ 849.793693][ T1209] DVB: Unable to find symbol tda10046_attach() [ 849.824911][ T1209] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 849.861601][ T1209] usb 4-1: USB disconnect, device number 11 [ 850.994159][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2216'. [ 851.028040][T13199] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2218'. [ 852.469559][T13217] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2225'. [ 852.743110][ T1209] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 853.134531][ T1209] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 853.210008][ T1209] usb 3-1: config 0 has no interface number 0 [ 853.239168][T13224] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2227'. [ 853.241742][ T1209] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 853.293855][T13224] input: syz0 as /devices/virtual/input/input16 [ 853.300339][ T1209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.331359][ T1209] usb 3-1: config 0 descriptor?? [ 853.867259][ T1209] usb 3-1: selecting invalid altsetting 1 [ 853.879233][ T1209] dvb_ttusb_budget: ttusb_init_controller: error [ 853.902639][ T1209] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 854.189999][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2231'. [ 854.417970][ T1209] DVB: Unable to find symbol cx22700_attach() [ 854.904196][T13248] use of bytesused == 0 is deprecated and will be removed in the future, [ 854.913083][T13248] use the actual size instead. [ 856.481889][ T1209] DVB: Unable to find symbol tda10046_attach() [ 856.579875][ T1209] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 856.604961][ T1209] usb 3-1: USB disconnect, device number 5 [ 857.169838][T13265] Bluetooth: (null): Invalid header checksum [ 858.531948][T13264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2238'. [ 858.786271][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 858.786290][ T30] audit: type=1326 audit(1750697265.888:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6db8e929 code=0x7ffc0000 [ 858.814842][ C0] vkms_vblank_simulate: vblank timer overrun [ 858.903757][ T30] audit: type=1326 audit(1750697265.928:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6db8e929 code=0x7ffc0000 [ 859.431821][ T30] audit: type=1326 audit(1750697265.928:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4f6db8e929 code=0x7ffc0000 [ 859.462843][ T30] audit: type=1326 audit(1750697265.928:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6db8e929 code=0x7ffc0000 [ 859.527903][ T30] audit: type=1326 audit(1750697265.938:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6db8e929 code=0x7ffc0000 [ 859.616943][ T30] audit: type=1326 audit(1750697265.938:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f6db8e929 code=0x7ffc0000 [ 859.680347][ T30] audit: type=1326 audit(1750697265.938:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6db8e929 code=0x7ffc0000 [ 859.732512][ T30] audit: type=1326 audit(1750697265.938:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6db8e929 code=0x7ffc0000 [ 859.757198][ T30] audit: type=1326 audit(1750697265.938:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f6db8e929 code=0x7ffc0000 [ 859.784384][ T30] audit: type=1326 audit(1750697265.948:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13273 comm="syz.0.2241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6db8e929 code=0x7ffc0000 [ 859.917021][ T43] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 861.298811][ T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 861.335274][ T43] usb 3-1: config 0 has no interface number 0 [ 861.372792][ T43] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 861.393001][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.444512][ T43] usb 3-1: config 0 descriptor?? [ 861.479600][ T43] usb 3-1: selecting invalid altsetting 1 [ 861.491619][ T43] dvb_ttusb_budget: ttusb_init_controller: error [ 862.495226][ T43] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 863.162767][ T43] DVB: Unable to find symbol cx22700_attach() [ 863.439200][ T43] DVB: Unable to find symbol tda10046_attach() [ 863.473151][ T43] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 863.566467][ T43] usb 3-1: USB disconnect, device number 6 [ 864.912651][T13352] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2268'. [ 866.148264][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2275'. [ 866.237230][T13380] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2277'. [ 866.342644][T13379] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2275'. [ 866.969440][T13386] CIFS mount error: No usable UNC path provided in device string! [ 866.969440][T13386] [ 866.979816][T13386] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 868.369252][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 868.369272][ T30] audit: type=1326 audit(1750697275.478:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 868.415103][ T30] audit: type=1326 audit(1750697275.478:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 868.444594][ T30] audit: type=1326 audit(1750697275.518:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 868.535251][ T30] audit: type=1326 audit(1750697275.518:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 868.610494][ T30] audit: type=1326 audit(1750697275.518:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 868.670871][ T30] audit: type=1326 audit(1750697275.518:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 868.670926][ T30] audit: type=1326 audit(1750697275.518:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 868.670973][ T30] audit: type=1326 audit(1750697275.518:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 868.671017][ T30] audit: type=1326 audit(1750697275.518:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 868.671065][ T30] audit: type=1326 audit(1750697275.518:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13406 comm="syz.2.2289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 868.788262][T13420] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2293'. [ 869.382757][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.674861][T13426] CIFS mount error: No usable UNC path provided in device string! [ 869.674861][T13426] [ 869.675075][T13426] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 870.310089][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.317146][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.944650][T13444] geneve2: entered promiscuous mode [ 871.991877][T13444] geneve2: entered allmulticast mode [ 873.256749][T13458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2304'. [ 873.675001][T13457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2307'. [ 873.714897][T13457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2307'. [ 874.438470][T13473] netlink: 'syz.4.2310': attribute type 4 has an invalid length. [ 874.757831][T13468] netlink: 'syz.4.2310': attribute type 4 has an invalid length. [ 875.618013][T13468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 876.949142][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2320'. [ 876.999150][T13500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2320'. [ 877.120968][T13510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2323'. [ 879.846285][T13533] netlink: 'syz.1.2330': attribute type 4 has an invalid length. [ 879.985683][T13524] netlink: 'syz.1.2330': attribute type 4 has an invalid length. [ 880.209635][T13534] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2332'. [ 880.229913][T13534] input: syz0 as /devices/virtual/input/input17 [ 880.266473][T13523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 881.150152][T13555] geneve3: entered promiscuous mode [ 881.155799][T13555] geneve3: entered allmulticast mode [ 881.180092][T13550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2338'. [ 881.226762][T13550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2338'. [ 882.939074][T13579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2350'. [ 882.948346][T13579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2350'. [ 882.960661][T13576] lo speed is unknown, defaulting to 1000 [ 883.031764][T13581] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2351'. [ 885.155144][T13614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2363'. [ 885.203861][T13614] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2363'. [ 885.378836][T13619] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'. [ 885.720589][T13631] netlink: 'syz.4.2369': attribute type 4 has an invalid length. [ 886.104296][T13634] netlink: 'syz.4.2369': attribute type 4 has an invalid length. [ 886.813983][T13630] lo speed is unknown, defaulting to 1000 [ 888.947861][ T5149] Bluetooth: hci5: command 0x1003 tx timeout [ 888.957543][T12284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 889.589988][T13671] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 892.966830][T13689] netlink: 'syz.0.2387': attribute type 4 has an invalid length. [ 893.099139][T13690] netlink: 'syz.0.2387': attribute type 4 has an invalid length. [ 893.335018][T13692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.040498][T13716] lo speed is unknown, defaulting to 1000 [ 898.178027][ T30] kauditd_printk_skb: 174 callbacks suppressed [ 898.178046][ T30] audit: type=1800 audit(1750697305.288:1679): pid=13735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2399" name="/" dev="9p" ino=2 res=0 errno=0 [ 901.290051][ T30] audit: type=1326 audit(1750697308.398:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13748 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa958e929 code=0x7ffc0000 [ 901.405237][ T30] audit: type=1326 audit(1750697308.398:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13748 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa958e929 code=0x7ffc0000 [ 901.454995][ T30] audit: type=1326 audit(1750697308.428:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13748 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fefa958e929 code=0x7ffc0000 [ 901.486524][ T30] audit: type=1326 audit(1750697308.428:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13748 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa958e929 code=0x7ffc0000 [ 901.526667][ T30] audit: type=1326 audit(1750697308.428:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13748 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa958e929 code=0x7ffc0000 [ 902.321478][ T30] audit: type=1326 audit(1750697308.428:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13748 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa958e929 code=0x7ffc0000 [ 902.345710][ T30] audit: type=1326 audit(1750697308.428:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13748 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa958e929 code=0x7ffc0000 [ 902.376398][ T30] audit: type=1326 audit(1750697308.428:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13748 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa958e929 code=0x7ffc0000 [ 902.412714][ T30] audit: type=1326 audit(1750697308.428:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13748 comm="syz.1.2404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefa958e929 code=0x7ffc0000 [ 903.747963][T13776] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2411'. [ 904.001579][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 904.001598][ T30] audit: type=1800 audit(1750697311.108:1704): pid=13780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2412" name="/" dev="9p" ino=2 res=0 errno=0 [ 904.025256][T13783] lo speed is unknown, defaulting to 1000 [ 904.222203][T13791] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2417'. [ 904.246613][T13791] input: syz0 as /devices/virtual/input/input18 [ 905.300016][ T30] audit: type=1326 audit(1750697312.408:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.2.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 905.406480][ T30] audit: type=1326 audit(1750697312.438:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.2.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 905.466848][ T30] audit: type=1326 audit(1750697312.448:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.2.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 905.493528][ T30] audit: type=1326 audit(1750697312.448:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.2.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 905.522482][ T30] audit: type=1326 audit(1750697312.448:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.2.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 905.549733][ T30] audit: type=1326 audit(1750697312.448:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.2.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 905.583254][ T30] audit: type=1326 audit(1750697312.448:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.2.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 905.606247][ T30] audit: type=1326 audit(1750697312.448:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.2.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 905.629068][ T30] audit: type=1326 audit(1750697312.448:1713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13797 comm="syz.2.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 907.340087][T13825] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2424'. [ 909.502489][T12284] Bluetooth: hci3: command 0x0406 tx timeout [ 910.142662][T13838] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2428'. [ 910.154190][T13838] input: syz0 as /devices/virtual/input/input19 [ 912.498821][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 912.498842][ T30] audit: type=1326 audit(1750697319.588:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 912.534546][ T30] audit: type=1326 audit(1750697319.608:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 912.675196][ T30] audit: type=1326 audit(1750697319.618:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 912.721313][ T30] audit: type=1326 audit(1750697319.618:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 912.791590][T13864] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2435'. [ 912.805022][ T30] audit: type=1326 audit(1750697319.618:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 912.833887][ T30] audit: type=1326 audit(1750697319.648:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 912.863663][ T30] audit: type=1326 audit(1750697319.648:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 912.889104][ T30] audit: type=1326 audit(1750697319.648:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 912.990438][T13867] netfs: Couldn't get user pages (rc=-14) [ 913.478560][ T30] audit: type=1326 audit(1750697319.648:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 913.538294][ T30] audit: type=1326 audit(1750697319.648:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13855 comm="syz.2.2432" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 913.963214][T13887] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2443'. [ 913.975838][T13887] input: syz0 as /devices/virtual/input/input20 [ 917.118818][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2450'. [ 917.188317][T13908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2450'. [ 917.755379][T13908] geneve2: entered promiscuous mode [ 917.780295][T13908] geneve2: entered allmulticast mode [ 919.513535][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 919.519857][ T30] audit: type=1326 audit(1750697326.628:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 919.591278][ T30] audit: type=1326 audit(1750697326.628:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 919.645124][ T30] audit: type=1326 audit(1750697326.628:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 919.670608][ T30] audit: type=1326 audit(1750697326.628:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 919.699150][ T30] audit: type=1326 audit(1750697326.628:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 919.731277][ T30] audit: type=1326 audit(1750697326.628:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 919.780996][ T30] audit: type=1326 audit(1750697326.628:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 919.811128][ T30] audit: type=1326 audit(1750697326.628:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 919.837194][ T30] audit: type=1326 audit(1750697326.628:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 919.865239][ T30] audit: type=1326 audit(1750697326.628:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13938 comm="syz.2.2459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f278e929 code=0x7ffc0000 [ 919.904701][T13946] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 919.909918][T13947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2461'. [ 919.932097][T13947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2461'. [ 919.941309][T13947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2461'. [ 919.955321][T13947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2461'. [ 920.223256][T13956] overlayfs: failed to resolve './file0': -2 [ 921.664548][T13974] CIFS mount error: No usable UNC path provided in device string! [ 921.664548][T13974] [ 921.686615][T13974] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 926.371780][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 926.371799][ T30] audit: type=1326 audit(1750697333.478:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 926.412018][ T30] audit: type=1326 audit(1750697333.478:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 926.439691][ T30] audit: type=1326 audit(1750697333.478:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 926.475701][ T30] audit: type=1326 audit(1750697333.478:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 926.738399][ T30] audit: type=1326 audit(1750697333.478:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 926.782100][ T30] audit: type=1326 audit(1750697333.518:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 927.001518][ T30] audit: type=1326 audit(1750697333.518:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 927.106843][T14016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2481'. [ 927.339450][ T30] audit: type=1326 audit(1750697333.518:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 927.475653][ T30] audit: type=1326 audit(1750697333.548:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 927.613494][ T30] audit: type=1326 audit(1750697333.548:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14002 comm="syz.3.2480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 928.010106][T14023] CIFS mount error: No usable UNC path provided in device string! [ 928.010106][T14023] [ 928.021048][T14023] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 931.757575][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.777540][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.554359][T14060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2498'. [ 934.755282][T14050] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 936.219094][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 936.219113][ T30] audit: type=1326 audit(1750697343.328:1826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.4.2499" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575b18e929 code=0x0 [ 936.423613][ T1209] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 936.586231][ T1209] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 936.668169][ T1209] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.679115][ T1209] usb 2-1: config 0 interface 0 has no altsetting 0 [ 936.685882][ T1209] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 936.695057][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.706367][ T1209] usb 2-1: config 0 descriptor?? [ 937.141600][ T1209] hid_parser_main: 5 callbacks suppressed [ 937.141618][ T1209] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 937.166745][ T1209] hid-steam 0003:28DE:1102.0007: unknown main item tag 0x0 [ 937.383272][ T1209] hid-steam 0003:28DE:1102.0007: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 937.627349][ T1209] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' connected [ 937.913733][ T1209] input: Steam Controller as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1102.0007/input/input21 [ 938.048908][ T1209] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 938.092364][ T1209] hid-steam 0003:28DE:1102.0008: unknown main item tag 0x0 [ 938.126847][ T1209] hid-steam 0003:28DE:1102.0008: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 938.171366][ T1209] usb 2-1: USB disconnect, device number 8 [ 938.178010][T10114] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 938.694634][T10114] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 938.839772][T10114] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 938.892040][T10114] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 938.944947][T10114] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.954363][ T1209] hid-steam 0003:28DE:1102.0007: Steam Controller 'XXXXXXXXXX' disconnected [ 938.970952][T14106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2511'. [ 938.991599][T14098] fido_id[14098]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 939.012806][T10114] usb 5-1: Product: syz [ 939.026936][T10114] usb 5-1: Manufacturer: syz [ 939.056032][T10114] usb 5-1: SerialNumber: syz [ 939.087646][T10114] usb 5-1: config 0 descriptor?? [ 939.325761][T14086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.361222][T14086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 939.409740][ T43] usb 5-1: USB disconnect, device number 9 [ 942.317576][T14130] sp0: Synchronizing with TNC [ 945.573420][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2522'. [ 945.665525][T14144] geneve3: entered promiscuous mode [ 945.674980][T14144] geneve3: entered allmulticast mode [ 945.961160][T14154] netlink: 'syz.4.2527': attribute type 16 has an invalid length. [ 945.969662][T14154] netlink: 'syz.4.2527': attribute type 17 has an invalid length. [ 947.347638][T14178] input: syz0 as /devices/virtual/input/input22 [ 952.013334][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2539'. [ 954.682666][T14225] input: syz0 as /devices/virtual/input/input23 [ 959.553665][T14257] CUSE: info not properly terminated [ 961.626751][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2556'. [ 964.176678][T14278] CIFS mount error: No usable UNC path provided in device string! [ 964.176678][T14278] [ 964.186890][T14278] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 971.880725][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2570'. [ 972.002410][T14318] CIFS mount error: No usable UNC path provided in device string! [ 972.002410][T14318] [ 972.013870][T14318] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 975.710825][T14346] 9pnet_fd: Insufficient options for proto=fd [ 975.722405][T14346] siw: device registration error -23 [ 978.718683][T14371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2587'. [ 980.439532][T14389] 9pnet_fd: Insufficient options for proto=fd [ 982.104144][T14396] random: crng reseeded on system resumption [ 984.104155][T14415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2601'. [ 985.395031][T14428] 9pnet_fd: Insufficient options for proto=fd [ 985.403158][T14428] siw: device registration error -23 [ 986.274666][ T5149] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 986.284233][T12284] Bluetooth: hci5: command 0x1003 tx timeout [ 987.823612][T14434] CIFS mount error: No usable UNC path provided in device string! [ 987.823612][T14434] [ 987.835511][T14434] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 988.342507][T14436] overlayfs: missing 'lowerdir' [ 988.407579][T14438] fuse: root generation should be zero [ 990.145810][T14452] sp0: Synchronizing with TNC [ 990.228813][T14461] No such timeout policy "syz0" [ 990.553168][T14466] ubi31: attaching mtd0 [ 990.570004][T14466] ubi31: scanning is finished [ 991.144560][T14464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2618'. [ 992.729291][T14466] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 992.738593][T14466] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 992.745999][T14466] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 992.753093][T14466] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 992.760582][T14466] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 992.767548][T14466] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 992.775715][T14466] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2667525872 [ 992.786048][T14466] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 993.084345][T14478] ubi31: background thread "ubi_bgt31d" started, PID 14478 [ 993.187924][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.196576][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.719658][T14484] overlayfs: missing 'lowerdir' [ 994.447547][T14492] 9pnet_fd: Insufficient options for proto=fd [ 994.459069][T14492] siw: device registration error -23 [ 995.142487][T14493] CIFS mount error: No usable UNC path provided in device string! [ 995.142487][T14493] [ 995.155431][T14493] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 995.874225][T14502] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 996.840490][T14512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2631'. [ 996.873943][T14505] sp0: Synchronizing with TNC [ 998.376266][T14530] No such timeout policy "syz0" [ 998.699247][T14537] ubi: mtd0 is already attached to ubi31 [ 999.219529][T14538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2639'. [ 999.528166][T14534] overlayfs: missing 'workdir' [ 999.928114][T14546] CIFS mount error: No usable UNC path provided in device string! [ 999.928114][T14546] [ 999.938463][T14546] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1001.022373][ T5924] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1002.470615][ T5924] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1002.482334][ T5924] usb 3-1: config 0 has no interface number 0 [ 1002.597862][ T5924] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1002.614530][T14568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2646'. [ 1002.886717][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.238519][ T5924] usb 3-1: Product: syz [ 1003.248585][ T5924] usb 3-1: Manufacturer: syz [ 1003.379439][ T5924] usb 3-1: SerialNumber: syz [ 1003.400265][ T5924] usb 3-1: config 0 descriptor?? [ 1003.487854][ T5924] asix 3-1:0.251: probe with driver asix failed with error -71 [ 1003.508138][ T5924] usb 3-1: USB disconnect, device number 7 [ 1003.886487][T14574] sp0: Synchronizing with TNC [ 1003.987802][T14590] netlink: 'syz.1.2656': attribute type 1 has an invalid length. [ 1005.555045][T14598] No such timeout policy "syz0" [ 1005.888599][T14604] ubi: mtd0 is already attached to ubi31 [ 1006.912725][T14613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.614891][T14616] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2661'. [ 1008.247743][ C1] sd 0:0:1:0: [sda] tag#3806 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1008.258430][ C1] sd 0:0:1:0: [sda] tag#3806 CDB: Read(6) 08 1e df d0 ec f7 [ 1008.528012][ T30] audit: type=1326 audit(1884915143.635:1827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 1008.746699][ T30] audit: type=1326 audit(1884915143.675:1828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 1008.957469][ T30] audit: type=1326 audit(1884915143.815:1829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 1009.036869][T14633] overlayfs: missing 'workdir' [ 1009.332960][ T30] audit: type=1326 audit(1884915143.815:1830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 1009.579955][ T30] audit: type=1326 audit(1884915143.815:1831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 1009.603203][ T30] audit: type=1326 audit(1884915143.815:1832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ffa29d8e929 code=0x7ffc0000 [ 1009.625843][ T30] audit: type=1326 audit(1884915143.815:1833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa29d2ab19 code=0x7ffc0000 [ 1009.657979][ T30] audit: type=1326 audit(1884915143.815:1834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa29d2ab19 code=0x7ffc0000 [ 1009.731599][ T30] audit: type=1326 audit(1884915143.885:1835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa29d2ab19 code=0x7ffc0000 [ 1009.843836][ T30] audit: type=1326 audit(1884915143.885:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14628 comm="syz.3.2669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ffa29d2ab19 code=0x7ffc0000 [ 1011.139053][ C1] sd 0:0:1:0: [sda] tag#3807 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1011.149605][ C1] sd 0:0:1:0: [sda] tag#3807 CDB: Read(6) 08 1e df d0 ec f7 [ 1012.304972][T14673] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1012.342387][T14673] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1015.730628][ C1] sd 0:0:1:0: [sda] tag#3780 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1015.741125][ C1] sd 0:0:1:0: [sda] tag#3780 CDB: Read(6) 08 1e df d0 ec f7 [ 1016.093434][T14707] overlayfs: failed to resolve './file0': -2 [ 1017.989786][T14725] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1018.017231][T14725] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1020.193229][T14750] overlayfs: failed to resolve './file0': -2 [ 1020.308120][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 1022.060238][T14771] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1022.080037][T14771] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1023.105685][T14752] team0 (unregistering): Port device team_slave_0 removed [ 1023.160355][T14752] team0 (unregistering): Port device team_slave_1 removed [ 1023.430749][T14797] overlayfs: failed to resolve './file0': -2 [ 1023.559023][T14801] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1024.378374][T14809] No such timeout policy "syz0" [ 1024.643839][T14815] ubi: mtd0 is already attached to ubi31 [ 1025.263569][T12284] Bluetooth: hci5: command 0x1003 tx timeout [ 1025.332325][ T5149] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1027.705903][ C1] sd 0:0:1:0: [sda] tag#3796 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1027.716418][ C1] sd 0:0:1:0: [sda] tag#3796 CDB: Read(6) 08 1e df d0 ec f7 [ 1027.794798][T14826] overlayfs: failed to resolve './file0': -2 [ 1027.978188][T14836] 9pnet_fd: Insufficient options for proto=fd [ 1028.201394][T14840] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1029.490483][ T30] kauditd_printk_skb: 318 callbacks suppressed [ 1029.490504][ T30] audit: type=1326 audit(1884915164.595:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14842 comm="syz.0.2746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4f6db8e929 code=0x0 [ 1029.705170][T14859] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 1030.091404][T14869] overlayfs: failed to resolve './file0': -2 [ 1030.330210][T14875] 9pnet_fd: Insufficient options for proto=fd [ 1031.789730][T14889] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1032.798188][T12284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1032.809501][T12284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1032.823990][T12284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1032.834161][T12284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1032.857171][T12284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1033.788189][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.801323][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1033.946298][ T30] audit: type=1326 audit(1884915169.055:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14908 comm="syz.4.2766" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f575b18e929 code=0x0 [ 1033.996076][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.022594][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1036.046350][T14896] lo speed is unknown, defaulting to 1000 [ 1036.055225][T12284] Bluetooth: hci0: command tx timeout [ 1036.085066][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.106389][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1038.495512][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.890827][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1039.017798][ T5149] Bluetooth: hci0: command tx timeout [ 1040.591894][T14896] chnl_net:caif_netlink_parms(): no params data found [ 1040.810853][ T49] bridge0: port 3(batadv0) entered disabled state [ 1040.865349][ T49] bridge_slave_1: left allmulticast mode [ 1040.878159][ T49] bridge_slave_1: left promiscuous mode [ 1040.889941][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.922981][ T49] bridge_slave_0: left allmulticast mode [ 1040.928857][ T49] bridge_slave_0: left promiscuous mode [ 1040.938527][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.998731][T14960] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1041.133289][ T5149] Bluetooth: hci0: command tx timeout [ 1043.182279][ T5149] Bluetooth: hci0: command tx timeout [ 1045.372900][T15001] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 1046.175577][T15015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2791'. [ 1049.441154][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1049.472929][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1049.495432][ T49] bond0 (unregistering): (slave bond2): Releasing backup interface [ 1049.537444][ T49] bond0 (unregistering): Released all slaves [ 1049.587485][ T49] bond1 (unregistering): Released all slaves [ 1049.866713][ T49] bond2 (unregistering): Released all slaves [ 1050.300612][T14896] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.525889][T14896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.560919][T14896] bridge_slave_0: entered allmulticast mode [ 1050.569086][T14896] bridge_slave_0: entered promiscuous mode [ 1051.707118][T14896] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.725863][T14896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.741988][T14896] bridge_slave_1: entered allmulticast mode [ 1051.750297][T14896] bridge_slave_1: entered promiscuous mode [ 1052.360933][T14896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.459409][T14896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.755270][T14896] team0: Port device team_slave_0 added [ 1052.790077][T14896] team0: Port device team_slave_1 added [ 1053.011534][ T49] hsr_slave_0: left promiscuous mode [ 1053.038283][ T49] hsr_slave_1: left promiscuous mode [ 1053.044791][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.055150][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.098508][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.182036][T15084] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2805'. [ 1053.253944][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.799620][ T49] veth1_macvtap: left promiscuous mode [ 1053.820525][ T49] veth0_macvtap: left promiscuous mode [ 1053.834707][ T49] veth1_vlan: left promiscuous mode [ 1053.850282][ T49] veth0_vlan: left promiscuous mode [ 1054.628421][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.635256][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.128040][T15131] 9pnet_fd: Insufficient options for proto=fd [ 1057.788419][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1057.836760][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1059.689664][ C1] sd 0:0:1:0: [sda] tag#3804 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1059.700116][ C1] sd 0:0:1:0: [sda] tag#3804 CDB: Read(6) 08 1e df d0 ec f7 [ 1059.831113][T14896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.843695][T14896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.870589][T14896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.921598][T14896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.931878][T14896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.959218][T14896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.068150][T15159] netlink: 'syz.4.2828': attribute type 1 has an invalid length. [ 1060.734751][T14896] hsr_slave_0: entered promiscuous mode [ 1060.766413][T14896] hsr_slave_1: entered promiscuous mode [ 1060.789040][T14896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1060.824783][T14896] Cannot create hsr debugfs directory [ 1063.603384][ T49] IPVS: stop unused estimator thread 0... [ 1064.410733][T15218] netlink: 'syz.2.2840': attribute type 1 has an invalid length. [ 1064.668225][T15220] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2841'. [ 1067.488016][T14896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1067.539725][T14896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1067.575434][T14896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1067.694221][T14896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1067.761135][T15261] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2854'. [ 1068.929234][T14896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.422380][T12284] Bluetooth: hci5: command 0x1003 tx timeout [ 1069.529699][T14896] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.553014][ T5149] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1069.897595][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.904949][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.950015][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.957181][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.340694][ C1] sd 0:0:1:0: [sda] tag#3820 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1070.351266][ C1] sd 0:0:1:0: [sda] tag#3820 CDB: Read(6) 08 1e df d0 ec f7 [ 1070.538298][T14896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1070.617303][T14896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1072.085430][T14896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1072.444303][T14896] veth0_vlan: entered promiscuous mode [ 1072.504501][T14896] veth1_vlan: entered promiscuous mode [ 1072.586862][T15336] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1072.653384][T14896] veth0_macvtap: entered promiscuous mode [ 1072.689886][T14896] veth1_macvtap: entered promiscuous mode [ 1073.477680][T14896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.562880][T14896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.929371][T12291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.970483][T12291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.981160][T12291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.038314][T12291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.351185][T12291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.369739][T12291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.453450][T15373] overlayfs: missing 'lowerdir' [ 1074.483916][ T5994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.491777][ T5994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.576055][T15377] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1077.579681][T15422] overlayfs: missing 'lowerdir' [ 1077.791968][T15426] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1078.787575][T12284] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1078.798318][T12284] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1078.808806][T12284] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1078.818685][T12284] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1078.826997][T12284] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1079.113351][ T5994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.126442][ T5994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.210676][T15466] overlayfs: missing 'lowerdir' [ 1079.281423][T15455] lo speed is unknown, defaulting to 1000 [ 1079.450125][ T5994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1079.495278][ T5994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.863265][ T5149] Bluetooth: hci1: command tx timeout [ 1081.023133][ T5994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1081.035109][ T5994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.677309][T15492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2916'. [ 1081.717320][ T5994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1081.766410][ T5994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.369441][ T5994] bridge0: port 4(batadv0) entered disabled state [ 1082.457801][T15511] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1082.511829][ T5994] bridge_slave_1: left allmulticast mode [ 1082.534069][ T5994] bridge_slave_1: left promiscuous mode [ 1082.539997][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.636900][ T5994] bridge_slave_0: left allmulticast mode [ 1082.659023][ T5994] bridge_slave_0: left promiscuous mode [ 1082.664925][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.889160][T15521] 9pnet_fd: Insufficient options for proto=fd [ 1082.898191][T15521] siw: device registration error -23 [ 1083.077626][ T5149] Bluetooth: hci1: command tx timeout [ 1084.692286][T15539] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2927'. [ 1085.102674][ T5149] Bluetooth: hci1: command tx timeout [ 1085.281223][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.295160][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.308852][ T5994] bond0 (unregistering): (slave bond1): Releasing backup interface [ 1085.513066][ T5994] bond0 (unregistering): Released all slaves [ 1086.029537][ T5994] bond1 (unregistering): Released all slaves [ 1086.061217][ T5994] bond2 (unregistering): Released all slaves [ 1086.081733][ T5994] bond3 (unregistering): Released all slaves [ 1086.393342][ T5994] tipc: Left network mode [ 1087.306812][ T5149] Bluetooth: hci1: command tx timeout [ 1087.481506][T15455] chnl_net:caif_netlink_parms(): no params data found [ 1089.213904][ T5994] hsr_slave_0: left promiscuous mode [ 1089.228218][ T5994] hsr_slave_1: left promiscuous mode [ 1089.261138][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1089.286212][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1089.304710][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1089.325530][ C1] sd 0:0:1:0: [sda] tag#3779 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1089.327308][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1089.335991][ C1] sd 0:0:1:0: [sda] tag#3779 CDB: Read(6) 08 1e df d0 ec f7 [ 1089.467237][T15595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2938'. [ 1089.977149][ T5994] veth1_macvtap: left promiscuous mode [ 1089.988492][ T5994] veth0_macvtap: left promiscuous mode [ 1090.002734][ T5994] veth1_vlan: left promiscuous mode [ 1090.153557][ T5994] veth0_vlan: left promiscuous mode [ 1093.469772][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 1093.562103][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 1094.185228][T15368] lo speed is unknown, defaulting to 1000 [ 1094.217474][T15368] syz0: Port: 1 Link DOWN [ 1094.720352][T15455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.898718][T15642] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1095.397108][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.881483][T15455] bridge_slave_0: entered allmulticast mode [ 1095.905845][T15455] bridge_slave_0: entered promiscuous mode [ 1095.917597][T15455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1095.952765][T15455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.960000][T15455] bridge_slave_1: entered allmulticast mode [ 1096.040783][T15455] bridge_slave_1: entered promiscuous mode [ 1096.166272][ C1] sd 0:0:1:0: [sda] tag#3785 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1096.176715][ C1] sd 0:0:1:0: [sda] tag#3785 CDB: Read(6) 08 1e df d0 ec f7 [ 1096.433319][T15455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.300076][T15455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.384989][T15664] random: crng reseeded on system resumption [ 1097.780211][T15667] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2950'. [ 1100.601861][T15455] team0: Port device team_slave_0 added [ 1100.774011][T15455] team0: Port device team_slave_1 added [ 1100.786391][ T5149] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1101.113374][T15455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.152257][T15455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.104718][T15455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.577441][T15455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.598742][T15455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1102.663606][T15455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.695594][ T5994] IPVS: stop unused estimator thread 0... [ 1105.075296][ C1] sd 0:0:1:0: [sda] tag#3799 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1105.076401][T15455] hsr_slave_0: entered promiscuous mode [ 1105.085828][ C1] sd 0:0:1:0: [sda] tag#3799 CDB: Read(6) 08 1e df d0 ec f7 [ 1105.095582][T15455] hsr_slave_1: entered promiscuous mode [ 1106.571110][T15728] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2964'. [ 1109.734007][ T5994] Bluetooth: hci5: Frame reassembly failed (-84) [ 1111.744841][T12284] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1111.901759][T15769] random: crng reseeded on system resumption [ 1113.236948][T15455] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1113.299223][T15455] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1113.310987][T15781] 9pnet_fd: Insufficient options for proto=fd [ 1113.424502][T15455] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1114.263753][T15455] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1114.494073][T15781] lo speed is unknown, defaulting to 1000 [ 1114.552714][T15781] lo speed is unknown, defaulting to 1000 [ 1115.513301][T15793] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2977'. [ 1115.588873][T15781] lo speed is unknown, defaulting to 1000 [ 1115.956471][T15781] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1116.081728][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.089071][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.157619][T15781] lo speed is unknown, defaulting to 1000 [ 1116.190937][T15781] lo speed is unknown, defaulting to 1000 [ 1116.912313][T15781] lo speed is unknown, defaulting to 1000 [ 1117.086167][T15781] lo speed is unknown, defaulting to 1000 [ 1117.096560][T15781] lo speed is unknown, defaulting to 1000 [ 1117.160161][T15816] CIFS mount error: No usable UNC path provided in device string! [ 1117.160161][T15816] [ 1117.181271][T15816] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1117.211632][T15455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1117.322672][T15455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.377447][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1117.384683][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1117.465019][T14240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1117.472202][T14240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.281482][T15455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.407368][T15455] veth0_vlan: entered promiscuous mode [ 1120.418033][T15455] veth1_vlan: entered promiscuous mode [ 1121.564152][T15867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2989'. [ 1122.045546][T15455] veth0_macvtap: entered promiscuous mode [ 1122.124107][T15455] veth1_macvtap: entered promiscuous mode [ 1122.908268][T15455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.003954][T15455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.323717][ T1001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.374648][T15887] netlink: 'syz.1.2993': attribute type 1 has an invalid length. [ 1123.967105][T14240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.137447][T14240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1124.182350][T14240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.490470][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1125.525943][T15913] CIFS mount error: No usable UNC path provided in device string! [ 1125.525943][T15913] [ 1125.536084][T15913] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1125.565130][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.022981][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.039879][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.896529][T15921] 9pnet_fd: Insufficient options for proto=fd [ 1126.944106][T15921] siw: device registration error -23 [ 1128.467246][T15938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3001'. [ 1129.256675][T15942] netlink: 'syz.2.3003': attribute type 1 has an invalid length. [ 1131.810463][T15969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1132.248796][T12284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1132.262256][T12284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1132.270279][T12284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1132.278995][T12284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1132.288962][T12284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1132.726527][ T5994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1132.753158][ T5994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.786426][ T5994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1133.140604][ T5994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1133.193860][ T5994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.247073][ T5994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1134.198623][T15986] team_slave_0: entered promiscuous mode [ 1134.204352][T15986] team_slave_1: entered promiscuous mode [ 1134.353101][T15986] vlan2: entered promiscuous mode [ 1134.358189][T15986] team0: entered promiscuous mode [ 1134.387095][ T5149] Bluetooth: hci4: command tx timeout [ 1134.426073][T15994] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3013'. [ 1134.895461][T15971] lo speed is unknown, defaulting to 1000 [ 1134.971353][ T5994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1135.009325][ T5994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1135.064819][ T5994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1135.250618][T15999] CIFS mount error: No usable UNC path provided in device string! [ 1135.250618][T15999] [ 1136.053431][T15999] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1136.172548][ T5994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.225701][ T5994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.243494][ T5994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1136.463463][ T5149] Bluetooth: hci4: command tx timeout [ 1138.659128][ T5994] bridge0: port 3(batadv0) entered disabled state [ 1138.751612][ T5994] bridge_slave_1: left promiscuous mode [ 1138.769719][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.781661][ T5994] bridge_slave_0: left allmulticast mode [ 1138.790920][ T5994] bridge_slave_0: left promiscuous mode [ 1138.798539][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.952399][ T5149] Bluetooth: hci4: command tx timeout [ 1139.063661][ T5994] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 1139.071815][ T5994] ip6gre1 (unregistering): left promiscuous mode [ 1139.763813][T16036] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3026'. [ 1139.949284][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.348691][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.377868][ T5994] bond0 (unregistering): Released all slaves [ 1141.492759][ T5149] Bluetooth: hci4: command tx timeout [ 1142.018311][ T5994] bond1 (unregistering): Released all slaves [ 1142.037454][ T5994] bond2 (unregistering): Released all slaves [ 1142.361242][T15971] chnl_net:caif_netlink_parms(): no params data found [ 1143.852059][T16079] netlink: 'syz.0.3033': attribute type 10 has an invalid length. [ 1144.390952][T16079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1144.401980][T16079] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1144.533436][T15971] bridge0: port 1(bridge_slave_0) entered blocking state [ 1144.571979][T15971] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.634966][T15971] bridge_slave_0: entered allmulticast mode [ 1144.678020][T15971] bridge_slave_0: entered promiscuous mode [ 1144.736336][T15971] bridge0: port 2(bridge_slave_1) entered blocking state [ 1144.765104][T15971] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.793838][T15971] bridge_slave_1: entered allmulticast mode [ 1144.843400][T15971] bridge_slave_1: entered promiscuous mode [ 1145.219069][T15971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1145.512558][T16098] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3037'. [ 1146.034963][T15971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.741860][T16104] No such timeout policy "syz0" [ 1146.895762][T16104] ubi: mtd0 is already attached to ubi31 [ 1146.994055][T15971] team0: Port device team_slave_0 added [ 1147.166488][T15971] team0: Port device team_slave_1 added [ 1148.855541][ T5994] hsr_slave_0: left promiscuous mode [ 1148.874404][ T5994] hsr_slave_1: left promiscuous mode [ 1148.880517][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1148.904131][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.920245][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1148.939705][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1148.971430][ T5994] veth1_macvtap: left promiscuous mode [ 1148.981117][ T5994] veth0_macvtap: left promiscuous mode [ 1148.993828][ T5994] veth1_vlan: left promiscuous mode [ 1149.000843][ T5994] veth0_vlan: left promiscuous mode [ 1152.181568][T16155] random: crng reseeded on system resumption [ 1152.981150][T16158] No such timeout policy "syz0" [ 1152.997476][T16158] ubi: mtd0 is already attached to ubi31 [ 1153.306662][T15971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1153.328419][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.412915][T15971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1153.435661][T15971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1153.446336][T15971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1153.483198][T15971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1153.649684][T15971] hsr_slave_0: entered promiscuous mode [ 1153.667918][T15971] hsr_slave_1: entered promiscuous mode [ 1153.681680][T15971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1153.705793][T15971] Cannot create hsr debugfs directory [ 1154.613086][ T5994] IPVS: stop unused estimator thread 0... [ 1156.312935][T16182] delete_channel: no stack [ 1156.656556][T15971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1156.689775][T15971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1156.757345][T15971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1156.810191][T15971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1158.571945][T15971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1158.649685][T15971] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.814226][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.821411][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1158.832584][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.839773][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1159.253329][T16226] No such timeout policy "syz0" [ 1159.298859][T16226] ubi: mtd0 is already attached to ubi31 [ 1160.234036][T16242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1161.868089][T15971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1164.193663][T16282] netlink: 'syz.3.3075': attribute type 1 has an invalid length. [ 1164.704230][T16287] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1164.753443][T16287] bond1: (slave bond2): making interface the new active one [ 1164.774924][T16287] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1164.844241][T16290] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1164.924953][T16299] No such timeout policy "syz0" [ 1164.936705][T16299] ubi: mtd0 is already attached to ubi31 [ 1165.055782][T15971] veth0_vlan: entered promiscuous mode [ 1165.097386][T15971] veth1_vlan: entered promiscuous mode [ 1165.244174][T16306] netlink: 'syz.2.3079': attribute type 1 has an invalid length. [ 1165.680733][T15971] veth0_macvtap: entered promiscuous mode [ 1165.702625][T15971] veth1_macvtap: entered promiscuous mode [ 1165.771901][T15971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1165.800215][T15971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.575284][ T5994] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.592905][ T5994] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.601676][ T5994] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1167.671339][ T5994] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.490788][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.920846][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1169.248132][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1169.305903][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.795630][T16365] netlink: 'syz.0.3090': attribute type 1 has an invalid length. [ 1173.292293][ T5924] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1173.467190][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 1173.518796][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1173.554626][ T5924] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 1173.585597][ T5924] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.639349][ T5924] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1173.663775][ T5924] usb 3-1: config 128 has no interface number 0 [ 1173.678539][ T5924] usb 3-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1173.714053][ T5924] usb 3-1: config 128 interface 127 has no altsetting 0 [ 1173.770345][ T5924] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1173.813490][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.822063][ T5924] usb 3-1: Product: syz [ 1173.832328][ T5924] usb 3-1: Manufacturer: syz [ 1173.849886][ T5924] usb 3-1: SerialNumber: syz [ 1174.002249][T12284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1174.013286][T12284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1174.021311][T12284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1174.029654][T12284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1174.038872][T12284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1175.030634][ T5924] usb 3-1: USB disconnect, device number 8 [ 1175.085287][T16377] udevd[16377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1175.174624][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.301078][T16391] lo speed is unknown, defaulting to 1000 [ 1175.369802][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.508913][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.726667][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.223268][ T5149] Bluetooth: hci5: command tx timeout [ 1176.241177][T16391] chnl_net:caif_netlink_parms(): no params data found [ 1176.750998][T16391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1176.801756][T16391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1176.827263][T16391] bridge_slave_0: entered allmulticast mode [ 1176.850634][T16391] bridge_slave_0: entered promiscuous mode [ 1176.960222][T16391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.041289][T16391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1177.125498][T16428] overlayfs: overlapping lowerdir path [ 1177.303442][T16391] bridge_slave_1: entered allmulticast mode [ 1177.318182][T16391] bridge_slave_1: entered promiscuous mode [ 1177.353810][T16429] syz_tun: entered allmulticast mode [ 1177.516876][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.524667][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.859871][T16425] syz_tun: left allmulticast mode [ 1177.888835][T16391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1177.907324][T16391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1177.957893][ T64] bridge_slave_1: left allmulticast mode [ 1177.982330][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1177.983475][ T64] bridge_slave_1: left promiscuous mode [ 1178.031115][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.057004][ T64] bridge_slave_0: left allmulticast mode [ 1178.072342][ T64] bridge_slave_0: left promiscuous mode [ 1178.085292][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.156988][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1178.184815][ T43] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1178.212250][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1178.227361][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.258030][T16433] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1178.273763][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1178.302754][ T5149] Bluetooth: hci5: command tx timeout [ 1179.553370][ T30] audit: type=1326 audit(1884915314.655:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7158e929 code=0x7ffc0000 [ 1179.997676][ T30] audit: type=1326 audit(1884915314.655:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7158e929 code=0x7ffc0000 [ 1180.022969][ T30] audit: type=1326 audit(1884915314.685:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7fae7158e929 code=0x7ffc0000 [ 1180.081850][T16454] ref_ctr_offset mismatch. inode: 0x165 offset: 0x0 ref_ctr_offset(old): 0x300000000000000 ref_ctr_offset(new): 0x0 [ 1180.112322][ T30] audit: type=1326 audit(1884915315.195:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7158e929 code=0x7ffc0000 [ 1180.175050][ T30] audit: type=1326 audit(1884915315.195:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16448 comm="syz.4.3108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7158e929 code=0x7ffc0000 [ 1180.805843][ T5149] Bluetooth: hci5: command tx timeout [ 1180.964168][T15807] usb 4-1: USB disconnect, device number 12 [ 1181.363183][T16475] overlayfs: overlapping lowerdir path [ 1182.628865][T16485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3116'. [ 1182.872924][ T5149] Bluetooth: hci5: command tx timeout [ 1182.981542][T15368] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1183.057291][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1183.080834][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1183.153962][ T64] bond0 (unregistering): Released all slaves [ 1183.188738][T15368] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 1183.222366][T15368] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.236356][T15368] usb 4-1: Product: syz [ 1183.240658][T15368] usb 4-1: Manufacturer: syz [ 1183.245518][T15368] usb 4-1: SerialNumber: syz [ 1183.257924][T15368] usb 4-1: config 0 descriptor?? [ 1183.519691][T16391] team0: Port device team_slave_0 added [ 1183.522322][T15368] int51x1 4-1:0.0: probe with driver int51x1 failed with error -22 [ 1183.542531][ T64] tipc: Left network mode [ 1183.553710][T16391] team0: Port device team_slave_1 added [ 1183.786090][T16495] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1183.798860][T16391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1183.799185][T16484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1183.825431][T15368] usb 4-1: USB disconnect, device number 13 [ 1183.859321][T16391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1183.913721][T16391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1183.960321][T16391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1183.981231][T16391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1184.047616][T16391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.188640][T16391] hsr_slave_0: entered promiscuous mode [ 1184.216006][T16391] hsr_slave_1: entered promiscuous mode [ 1184.225797][T16391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1184.268276][T16391] Cannot create hsr debugfs directory [ 1185.388440][T16508] netlink: 'syz.3.3122': attribute type 1 has an invalid length. [ 1186.859912][T16519] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1190.033678][T16553] XFS (nullb0): Invalid superblock magic number [ 1190.478186][T16573] netlink: 'syz.3.3134': attribute type 1 has an invalid length. [ 1190.786564][T16574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.566351][T16586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1194.897848][T16594] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3140'. [ 1196.144278][T16603] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1198.172584][ T5149] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1199.415273][ T64] hsr_slave_0: left promiscuous mode [ 1199.510997][ T64] hsr_slave_1: left promiscuous mode [ 1199.604276][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.708027][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.851056][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.886083][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1200.026909][ T64] veth1_macvtap: left promiscuous mode [ 1200.039974][ T64] veth0_macvtap: left promiscuous mode [ 1200.061723][ T64] veth1_vlan: left promiscuous mode [ 1200.071079][ T5149] Bluetooth: hci0: command 0x0406 tx timeout [ 1200.089759][ T64] veth0_vlan: left promiscuous mode [ 1200.159271][T16627] netlink: 'syz.2.3146': attribute type 1 has an invalid length. [ 1203.445910][T16642] NILFS (nullb0): couldn't find nilfs on the device [ 1205.387926][T16649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1207.389716][T16670] netlink: 'syz.0.3158': attribute type 1 has an invalid length. [ 1211.072769][ T64] team0 (unregistering): Port device team_slave_1 removed [ 1212.113878][ T64] team0 (unregistering): Port device team_slave_0 removed [ 1217.689750][T16742] No control pipe specified [ 1218.355665][T16737] netlink: 'syz.3.3179': attribute type 4 has an invalid length. [ 1218.529185][T16744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3179'. [ 1218.571061][T16744] openvswitch: netlink: Flow key attr not present in new flow. [ 1219.993918][T15807] lo speed is unknown, defaulting to 1000 [ 1220.119020][T15807] infiniband syz0: ib_query_port failed (-19) [ 1220.416967][T16764] overlayfs: overlapping lowerdir path [ 1221.265703][T16768] 9pnet_fd: Insufficient options for proto=fd [ 1221.490942][T16768] lo speed is unknown, defaulting to 1000 [ 1221.498013][T16768] lo speed is unknown, defaulting to 1000 [ 1221.504397][T16768] lo speed is unknown, defaulting to 1000 [ 1221.518895][T16768] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1221.541810][T16768] lo speed is unknown, defaulting to 1000 [ 1221.550825][T16768] lo speed is unknown, defaulting to 1000 [ 1221.558531][T16768] lo speed is unknown, defaulting to 1000 [ 1221.566189][T16768] lo speed is unknown, defaulting to 1000 [ 1221.573871][T16768] lo speed is unknown, defaulting to 1000 [ 1221.674590][ T64] IPVS: stop unused estimator thread 0... [ 1222.067727][T16782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1222.451896][T16785] ucma_write: process 292 (syz.0.3189) changed security contexts after opening file descriptor, this is not allowed. [ 1222.707889][T16391] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1222.741474][T16391] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1222.764489][T16391] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1224.256850][T16391] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1225.325611][T16827] overlayfs: overlapping lowerdir path [ 1225.384378][T16822] syz_tun: entered allmulticast mode [ 1225.510773][T16391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.570972][T16818] syz_tun: left allmulticast mode [ 1225.641188][T16391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.685781][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.693051][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.773051][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.780540][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.874296][T16859] ubi: mtd0 is already attached to ubi31 [ 1230.263540][T16391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1230.648924][T16882] overlayfs: overlapping lowerdir path [ 1231.173652][T16886] CIFS mount error: No usable UNC path provided in device string! [ 1231.173652][T16886] [ 1231.224704][T16884] syz_tun: entered allmulticast mode [ 1231.290792][T16886] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1231.316729][T16391] veth0_vlan: entered promiscuous mode [ 1231.451087][T16391] veth1_vlan: entered promiscuous mode [ 1231.802664][T16878] syz_tun: left allmulticast mode [ 1231.900324][T16391] veth0_macvtap: entered promiscuous mode [ 1231.987097][T16391] veth1_macvtap: entered promiscuous mode [ 1232.112063][T16391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.652221][T16391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.708231][T14240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.737375][T14240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.795976][T14240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.842363][ T5994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1237.862770][ T5149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1238.060446][ T5149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1238.084466][ T5149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1238.095542][T16957] CIFS mount error: No usable UNC path provided in device string! [ 1238.095542][T16957] [ 1238.114550][T16957] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1238.221604][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1238.280714][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1238.745620][T16950] lo speed is unknown, defaulting to 1000 [ 1238.912276][T16975] input: syz0 as /devices/virtual/input/input24 [ 1238.947664][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.954189][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.014210][ T5994] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1239.236771][T16982] random: crng reseeded on system resumption [ 1239.720701][ T5994] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1240.628748][ T5149] Bluetooth: hci3: command tx timeout [ 1242.095668][ T5994] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.732400][ T5149] Bluetooth: hci3: command tx timeout [ 1242.871999][ T5994] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.986824][T17021] CIFS mount error: No usable UNC path provided in device string! [ 1242.986824][T17021] [ 1242.997154][T17021] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1243.094943][T16950] chnl_net:caif_netlink_parms(): no params data found [ 1243.726717][T17023] trusted_key: syz.2.3242 sent an empty control message without MSG_MORE. [ 1244.085028][T17031] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1244.200930][T16950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1244.220451][T16950] bridge0: port 1(bridge_slave_0) entered disabled state [ 1244.234833][T16950] bridge_slave_0: entered allmulticast mode [ 1244.271458][T17035] random: crng reseeded on system resumption [ 1244.769201][T16950] bridge_slave_0: entered promiscuous mode [ 1244.782389][ T5149] Bluetooth: hci3: command tx timeout [ 1245.139890][T16950] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.186876][T16950] bridge0: port 2(bridge_slave_1) entered disabled state [ 1245.194429][T16950] bridge_slave_1: entered allmulticast mode [ 1245.206520][T16950] bridge_slave_1: entered promiscuous mode [ 1245.421793][T17044] 9pnet_fd: Insufficient options for proto=fd [ 1245.429199][T17044] siw: device registration error -23 [ 1245.457884][T16950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1245.474116][T16950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1245.661000][T17045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3247'. [ 1246.461885][T16950] team0: Port device team_slave_0 added [ 1246.508574][T16950] team0: Port device team_slave_1 added [ 1246.658431][ T5994] bridge_slave_1: left allmulticast mode [ 1246.684512][ T5994] bridge_slave_1: left promiscuous mode [ 1246.866900][ T5149] Bluetooth: hci3: command tx timeout [ 1246.905360][ T5994] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.995303][ T5994] bridge_slave_0: left allmulticast mode [ 1247.001074][ T5994] bridge_slave_0: left promiscuous mode [ 1247.237324][ T5994] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.520875][T17069] No such timeout policy "syz0" [ 1247.946457][T17078] ubi: mtd0 is already attached to ubi31 [ 1248.056700][ T30] audit: type=1326 audit(1884915383.165:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17065 comm="syz.4.3255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae7158e929 code=0x7fc00000 [ 1248.542906][T17088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1249.354682][ T5994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1249.462311][T17096] 9pnet_fd: Insufficient options for proto=fd [ 1249.474530][T17096] siw: device registration error -23 [ 1249.623532][ T5994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1250.043403][ T5994] bond0 (unregistering): Released all slaves [ 1250.145880][T16950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1250.162148][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.188413][T16950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1250.266026][T16950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1250.436676][T16950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1250.466855][T16950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.192492][ T5994] hsr_slave_0: left promiscuous mode [ 1251.225713][ T5994] hsr_slave_1: left promiscuous mode [ 1251.236312][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1251.262754][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1251.307176][ T5994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1251.330102][ T5994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1251.466627][ T5994] veth1_macvtap: left promiscuous mode [ 1251.492256][ T5994] veth0_macvtap: left promiscuous mode [ 1251.503558][ T5994] veth1_vlan: left promiscuous mode [ 1251.522420][ T5994] veth0_vlan: left promiscuous mode [ 1252.722795][T17135] binder: 17134:17135 ioctl c0046209 0 returned -22 [ 1253.042612][T17137] 9pnet_fd: Insufficient options for proto=fd [ 1253.051370][T17137] siw: device registration error -23 [ 1254.853063][T17153] No such timeout policy "syz0" [ 1255.203792][T17156] ubi: mtd0 is already attached to ubi31 [ 1256.522366][T12284] Bluetooth: hci1: command 0x0406 tx timeout [ 1257.048692][ T5994] team0 (unregistering): Port device team_slave_1 removed [ 1257.247121][ T5994] team0 (unregistering): Port device team_slave_0 removed [ 1259.292544][T16950] hsr_slave_0: entered promiscuous mode [ 1259.299274][T16950] hsr_slave_1: entered promiscuous mode [ 1259.343036][T16950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.512267][T16950] Cannot create hsr debugfs directory [ 1266.352332][ T43] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1266.861532][T16950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1266.897247][T16950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1266.949759][T16950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1266.997630][T16950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1267.204062][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1268.238510][ T43] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 1269.039086][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.047458][ T43] usb 3-1: Product: syz [ 1269.051674][ T43] usb 3-1: Manufacturer: syz [ 1269.059896][ T43] usb 3-1: SerialNumber: syz [ 1269.072927][ T43] usb 3-1: config 0 descriptor?? [ 1269.080920][ T43] usb 3-1: can't set config #0, error -71 [ 1269.138931][ T43] usb 3-1: USB disconnect, device number 9 [ 1269.424718][T16950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.745389][T16950] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.783929][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.791128][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.290174][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.297517][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1270.839851][T16950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1270.850464][T16950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1271.413307][T17320] random: crng reseeded on system resumption [ 1272.701059][T16950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1272.703229][T17331] fuse: Unknown parameter 'group_i00000000000000000000' [ 1273.870085][T16950] veth0_vlan: entered promiscuous mode [ 1274.117877][T16950] veth1_vlan: entered promiscuous mode [ 1274.177519][T16950] veth0_macvtap: entered promiscuous mode [ 1274.223054][T16950] veth1_macvtap: entered promiscuous mode [ 1274.251565][T16950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1274.651779][T16950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.256727][T12291] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.266520][T12291] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.421783][T12291] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.494677][ T1001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.580231][T17370] random: crng reseeded on system resumption [ 1276.692552][T17375] fuse: Unknown parameter 'group_i00000000000000000000' [ 1277.045248][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.883010][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.960439][ T5993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.993684][ T5993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1280.653716][T17424] random: crng reseeded on system resumption [ 1282.287941][T17436] fuse: Unknown parameter 'group_i00000000000000000000' [ 1284.936396][T17469] random: crng reseeded on system resumption [ 1286.205218][T16606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1286.217220][T16606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1286.225844][T16606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1286.243337][T16606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1286.252589][T16606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1287.133531][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.314225][T17488] fuse: Unknown parameter 'group_id00000000000000000000' [ 1287.422298][ T5149] Bluetooth: hci4: command 0x0406 tx timeout [ 1287.649415][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.302246][ T5149] Bluetooth: hci2: command tx timeout [ 1288.418577][T17471] lo speed is unknown, defaulting to 1000 [ 1290.383330][ T5149] Bluetooth: hci2: command tx timeout [ 1290.389833][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.885981][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1291.229893][T17528] fuse: Unknown parameter 'group_id00000000000000000000' [ 1292.473435][ T5149] Bluetooth: hci2: command tx timeout [ 1292.817040][ T12] bridge_slave_1: left allmulticast mode [ 1292.826048][ T12] bridge_slave_1: left promiscuous mode [ 1292.853257][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.218585][ T12] bridge_slave_0: left allmulticast mode [ 1293.248263][T17545] random: crng reseeded on system resumption [ 1293.286330][ T12] bridge_slave_0: left promiscuous mode [ 1293.505693][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.551752][ T5149] Bluetooth: hci2: command tx timeout [ 1296.524329][T17574] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1296.811983][ T12] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1297.023154][T16606] Bluetooth: hci5: command 0x1003 tx timeout [ 1297.030655][ T5149] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1297.189583][T17591] fuse: Unknown parameter 'group_id00000000000000000000' [ 1297.341628][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1297.354017][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1297.365517][ T12] bond0 (unregistering): Released all slaves [ 1297.385969][ T12] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1297.399039][ T12] bond1 (unregistering): Released all slaves [ 1297.549914][ T12] bond2 (unregistering): Released all slaves [ 1297.564058][T17471] chnl_net:caif_netlink_parms(): no params data found [ 1298.393087][ T12] tipc: Left network mode [ 1298.470120][ T12] IPVS: stopping backup sync thread 16495 ... [ 1300.141021][T17615] random: crng reseeded on system resumption [ 1300.396216][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.890134][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.058416][T17471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.116380][T17471] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.136146][T17471] bridge_slave_0: entered allmulticast mode [ 1301.177990][T17471] bridge_slave_0: entered promiscuous mode [ 1301.193170][T17471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.210649][T17471] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.850805][T17471] bridge_slave_1: entered allmulticast mode [ 1301.986057][T17471] bridge_slave_1: entered promiscuous mode [ 1304.623119][T17632] fuse: Bad value for 'user_id' [ 1304.628035][T17632] fuse: Bad value for 'user_id' [ 1305.058669][T17471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1307.200319][T17471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.773379][T17680] fuse: Bad value for 'user_id' [ 1309.828786][T17680] fuse: Bad value for 'user_id' [ 1310.170533][T17471] team0: Port device team_slave_0 added [ 1311.053368][T17471] team0: Port device team_slave_1 added [ 1311.404455][T17471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.420681][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1311.482995][T17471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.516383][ T12] hsr_slave_0: left promiscuous mode [ 1311.523686][ T12] hsr_slave_1: left promiscuous mode [ 1311.529949][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.541588][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.567030][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.585590][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.586577][T17710] fuse: Bad value for 'user_id' [ 1311.610403][T17710] fuse: Bad value for 'user_id' [ 1311.631173][ T12] veth1_macvtap: left promiscuous mode [ 1311.647892][ T12] veth0_macvtap: left promiscuous mode [ 1311.660499][ T12] veth1_vlan: left promiscuous mode [ 1311.677979][ T12] veth0_vlan: left promiscuous mode [ 1314.629266][T17735] fuse: Bad value for 'fd' [ 1316.504089][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1316.582921][T17762] fuse: Bad value for 'fd' [ 1316.755868][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1317.042575][ T5149] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1318.341886][T17784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1318.895654][T17787] No such timeout policy "syz0" [ 1320.311702][T17795] ubi: mtd0 is already attached to ubi31 [ 1320.386612][T17797] fuse: Bad value for 'fd' [ 1320.675672][T17471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.742248][T17471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.976899][T17471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.437354][T17471] hsr_slave_0: entered promiscuous mode [ 1321.477662][T17471] hsr_slave_1: entered promiscuous mode [ 1321.504976][T17471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1321.539517][T17471] Cannot create hsr debugfs directory [ 1322.625229][T17823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.180601][T17843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1325.457309][T17471] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1325.558048][T17471] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1325.601819][T17471] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1325.670289][T17471] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1325.827614][T17882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3466'. [ 1326.727613][T17894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1326.743392][T17471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.801361][T17471] 8021q: adding VLAN 0 to HW filter on device team0 [ 1326.876147][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.883390][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1327.795408][T12291] bridge0: port 2(bridge_slave_1) entered blocking state [ 1327.802657][T12291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1328.663638][T17471] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1328.742986][T17471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1330.070075][T17919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1330.488281][T17471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1331.491783][T17471] veth0_vlan: entered promiscuous mode [ 1331.517029][T17471] veth1_vlan: entered promiscuous mode [ 1331.591903][T17471] veth0_macvtap: entered promiscuous mode [ 1331.616132][T17471] veth1_macvtap: entered promiscuous mode [ 1331.958597][T17471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1331.971227][T17471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1332.041140][T14240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.056272][T17943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1332.060466][T14240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.094682][T14240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1332.105277][T14240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.280905][ T5961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.308745][ T5961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.933149][T17959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1335.799153][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1336.013247][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1336.259500][T17983] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1338.134124][T18006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1342.515926][T18040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1344.061782][T18071] siw: device registration error -23 [ 1345.059385][T18078] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1347.157299][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1349.342264][ T5896] IPVS: starting estimator thread 0... [ 1349.442193][T18129] IPVS: using max 28 ests per chain, 67200 per kthread [ 1350.756539][T18146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1359.406223][T18215] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1359.455024][T18217] netlink: 'syz.1.3542': attribute type 1 has an invalid length. [ 1359.761716][ T5896] IPVS: starting estimator thread 0... [ 1360.162469][T18218] IPVS: using max 29 ests per chain, 69600 per kthread [ 1361.825353][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.831774][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.639004][T15807] IPVS: starting estimator thread 0... [ 1363.732180][T18264] IPVS: using max 31 ests per chain, 74400 per kthread [ 1365.274849][T18285] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1370.339931][T18347] No such timeout policy "syz0" [ 1371.085253][T15368] IPVS: starting estimator thread 0... [ 1371.362198][T18351] IPVS: using max 26 ests per chain, 62400 per kthread [ 1371.826279][T18358] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1371.851451][T18359] ubi: mtd0 is already attached to ubi31 [ 1378.217198][T18414] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1385.046191][ T5149] Bluetooth: hci3: command 0x0406 tx timeout [ 1387.537044][T18479] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1390.501818][T18436] IPVS: starting estimator thread 0... [ 1390.606664][T18507] IPVS: using max 24 ests per chain, 57600 per kthread [ 1391.566476][T18505] ubi: mtd0 is already attached to ubi31 [ 1394.025585][T18541] 9pnet_fd: Insufficient options for proto=fd [ 1394.793471][T18542] overlayfs: overlapping lowerdir path [ 1394.992775][T18542] syz_tun: entered allmulticast mode [ 1395.228562][T18537] syz_tun: left allmulticast mode [ 1396.255686][T18554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1398.190312][T18584] 9pnet_fd: Insufficient options for proto=fd [ 1399.775178][T18595] overlayfs: overlapping lowerdir path [ 1399.895653][T18592] syz_tun: entered allmulticast mode [ 1400.227308][T18590] syz_tun: left allmulticast mode [ 1401.130157][T18601] netlink: 'syz.2.3646': attribute type 1 has an invalid length. [ 1401.623161][T18605] No such timeout policy "syz0" [ 1402.374023][T18615] fuse: Unknown parameter 'user_id00000000000000000000' [ 1402.410683][T18617] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1403.006779][T18627] 9pnet_fd: Insufficient options for proto=fd [ 1405.732220][T18648] overlayfs: overlapping lowerdir path [ 1406.130714][T18646] syz_tun: entered allmulticast mode [ 1406.168450][T18645] syz_tun: left allmulticast mode [ 1406.819942][T18658] fuse: Unknown parameter 'user_id00000000000000000000' [ 1407.612768][T18672] 9pnet_fd: Insufficient options for proto=fd [ 1407.990085][T18673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1409.281447][T18689] No such timeout policy "syz0" [ 1409.622782][T18696] overlayfs: overlapping lowerdir path [ 1409.924423][T18696] syz_tun: entered allmulticast mode [ 1409.990263][T16606] Bluetooth: hci2: command 0x0406 tx timeout [ 1410.226842][T18693] syz_tun: left allmulticast mode [ 1411.021723][T18706] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1412.465533][T18710] ubi: mtd0 is already attached to ubi31 [ 1413.162159][T18716] 9pnet_fd: Insufficient options for proto=fd [ 1414.624828][T18722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1416.712941][T18748] overlayfs: overlapping lowerdir path [ 1416.843859][T18750] syz_tun: entered allmulticast mode [ 1417.277693][T18745] syz_tun: left allmulticast mode [ 1417.738756][T18761] 9pnet_fd: Insufficient options for proto=fd [ 1417.756567][T18762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1423.874940][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.887131][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.063388][T18812] overlayfs: overlapping lowerdir path [ 1425.605170][T18808] syz_tun: entered allmulticast mode [ 1425.615248][T18807] syz_tun: left allmulticast mode [ 1430.106550][T18857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1430.391347][T18860] overlayfs: overlapping lowerdir path [ 1430.525347][T18861] syz_tun: entered allmulticast mode [ 1430.886160][T18854] syz_tun: left allmulticast mode [ 1431.758742][T18877] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1436.881540][T18915] syz_tun: entered allmulticast mode [ 1437.196664][T18911] syz_tun: left allmulticast mode [ 1439.853063][T18949] fuse: Unknown parameter '0x0000000000000003' [ 1439.870613][T18951] No such timeout policy "syz0" [ 1441.532894][T18970] ubi: mtd0 is already attached to ubi31 [ 1444.626374][T18992] fuse: Unknown parameter '0x0000000000000003' [ 1446.805560][T19011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1453.669759][T19070] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1456.353617][T19084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1460.978346][T19116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1463.262496][T19141] netlink: 'syz.2.3800': attribute type 1 has an invalid length. [ 1467.665349][T19161] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1473.639683][T19218] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1474.906537][T19226] tipc: Started in network mode [ 1474.911684][T19226] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1474.929188][T19226] tipc: Enabled bearer , priority 10 [ 1476.054335][T12381] tipc: Node number set to 1 [ 1484.705527][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.713770][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.222163][T19339] overlayfs: overlapping lowerdir path [ 1485.262357][ T5149] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1485.353111][T19339] syz_tun: entered allmulticast mode [ 1485.995425][T19336] syz_tun: left allmulticast mode [ 1489.002947][T19366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1490.613615][T19387] overlayfs: overlapping lowerdir path [ 1490.639914][T19385] syz_tun: entered allmulticast mode [ 1490.872101][T19383] syz_tun: left allmulticast mode [ 1493.575558][T19408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1496.332755][T19434] overlayfs: overlapping lowerdir path [ 1496.606105][T19434] syz_tun: entered allmulticast mode [ 1497.013153][T19425] syz_tun: left allmulticast mode [ 1501.162627][T19474] overlayfs: overlapping lowerdir path [ 1502.579384][T19475] syz_tun: entered allmulticast mode [ 1502.876630][T19465] syz_tun: left allmulticast mode [ 1517.992371][T19585] input: syz0 as /devices/virtual/input/input25 [ 1518.503287][T19588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1521.022360][T16606] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1521.022791][ T5149] Bluetooth: hci5: command 0x1003 tx timeout [ 1529.282073][T16606] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1533.067719][T19692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1534.049557][T19712] misc userio: The device must be registered before sending interrupts [ 1535.713506][T16606] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1540.848223][T19752] No such timeout policy "syz0" [ 1542.938343][ T5993] Bluetooth: hci5: Frame reassembly failed (-84) [ 1544.942201][T16606] Bluetooth: hci5: command 0x1003 tx timeout [ 1544.942236][ T5149] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1546.147264][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.153894][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.413830][T19796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1548.052251][T19813] No such timeout policy "syz0" [ 1549.456589][T19814] ubi: mtd0 is already attached to ubi31 [ 1553.067680][T19869] input: syz0 as /devices/virtual/input/input27 [ 1553.383373][T19872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1554.612317][T19886] fuse: Bad value for 'fd' [ 1556.459933][T19904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1559.519135][T19925] fuse: Bad value for 'fd' [ 1562.482856][T19952] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1563.264256][T19966] fuse: Bad value for 'fd' [ 1582.853497][T20111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4088'. [ 1585.648105][T20123] No such timeout policy "syz0" [ 1586.580588][T20130] 9pnet_fd: Insufficient options for proto=fd [ 1590.502882][T20175] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4107'. [ 1594.355103][T20200] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1595.505120][T20205] No such timeout policy "syz0" [ 1595.826924][T20219] 9pnet_fd: Insufficient options for proto=fd [ 1595.839258][T20219] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1597.775101][T20233] 9pnet_fd: Insufficient options for proto=fd [ 1600.850647][T20260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4129'. [ 1602.402630][T20274] 9pnet_fd: Insufficient options for proto=fd [ 1604.086857][T20290] No such timeout policy "syz0" [ 1605.287707][T20302] 9pnet_fd: Insufficient options for proto=fd [ 1605.312974][T20302] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1606.066943][T20308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4143'. [ 1606.692886][T20314] 9pnet_fd: Insufficient options for proto=fd [ 1606.880116][T20315] ubi: mtd0 is already attached to ubi31 [ 1607.595229][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.900062][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.808346][T20349] 9pnet_fd: Insufficient options for proto=fd [ 1610.823282][T20350] 9pnet_fd: Insufficient options for proto=fd [ 1610.840326][T20350] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1611.170983][T20354] 9pnet_fd: Insufficient options for proto=fd [ 1612.326349][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4160'. [ 1613.437856][T20379] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1614.702703][T20394] 9pnet_fd: Insufficient options for proto=fd [ 1614.709453][T20394] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1614.929429][T20398] 9pnet_fd: Insufficient options for proto=fd [ 1618.808640][T20432] 9pnet_fd: Insufficient options for proto=fd [ 1618.863995][T20430] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1622.040959][T20462] tmpfs: Bad value for 'mpol' [ 1625.587935][T20492] 9pnet_fd: Insufficient options for proto=fd [ 1626.123167][T20496] netlink: 'syz.2.4200': attribute type 1 has an invalid length. [ 1627.018157][T20503] tmpfs: Bad value for 'mpol' [ 1631.301081][T20551] netlink: 'syz.3.4213': attribute type 1 has an invalid length. [ 1632.852421][T20563] tmpfs: Bad value for 'mpol' [ 1633.689958][T20584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1633.717403][T20569] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 1633.724080][T20569] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1633.731589][T20575] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(17) [ 1633.738210][T20575] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1633.857449][T20578] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(20) [ 1633.864112][T20578] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1634.014606][T20567] lo speed is unknown, defaulting to 1000 [ 1634.046997][T20575] vhci_hcd vhci_hcd.0: Device attached [ 1634.052668][T20584] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(26) [ 1634.059296][T20584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1634.082062][T20578] vhci_hcd vhci_hcd.0: Device attached [ 1634.142525][T20575] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19) [ 1634.149185][T20575] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1634.202150][T20584] vhci_hcd vhci_hcd.0: Device attached [ 1634.227967][T20569] vhci_hcd vhci_hcd.0: Device attached [ 1634.232150][T20575] vhci_hcd vhci_hcd.0: Device attached [ 1634.302284][ T1209] usb 41-2: new low-speed USB device number 3 using vhci_hcd [ 1634.314843][T20592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1634.372470][T20584] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(28) [ 1634.379133][T20584] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1634.429778][T20578] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(22) [ 1634.436444][T20578] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1634.530620][T20601] netlink: 'syz.0.4222': attribute type 2 has an invalid length. [ 1634.562864][T20584] vhci_hcd vhci_hcd.0: Device attached [ 1634.582037][T20569] vhci_hcd vhci_hcd.0: port 0 already used [ 1634.586849][T20578] vhci_hcd vhci_hcd.0: Device attached [ 1634.594550][T20601] netlink: 'syz.0.4222': attribute type 1 has an invalid length. [ 1634.625429][T20601] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.4222'. [ 1634.673648][T20601] block nbd0: not configured, cannot reconfigure [ 1634.711956][T20579] vhci_hcd: connection reset by peer [ 1634.717597][T20580] vhci_hcd: connection closed [ 1634.717754][ T1001] vhci_hcd: stop threads [ 1634.718374][T20573] vhci_hcd: connection closed [ 1634.728016][T20585] vhci_hcd: connection closed [ 1634.737283][T20590] vhci_hcd: connection closed [ 1634.784200][ T5149] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1634.801991][ T1001] vhci_hcd: release socket [ 1634.813555][ T1001] vhci_hcd: disconnect device [ 1634.822294][ T1001] vhci_hcd: stop threads [ 1634.826590][ T1001] vhci_hcd: release socket [ 1634.848387][ T1001] vhci_hcd: disconnect device [ 1634.859606][ T1001] vhci_hcd: stop threads [ 1634.897443][ T1001] vhci_hcd: release socket [ 1634.911672][ T1001] vhci_hcd: disconnect device [ 1634.953287][ T1001] vhci_hcd: stop threads [ 1634.958212][ T1001] vhci_hcd: release socket [ 1634.963377][ T1001] vhci_hcd: disconnect device [ 1635.136143][ T1001] vhci_hcd: stop threads [ 1635.140488][ T1001] vhci_hcd: release socket [ 1635.146537][ T1001] vhci_hcd: disconnect device [ 1636.006626][T20595] vhci_hcd: connection closed [ 1636.016751][T20593] vhci_hcd: connection closed [ 1636.042116][T14240] vhci_hcd: stop threads [ 1636.081414][T14240] vhci_hcd: release socket [ 1636.101468][T14240] vhci_hcd: disconnect device [ 1636.114712][T14240] vhci_hcd: stop threads [ 1636.125761][T14240] vhci_hcd: release socket [ 1636.138844][T14240] vhci_hcd: disconnect device [ 1636.538401][T20632] netlink: 'syz.0.4228': attribute type 1 has an invalid length. [ 1637.407321][T20642] tmpfs: Bad value for 'mpol' [ 1639.502701][ T1209] vhci_hcd: vhci_device speed not set [ 1640.227045][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4238'. [ 1640.812883][T12381] usb usb42-port1: attempt power cycle [ 1641.753652][T12381] usb usb42-port1: unable to enumerate USB device [ 1643.375566][T20694] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1643.534060][T20703] tmpfs: Bad value for 'mpol' [ 1645.608471][T20724] misc userio: Invalid payload size [ 1647.301589][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4258'. [ 1647.883987][T20747] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1648.404937][T20759] 9pnet_fd: Insufficient options for proto=fd [ 1648.411758][T20759] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1650.546197][T20785] misc userio: Invalid payload size [ 1651.701198][T20790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1653.872947][T20808] 9pnet_fd: Insufficient options for proto=fd [ 1653.914327][T20808] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1654.213096][T20821] misc userio: Invalid payload size [ 1657.390650][T20850] 9pnet_fd: Insufficient options for proto=fd [ 1657.401494][T20850] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1660.542897][T20889] 9pnet_fd: Insufficient options for proto=fd [ 1660.570512][T20889] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1660.652007][T20182] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 1660.876509][T20182] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1660.885449][T20182] usb 5-1: config 0 has no interface number 0 [ 1660.904720][T20182] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1660.914504][T20182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1660.924080][T20182] usb 5-1: Product: syz [ 1660.928278][T20182] usb 5-1: Manufacturer: syz [ 1661.181694][T20182] usb 5-1: SerialNumber: syz [ 1661.309752][T20182] usb 5-1: config 0 descriptor?? [ 1661.333540][T20182] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1661.657724][T20885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1661.873437][T20885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1661.950123][T20182] gspca_spca1528: reg_w err -110 [ 1661.982323][T20182] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 1662.844855][ T1209] usb 5-1: USB disconnect, device number 10 [ 1663.774753][T20930] 9pnet_fd: Insufficient options for proto=fd [ 1663.904238][T20930] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1664.126178][T20940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1666.894533][T20970] 9pnet_fd: Insufficient options for proto=fd [ 1669.044623][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.053241][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.196466][T20996] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4339'. [ 1670.515110][T20993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1670.708098][T21013] 9pnet_fd: Insufficient options for proto=fd [ 1670.727234][T21013] snd_dummy snd_dummy.0: control 0:0:4194304:syz0:5 is already present [ 1671.946069][T21016] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1673.137985][T21038] futex_wake_op: syz.0.4353 tries to shift op by -1; fix this program [ 1677.676662][T21072] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1677.685269][T21074] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1681.539729][T21106] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1683.438546][T21139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1685.698742][T21159] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1686.505317][T21160] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1687.728181][T21182] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'. [ 1687.783800][T21183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4399'. [ 1689.933174][T21201] fuse: Unknown parameter 'group_i00000000000000000000' [ 1690.459111][T21213] fuse: Bad value for 'fd' [ 1690.880281][T21203] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1691.430874][T21217] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4412'. [ 1691.655648][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4414'. [ 1693.076513][T21230] fuse: Unknown parameter 'group_i00000000000000000000' [ 1693.708442][T21246] fuse: Bad value for 'fd' [ 1694.906696][T21252] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1695.767888][T21259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4428'. [ 1698.193567][T21291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1698.791466][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4443'. [ 1700.714859][T21319] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1701.875306][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4456'. [ 1704.883495][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4469'. [ 1709.731178][T21413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4482'. [ 1713.236458][T21456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4496'. [ 1717.539183][T21507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4510'. [ 1719.697142][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 1719.709093][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1719.717573][ C1] CPU: 1 UID: 0 PID: 14896 Comm: syz-executor Not tainted 6.16.0-rc3-next-20250623-syzkaller #0 PREEMPT(full) [ 1719.729326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1719.739422][ C1] RIP: 0010:pidfs_free_pid+0xaf/0x140 [ 1719.744840][ C1] Code: f0 ff ff 73 e4 43 80 3c 3c 00 74 08 4c 89 f7 e8 a7 1b de ff 49 83 3e 00 0f 85 84 00 00 00 e8 08 f2 79 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 82 1b de ff 4c 8b 33 4d 85 f6 74 [ 1719.764473][ C1] RSP: 0018:ffffc90000a08b90 EFLAGS: 00010246 [ 1719.770586][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888058915a00 [ 1719.778595][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff88805853ac70 [ 1719.786585][ C1] RBP: 0000000000000001 R08: ffff88805853ac03 R09: 1ffff1100b0a7580 [ 1719.794579][ C1] R10: dffffc0000000000 R11: ffffed100b0a7581 R12: 1ffff1100b0a758d [ 1719.802576][ C1] R13: ffffffff81a83684 R14: ffff88805853ac68 R15: dffffc0000000000 [ 1719.810573][ C1] FS: 000055556d528500(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 1719.819532][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1719.826142][ C1] CR2: 0000200000003000 CR3: 0000000077a9a000 CR4: 00000000003526f0 [ 1719.834147][ C1] Call Trace: [ 1719.837447][ C1] [ 1719.840327][ C1] ? __pfx_delayed_put_pid+0x10/0x10 [ 1719.845635][ C1] put_pid+0x9c/0x130 [ 1719.849654][ C1] rcu_core+0xca5/0x1710 [ 1719.853934][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1719.858641][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1719.863877][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1719.869115][ C1] handle_softirqs+0x283/0x870 [ 1719.873919][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 1719.878716][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1719.884040][ C1] __irq_exit_rcu+0xca/0x1f0 [ 1719.888658][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1719.893907][ C1] irq_exit_rcu+0x9/0x30 [ 1719.898176][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1719.903834][ C1] [ 1719.906782][ C1] [ 1719.909729][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1719.915730][ C1] RIP: 0010:x64_sys_call+0x40e/0x21c0 [ 1719.921128][ C1] Code: 00 81 fe 1e 01 00 00 0f 8f b5 1b 00 00 81 fe 1d 01 00 00 0f 84 23 fe ff 00 81 fe 1e 01 00 00 0f 84 a7 87 17 01 e9 79 1d 00 00 <83> fe 2a 0f 8e a8 03 00 00 83 fe 31 0f 8e a8 09 00 00 83 fe 35 0f [ 1719.940846][ C1] RSP: 0018:ffffc90019b5fee8 EFLAGS: 00000216 [ 1719.946948][ C1] RAX: 32bddfb7404d7600 RBX: ffffc90019b5fef0 RCX: 32bddfb7404d7600 [ 1719.954952][ C1] RDX: 0000000000000000 RSI: 0000000000000037 RDI: ffffc90019b5ff58 [ 1719.963126][ C1] RBP: ffffc90019b5ff48 R08: ffffffff8fa18cf7 R09: 1ffffffff1f4319e [ 1719.971126][ C1] R10: dffffc0000000000 R11: fffffbfff1f4319f R12: 0000000000000037 [ 1719.979140][ C1] R13: 0000000000000037 R14: ffffc90019b5ff58 R15: ffff888058915a00 [ 1719.987155][ C1] do_syscall_64+0xfa/0x3b0 [ 1719.991694][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1719.996917][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.003007][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1720.007707][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.013619][ C1] RIP: 0033:0x7fc78199066a [ 1720.018070][ C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 1720.037707][ C1] RSP: 002b:00007ffc28572d18 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 1720.046148][ C1] RAX: ffffffffffffffda RBX: 00007ffc28572da0 RCX: 00007fc78199066a [ 1720.054144][ C1] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 1720.062133][ C1] RBP: 0000000000000003 R08: 00007ffc28572d3c R09: 0079746972756365 [ 1720.070130][ C1] R10: 00007ffc28572da0 R11: 0000000000000212 R12: 00007fc781b81780 [ 1720.078126][ C1] R13: 00007ffc28572d3c R14: 0000000000000000 R15: 00007fc781b81e40 [ 1720.086136][ C1] [ 1720.089184][ C1] Modules linked in: [ 1720.093251][ C1] ---[ end trace 0000000000000000 ]--- [ 1720.098730][ C1] RIP: 0010:pidfs_free_pid+0xaf/0x140 [ 1720.104170][ C1] Code: f0 ff ff 73 e4 43 80 3c 3c 00 74 08 4c 89 f7 e8 a7 1b de ff 49 83 3e 00 0f 85 84 00 00 00 e8 08 f2 79 ff 48 89 d8 48 c1 e8 03 <42> 80 3c 38 00 74 08 48 89 df e8 82 1b de ff 4c 8b 33 4d 85 f6 74 [ 1720.123824][ C1] RSP: 0018:ffffc90000a08b90 EFLAGS: 00010246 [ 1720.129917][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff888058915a00 [ 1720.137942][ C1] RDX: 0000000000000100 RSI: 0000000000000001 RDI: ffff88805853ac70 [ 1720.145971][ C1] RBP: 0000000000000001 R08: ffff88805853ac03 R09: 1ffff1100b0a7580 [ 1720.153992][ C1] R10: dffffc0000000000 R11: ffffed100b0a7581 R12: 1ffff1100b0a758d [ 1720.162007][ C1] R13: ffffffff81a83684 R14: ffff88805853ac68 R15: dffffc0000000000 [ 1720.170003][ C1] FS: 000055556d528500(0000) GS:ffff888125d25000(0000) knlGS:0000000000000000 [ 1720.178991][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1720.185615][ C1] CR2: 0000200000003000 CR3: 0000000077a9a000 CR4: 00000000003526f0 [ 1720.193632][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1720.201174][ C1] Kernel Offset: disabled [ 1720.205500][ C1] Rebooting in 86400 seconds..